Feat/secretlint

.github/.secretlintrc.json

@@ -0,0 +1,35 @@
+{
+  "rules": [
+    {
+      "id": "@secretlint/secretlint-rule-preset-recommend"
+    },
+    {
+      "id": "@secretlint/secretlint-rule-pattern",
+      "options": {
+        "patterns": [
+          {
+            "name": "Zhipu AI API Key",
+            "pattern": "/[a-f0-9]{32}\\.[a-zA-Z0-9]{16,}/g",
+            "message": "Found a potential Zhipu AI API Key"
+          },
+          {
+            "name": "Some Cloud Vendor Secret Key",
+            "pattern": "/secret-[a-zA-Z0-9]{40}/g",
+            "message": "Found a potential Some Cloud Vendor Secret Key"
+          },
+          {
+            "name": "Some Map Service Access Token",
+            "pattern": "/token-[a-f0-9]{24}-[a-f0-9]{12}/g",
+            "message": "Found a potential Some Map Service Access Token"
+          },
+          {
+            "name": "Qwen API Key",
+            "pattern": "/sk-[a-f0-9]{32}/g",
+            "message": "Found a potential Qwen API Key"
+          }
+        ]
+      }
+    }
+  ]
+}
+

.github/workflows/secretlint.yml

@@ -0,0 +1,19 @@
+name: Secretlint
+on: [push, pull_request]
+permissions:
+  contents: read
+jobs:
+  test:
+    name: "Secretlint"
+    runs-on: ubuntu-latest
+    steps:
+      - name: checkout
+        uses: actions/checkout@v4
+      - name: setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+      - name: Install
+        run: npm ci
+      - name: Lint with Secretlint
+        run: npx secretlint --secretlintrc ./.github/.secretlintrc.json "**/*"

.gitignore

@@ -163,4 +163,5 @@ cython_debug/
 #  option (not recommended) you can uncomment the following to ignore the entire idea folder.
 #.idea/
 
-translations/*
+translations/*
+node_modules/*