Merge branch 'ni/assert-atlas-search' into ni/atlas-search

Author: nirinchev

.github/workflows/code-health-fork.yml

@@ -39,9 +39,18 @@ jobs:
         env:
           SKIP_ATLAS_TESTS: "true"
           SKIP_ATLAS_LOCAL_TESTS: "true"
-      - name: Upload test results
-        if: always() && matrix.os == 'ubuntu-latest'
-        uses: actions/upload-artifact@v5
+  run-atlas-local-tests:
+    name: Run Atlas Local tests
+    if: github.event.pull_request.user.login == 'dependabot[bot]'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: GitHubSecurityLab/actions-permissions/monitor@v1
+      - uses: actions/checkout@v5
+      - uses: actions/setup-node@v4
         with:
-          name: test-results
-          path: coverage/lcov.info
+          node-version-file: package.json
+          cache: "npm"
+      - name: Install dependencies
+        run: npm ci
+      - name: Run tests
+        run: npm test -- tests/integration/tools/atlas-local/

.github/workflows/code-health.yml

@@ -115,17 +115,17 @@ jobs:
       - name: Install dependencies
         run: npm ci
       - name: Download test results
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@v6
         with:
           name: test-results
           path: coverage/mongodb
       - name: Download atlas test results
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@v6
         with:
           name: atlas-test-results
           path: coverage/atlas
       - name: Download atlas local test results
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@v6
         with:
           name: atlas-local-test-results
           path: coverage/atlas-local
@@ -136,3 +136,22 @@ jobs:
         uses: coverallsapp/github-action@v2.3.6
         with:
           file: coverage/lcov.info
+
+  run-git-secrets:
+    name: Run git secrets
+    if: github.event_name == 'push' || (github.event.pull_request.user.login != 'dependabot[bot]' && github.event.pull_request.head.repo.full_name == github.repository)
+    runs-on: ubuntu-latest
+    steps:
+      - uses: GitHubSecurityLab/actions-permissions/monitor@v1
+      - uses: actions/checkout@v5
+        with:
+          persist-credentials: false
+      - uses: actions/setup-node@v6
+        with:
+          node-version-file: package.json
+          cache: "npm"
+      - name: Install dependencies
+        run: |
+          sudo apt-get install -y git-secrets
+      - name: Run git-secrets
+        run: git-secrets --register-aws && git-secrets --scan

.husky/pre-commit

@@ -0,0 +1,10 @@
+#!/bin/bash
+
+if [ ! "$(which git-secrets)" ]
+then
+   echo "git-secrets is not installed. Please run 'brew install git-secrets' or visit https://github.com/awslabs/git-secrets#installing-git-secrets"
+   exit 1
+fi
+
+git-secrets --register-aws > /dev/null
+git-secrets --scan