presignput register/confirm #12

	name: secret-scan

	# Server-side backstop for the pre-commit gitleaks hook: even if someone commits
	# without hooks installed, this fails the push/PR when a secret is detected.
	on:
	push:
	branches: ["**"]
	pull_request:
	workflow_dispatch:

	permissions:
	contents: read

	jobs:
	gitleaks:
	name: gitleaks
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	with:
	# Full history so gitleaks scans every commit in the range, not just
	# the tip. Required for meaningful push/PR scanning.
	fetch-depth: 0
	- name: Run gitleaks
	uses: gitleaks/gitleaks-action@v2
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	# gitleaks-action is free for personal accounts and public repos. For a
	# GitHub organization it requires a (free) GITLEAKS_LICENSE:
	# https://github.com/gitleaks/gitleaks-action#organizations
	# GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE }}

Navigation Menu