fix(ci): use official gitleaks action
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 0s Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Failing after 32s Details

Replace manual curl binary download with gitleaks/gitleaks-action to resolve CLI flag parsing issues.
This commit is contained in:
Marc Lasserre 2026-08-06 23:41:36 +02:00
parent 1330f04308
commit 5eacabb167
Signed by: M7s
GPG Key ID: F74837410959661B
1 changed files with 4 additions and 6 deletions

View File

@ -22,9 +22,7 @@ jobs:
with: with:
fetch-depth: 0 fetch-depth: 0
- name: Run Gitleaks Scan - name: Run Gitleaks
run: | uses: gitleaks/gitleaks-action@v2
echo "🔍 Lancement du scan Gitleaks..." env:
curl -sSFL https://github.com/gitleaks/gitleaks/releases/download/v8.18.2/gitleaks_8.18.2_linux_x64.tar.gz | tar -xz gitleaks GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
./gitleaks detect --source . -v
rm gitleaks