Automatic Scanning: Gitleaks runs automatically on every pull request to
the master branch and for every push to the master branch. This ensures that
new code is checked before merging
Scheduled Scans: Gitleaks scans are scheduled to run once a day, ensuring
regular codebase checks even without new commits
Workflow Dispatch: Allows for manual triggering of the Gitleaks scan,
providing flexibility for ad-hoc code analysis
GitHub Action Workflow: The Gitleaks integration is set up as a part of
the GitHub Actions workflow in the .github/workflows/gitleaks.yml file in
each repo
Gitleaks rules: The rules for Gitleaks used by the workflow are specified
in .github/gitleaks-rules.toml
Running Environment: The workflow runs on ubuntu-latest and uses GitHub
action gitleaks/gitleaks-action@v2 available on the marketplace