git leaks

.github/workflows/codeql.yml

@@ -1,18 +1,7 @@
 name: CodeQL
 
 on:
-  # push:
-  #   branches:
-  #     - main
-  #     - patch-release
-  #     - next
-  #     - "!renovate/**"
-  # pull_request:
-  #   branches:
-  #     - main
-  #     - patch-release
-  #     - next
-  #     - "!renovate/**"
+  pull_request:
   workflow_dispatch:
 
 permissions:

.github/workflows/deploy.yml

@@ -2,14 +2,14 @@ name: deploy
 
 on:
   workflow_dispatch:
-  workflow_run:
-    workflows:
-      - reviewdog
-    types:
-      - completed
-  # push:
-  #   branches:
-  #     - 'main'
+  # workflow_run:
+  #   workflows:
+  #     - reviewdog
+  #   types:
+  #     - completed
+  push:
+    branches:
+      - 'main'
 env:
   REGISTRY: ghcr.io
   IMAGE_NAME: ${{ github.repository }}

.github/workflows/gitleaks.yml

@@ -0,0 +1,22 @@
+name: gitleaks
+
+on:
+  pull_request:
+  workflow_dispatch:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  scan:
+    name: gitleaks
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+      - uses: gitleaks/gitleaks-action@v2
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE}} # Only required for Organizations, not personal accounts.