From 477dcfde72efc6b67dc8fbf043077d2458cd5b77 Mon Sep 17 00:00:00 2001 From: Sebastian Mendel Date: Sat, 1 Aug 2026 15:33:54 +0200 Subject: [PATCH] ci: drop the deprecated GITLEAKS_LICENSE secret mapping Syncs netresearch/.github#330. Secret scanning runs on betterleaks, which is OSS and needs no license; the reusable declares GITLEAKS_LICENSE only for backwards compatibility and never reads it. Passing the secret was dead plumbing that widened the exposure surface for no benefit. Keeps this file byte-identical to the template, which the drift check enforces. Signed-off-by: Sebastian Mendel --- .github/workflows/gitleaks.yml | 2 -- 1 file changed, 2 deletions(-) diff --git a/.github/workflows/gitleaks.yml b/.github/workflows/gitleaks.yml index d541c7c..2274f3f 100644 --- a/.github/workflows/gitleaks.yml +++ b/.github/workflows/gitleaks.yml @@ -14,5 +14,3 @@ jobs: permissions: contents: read security-events: write - secrets: - GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE }}