From 56db4d26da5188657ee9339ff078fdd05fd58186 Mon Sep 17 00:00:00 2001
From: user <user@rpios.local>
Date: Sat, 21 Feb 2026 17:41:39 +0100
Subject: [PATCH] fix: run gitleaks via container instead of broken binary
 download

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 .gitea/workflows/ci.yaml | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/.gitea/workflows/ci.yaml b/.gitea/workflows/ci.yaml
index 3b230e3..6394b4b 100644
--- a/.gitea/workflows/ci.yaml
+++ b/.gitea/workflows/ci.yaml
@@ -23,9 +23,10 @@ jobs:
         with:
           fetch-depth: 0
       - run: |
-          curl -sSfL https://github.com/gitleaks/gitleaks/releases/latest/download/gitleaks_8.24.0_linux_x64.tar.gz \
-            | tar xz -C /usr/local/bin gitleaks
-      - run: gitleaks detect --source . -v
+          docker run --rm \
+            -v "$PWD:/scan:ro" \
+            ghcr.io/gitleaks/gitleaks:latest \
+            detect --source /scan -v
 
   build:
     needs: [test, secrets]