From 1330f0430805e1e30723ffc34d21a909a8b34a28 Mon Sep 17 00:00:00 2001
From: Marc Lasserre <marc.lasserre@gorym.fr>
Date: Thu, 6 Aug 2026 23:38:00 +0200
Subject: [PATCH] fix(ci): use ubuntu-latest container for gitleaks scan

Switch Gitleaks job to docker container execution to satisfy actions/checkout Node.js dependency.
---
 .gitea/workflows/test-ci.yml | 11 +++++------
 1 file changed, 5 insertions(+), 6 deletions(-)

diff --git a/.gitea/workflows/test-ci.yml b/.gitea/workflows/test-ci.yml
index 1a580bc..4199aa1 100644
--- a/.gitea/workflows/test-ci.yml
+++ b/.gitea/workflows/test-ci.yml
@@ -15,13 +15,12 @@ jobs:
 
   gitleaks-scan:
     name: Secret Detection (Gitleaks)
-    runs-on: host
+    runs-on: ubuntu-latest
     steps:
-      - name: Fetch Code
-        run: |
-          git config --global --add safe.directory "$PWD"
-          git fetch --all
-          git checkout $GITEA_SHA
+      - name: Check Out Code
+        uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
 
       - name: Run Gitleaks Scan
         run: |