name: Gitleaks

on: [push, pull_request]

permissions:
  contents: read

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v6
    - name: Gitleaks
      run: |
        docker run --user $(id -u):1000 -v .:/path ghcr.io/gitleaks/gitleaks:latest dir /path -v -c /path/gitleaks.toml
