Skip to content

Conversation

@rubenmarcus
Copy link
Member

Summary

  • Removes the Gitleaks secret detection job from the security scanning workflow — GitHub's built-in secret scanning already covers this
  • Cleans up the .gitleaks.toml reference from auto-label config

Changes

  • .github/workflows/security.yml: removed gitleaks job (CodeQL, dependency review, and OSSF Scorecard remain)
  • .github/workflows/auto-label.yml: removed .gitleaks.toml from security label paths

Note

The Cloudflare Pages deploy workflow (deploy-docs.yml in PR #168) already triggers only on docs/** changes — no update needed.

Test plan

  • Verify security workflow still runs CodeQL, dependency review, and OSSF Scorecard
  • Verify auto-labeling still works for security-related files

🤖 Generated with Claude Code

GitHub's built-in secret scanning covers this. Removes the gitleaks job
from the security workflow and cleans up the .gitleaks.toml reference
from auto-label.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@rubenmarcus rubenmarcus merged commit 5ce4ff9 into main Feb 11, 2026
10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant