From c96f01883979f794d42b9b10c7245f695479abf4 Mon Sep 17 00:00:00 2001 From: Christopher Albert Date: Mon, 9 Nov 2026 00:51:05 +0100 Subject: [PATCH] Install Gitleaks on hosted runners too Consumers outside itpplasma run on GitHub's hosted runners, which do not carry Gitleaks. --- .github/workflows/repo-hygiene.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/repo-hygiene.yml b/.github/workflows/repo-hygiene.yml index 3c9e4bb..6f45c9a 100644 --- a/.github/workflows/repo-hygiene.yml +++ b/.github/workflows/repo-hygiene.yml @@ -55,8 +55,9 @@ jobs: ref: ${{ inputs.hygiene-revision }} path: .hygiene-tools persist-credentials: false + # The self-hosted runners carry Gitleaks; hosted ones need it installed. - name: Install pinned Gitleaks - if: github.event.pull_request.head.repo.fork + if: github.event.pull_request.head.repo.fork || github.repository_owner != 'itpplasma' run: | curl -fsSL https://github.com/gitleaks/gitleaks/releases/download/v8.30.1/gitleaks_8.30.1_linux_x64.tar.gz -o "$RUNNER_TEMP/gitleaks.tar.gz" echo "551f6fc83ea457d62a0d98237cbad105af8d557003051f41f3e7ca7b3f2470eb $RUNNER_TEMP/gitleaks.tar.gz" | sha256sum -c -