name: gitleaks
on:
  push:
    branches: [ master ]
  pull_request:

jobs:
  shellcheck:
    steps:
      - name: Run shellcheck # https://gitea.com/gitea/act_runner/issues/189
        uses: addnab/docker-run-action@v3
        with:
          image: koalaman/shellcheck-alpine:v0.10.0
          run: |
            find . -type f -not -path './.git/*' -not -path './collections/*' -exec file {} \; | while IFS= read -r line; do
              if echo "$line" | grep -q "shell script"; then
                file_path=$(echo "$line" | awk -F':' '{print $1}')
                shellcheck "$file_path"
              fi
            done