diff --git a/.github/workflows/pr-checks.yml b/.github/workflows/pr-checks.yml index f128c67..4d06704 100644 --- a/.github/workflows/pr-checks.yml +++ b/.github/workflows/pr-checks.yml @@ -44,7 +44,10 @@ jobs: - uses: actions/checkout@v5 with: fetch-depth: 0 - - uses: gitleaks/gitleaks-action@v2 - env: - GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE }} + - name: Scan repository history for secrets + run: >- + docker run --rm + -v "$GITHUB_WORKSPACE:/repo:ro" + -w /repo + ghcr.io/gitleaks/gitleaks:v8.30.1 + detect --source=/repo --redact --no-banner