From 8f1de518b6137a39dcbfd814db05a7c77e22d787 Mon Sep 17 00:00:00 2001
From: xnoto <steven@makeitwork.cloud>
Date: Fri, 31 Jul 2026 00:35:41 -0600
Subject: [PATCH] ci: add full-tree secret scanning

---
 .pre-commit-config.yaml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 03878cb..2e4c24b 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -10,9 +10,17 @@ repos:
       - id: check-toml
       - id: check-added-large-files
       - id: check-merge-conflict
+      - id: detect-private-key
       - id: debug-statements
       - id: mixed-line-ending
 
+  - repo: https://github.com/gitleaks/gitleaks
+    rev: v8.30.1
+    hooks:
+      - id: gitleaks
+        entry: gitleaks dir --redact --verbose .
+        pass_filenames: false
+
   - repo: https://github.com/astral-sh/ruff-pre-commit
     rev: v0.11.0
     hooks: