---
gitleaks_scan:
  image: ghcr.io/zricethezav/gitleaks/v8:latest
  stage: test
  tags: [gitleaks, scan]
  script:
    - gitleaks detect --source=. --config=gitleaks.toml --report-format=json --report-path=gitleaks-report.json
  allow_failure: false
  only: [main, testing, merge_requests]
  artifacts:
    when: always
    paths: [gitleaks-report.json]
    expire_in: 1 week