name: Gitleaks

on:
  push:
  pull_request:
  workflow_dispatch:

jobs:
  gitleaks:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Install Gitleaks
        run: |
          wget -q https://github.com/gitleaks/gitleaks/releases/download/v8.24.2/gitleaks_8.24.2_linux_x64.tar.gz
          tar -xzf gitleaks_8.24.2_linux_x64.tar.gz
          chmod +x gitleaks

      - name: Run Gitleaks
        run: ./gitleaks dir . --config .gitleaks.toml --verbose