WIP Security page #2325

	name: Scan for secrets

	on:
	push:
	pull_request:
	schedule:
	- cron: "49 21 * * *"
	workflow_dispatch:

	permissions:
	contents: read

	jobs:
	scan:
	runs-on: ubuntu-latest
	permissions:
	contents: write
	steps:
	- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
	with:
	fetch-depth: 0 # Fetch all history for all branches and tags
	- uses: gitleaks/gitleaks-action@83373cf2f8c4db6e24b41c1a9b086bb9619e9cd3 # v2.3.7
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # Used to comment on PRs
	GITLEAKS_VERSION: latest
	GITLEAKS_ENABLE_UPLOAD_ARTIFACT: false # Can re-enable when https://github.com/gitleaks/gitleaks/pull/1673 is released

Provide feedback