new test

.github/workflows/detect-secrets.yml

@@ -38,13 +38,14 @@ jobs:
       # troubleshooting
       - name: all in one
         run: |
-          docker run -a stdout \
+          docker run --pull=always -a stdout \
           -v ${{github.workspace}}:/code \
-          --entrypoint /bin/bash \
+          --entrypoint /bin/sh \
           icr.io/git-defenders/detect-secrets:0.13.1.ibm.61.dss-redhat-ubi \
-          -c "pwd; ls -al; detect-secrets --version; detect-secrets --help; detect-secrets scan --help; detect-secrets -v scan --all-files --update .secrets.baseline 2>&1; echo scan over; ls -al; echo the end" 
-      #-c "pwd; ls -al; detect-secrets -v scan /code --update /code/.secrets.baseline; sleep 10; ls -al; detect-secrets audit --display-results /code/.secrets.baseline" 
-
+          -c "detect-secrets --version; 
+              detect-secrets scan --all-files --update .secrets.baseline; 
+              detect-secrets audit --display-results .secrets.baseline; 
+              detect-secrets audit --report --fail-on-unaudited --fail-on-live --fail-on-audited-real .secrets.baseline" 
 
       # fail if a potential secret was found
           # -v ${{ github.workspace }}:/code \