Picket Secret Scanner

Version updated for https://github.com/willibrandon/picket to version v0.2.11.

  • This action is used across all versions by 2 repositories.

Action Type

This is a Composite action.

Go to the GitHub Marketplace to find the latest changes.

Action Summary

Picket is a MIT-licensed secrets scanner for .NET that provides a Gitleaks-compatible command surface, Native AOT release binaries, dotnet tool packages, and embeddable libraries. It automates scanning staged, unstaged, and untracked non-ignored Git changes, as well as GitLab issues, comments, releases, and release assets using various authentication methods. The action supports CI integrations through GitHub Actions and Azure DevOps, with options for customizing reports and handling findings.

What’s Changed

Release artifacts include SHA-256 checksums, package-size metadata, and GitHub artifact attestations.