Skip to content

fix: use official gitleaks-action to fix 404 on version fetch#19

Merged
nusmql merged 2 commits intomainfrom
fix/gitleaks-and-cleanup
Apr 7, 2026
Merged

fix: use official gitleaks-action to fix 404 on version fetch#19
nusmql merged 2 commits intomainfrom
fix/gitleaks-and-cleanup

Conversation

@nusmql
Copy link
Copy Markdown
Collaborator

@nusmql nusmql commented Apr 7, 2026

Summary

  • Replace manual curl gitleaks installation with official gitleaks/gitleaks-action@v2
  • Fixes 404 error caused by unauthenticated GitHub API rate limiting when fetching latest gitleaks release

Test plan

  • Verify security workflow runs successfully on PR
  • Confirm gitleaks secret scanning passes

🤖 Generated with Claude Code

…fetch

The manual curl to GitHub API for latest gitleaks release was failing
with 404 due to rate limiting on unauthenticated requests.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@nusmql nusmql assigned nusmql and unassigned nusmql Apr 7, 2026
gitleaks-action@v2 requires a paid license for organization repos.
Pin gitleaks v8.30.1 via go install to avoid both the license
requirement and the GitHub API 404 on unauthenticated version fetch.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@nusmql nusmql merged commit 5e19808 into main Apr 7, 2026
13 checks passed
@nusmql nusmql deleted the fix/gitleaks-and-cleanup branch April 7, 2026 15:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant