Repository navigation

AGENTS.md: add persistent on-disk cache (diskcache) to 'when you need it' #11

	name: gitleaks

	on:
	push:
	branches: [main]
	pull_request:
	workflow_dispatch:

	concurrency:
	group: gitleaks-${{ github.ref }}
	cancel-in-progress: true

	permissions:
	contents: read

	jobs:
	scan:
	runs-on: ubuntu-latest
	timeout-minutes: 10
	steps:
	- uses: actions/checkout@v4
	with:
	fetch-depth: 0 # gitleaks needs full history to scan commit-by-commit

	- name: Install gitleaks
	run: \|
	set -euo pipefail
	version=8.21.2
	curl -sSL "https://github.com/gitleaks/gitleaks/releases/download/v${version}/gitleaks_${version}_linux_x64.tar.gz" \
	\| tar -xz -C /usr/local/bin gitleaks

	- name: Scan
	run: gitleaks detect --source . --redact --no-banner -v