chore(ci): setup ggshield CI check

Author: agateau-gg

.github/workflows/test.yml

@@ -2,9 +2,7 @@ name: Go
 
 on:
   push:
-    branches: [main]
   pull_request:
-    branches: [main]
 
 jobs:
   golangci:
@@ -37,6 +35,23 @@ jobs:
         run: |
           go test -race $(go list ./...) -v -coverprofile=.coverage.out
           go tool cover -func=.coverage.out
+  ggshield:
+    name: Scan code with ggshield
+    runs-on: ubuntu-latest
+    if: github.event_name == 'push'
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v2
+        with:
+          fetch-depth: 0 # fetch all history so multiple commits can be scanned
+      - name: Scan code with ggshield
+        uses: GitGuardian/ggshield-action@master
+        env:
+          GITHUB_PUSH_BEFORE_SHA: ${{ github.event.before }}
+          GITHUB_PUSH_BASE_SHA: ${{ github.event.base }}
+          GITHUB_PULL_BASE_SHA: ${{ github.event.pull_request.base.sha }}
+          GITHUB_DEFAULT_BRANCH: ${{ github.event.repository.default_branch }}
+          GITGUARDIAN_API_KEY: ${{ secrets.GITGUARDIAN_API_KEY }}
   integration-tests:
     name: Integration Tests
     runs-on: ${{ matrix.os }}