fix: ignore baseline if path was not relative in source

[raffis]

Description:

There is currently a bug with the baseline ignore.

If gitleaks is not executed in the current directory and --source is used to specify a custom path, the baseline file is not ignored correctly because the relative file paths do not match. That check is done in Detect().

This will currently report secrets in the baseline file, however the baseline file should be excluded.

gitleaks detect --report-format json --verbose --log-level debug --baseline-path ~/foo/.gitleaks.baseline.json --source ~/foo

Basically as for now the baseline only works if gitleaks is executed directly in the target repository and the baseline path is set relative to it.
This pr fixes that bug so the baseline path is resolved correctly and can be compared during fragments check no matter what directory.

Checklist:

• Does your PR pass tests?
• Have you written new tests for your changes?
• Have you lint your code locally prior to submission?

[jit-ci]

Hi, I’m Jit, a friendly security platform designed to help developers build secure applications from day zero with an MVS (Minimal viable security) mindset.

In case there are security findings, they will be communicated to you as a comment inside the PR.

Hope you’ll enjoy using Jit.

Questions? Comments? Want to learn more? Get in touch with us.

[jit-ci]

❌ Jit has detected 1 important finding in this PR that you should review.
The finding is detailed below as a comment.
It’s highly recommended that you fix this security issue before merge.

[jit-ci]

Security control: Secret Detection

Type: Discord-Api-Token

Description: Discord API key

Severity: HIGH

---

Jit Bot commands and options (e.g., ignore issue)

You can trigger Jit actions by commenting on this PR review:

• #jit_ignore_fp Ignore and mark this specific single instance of finding as “False Positive”
• #jit_ignore_accept Ignore and mark this specific single instance of finding as “Accept Risk”
• #jit_undo_ignore Undo ignore command

[raffis]

#jit_ignore_fp

[zricethezav]

@raffis thank you for this!