Skip to content

Replace gitleaks-action with OSS binary for private repo#3

Merged
rapdev-turner merged 2 commits intomainfrom
fix/secret-scan-gitleaks-oss
Mar 19, 2026
Merged

Replace gitleaks-action with OSS binary for private repo#3
rapdev-turner merged 2 commits intomainfrom
fix/secret-scan-gitleaks-oss

Conversation

@rapdev-turner
Copy link
Copy Markdown
Collaborator

Summary

  • gitleaks/gitleaks-action@v2 requires a paid Gitleaks license when used on private repositories
  • Replaces it with a direct OSS binary install, matching the pattern in dd-foundations-practice
  • Behavior is identical: full git history scan with --redact --verbose --exit-code 1

Test plan

  • Confirm Secret Scan job passes in CI on this PR
  • Verify no license-related error in the run logs

Remove publication notes and open-source license placeholder; replace
with private access and usage notice.
gitleaks/gitleaks-action@v2 requires a paid license for private
repositories. Switch to direct binary install matching the pattern
used in dd-foundations-practice.
@rapdev-turner rapdev-turner merged commit afcaa44 into main Mar 19, 2026
9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants