---
when:
  - event: "push"
    branch: "main"

steps:

  # gitleaks
  - name: "gitleaks"
    # renovate: datasource=github-releases depName=gitleaks/gitleaks
    image: "cr.simoncor.net/ghcr/gitleaks/gitleaks:v8.30.1"
    commands:
      - "gitleaks detect --source . --verbose --redact"