fix(secrets): pass GITHUB_TOKEN to the gitleaks PR scan

This commit is contained in:
Rudy Celekli
2026-10-18 09:21:00 -04:00
parent 652b2692f8
commit 806e49bcbf
@@ -82,7 +82,9 @@ jobs:
- uses: actions/checkout@v4
with: { fetch-depth: 0 } # full history so an old leak is caught too
- uses: gitleaks/gitleaks-action@v2
env: { GITLEAKS_CONFIG: .gitleaks.toml } # allowlist known-public test fixtures
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # required by the action to scan pull_request events
GITLEAKS_CONFIG: .gitleaks.toml # allowlist known-public test fixtures
```
### Static Key → Dynamic, Short-Lived Credential