---
steps:
  gitleaks:
    image: zricethezav/gitleaks:v8.18.0
    commands:
      - gitleaks detect --no-git --verbose --source $CI_WORKSPACE
    when:
      event:
        exclude:
          - tag

  hadolint:
    image: hadolint/hadolint:latest-debian
    commands:
      - hadolint Dockerfile
    when:
      event:
        exclude:
          - tag

  shellcheck:
    image: koalaman/shellcheck-alpine:stable
    commands:
      - "find . -name *.sh -exec shellcheck {} +"
    when:
      event:
        exclude:
          - tag