Enabling gitleaks on the repo

.github/workflows/package_quality.yml

@@ -1,21 +1,21 @@
 name: Package quality
-on: [ push, pull_request ]
+on: [push, pull_request]
 jobs:
   ruff:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
       - uses: chartboost/ruff-action@v1
         with:
-          args: 'format --check'
+          args: "format --check"
   #type-completeness:
-    #runs-on: ubuntu-latest
-    #steps:
-      #- uses: Bibo-Joshi/[email protected]
-        #with:
-          #package-name: 'temporal-adjuster'
-          #python-version: '3.12'
-          #pyright-version: '~=1.1.160'
+  #runs-on: ubuntu-latest
+  #steps:
+  #- uses: Bibo-Joshi/[email protected]
+  #with:
+  #package-name: 'temporal-adjuster'
+  #python-version: '3.12'
+  #pyright-version: '~=1.1.160'
   coverage:
     runs-on: ubuntu-latest
     steps:
@@ -48,12 +48,23 @@ jobs:
           args: '--min-confidence 70 --exclude "*/docs/*,setup.py"'
 
   security:
-      runs-on: ubuntu-latest
-      steps:
-        - uses: actions/checkout@master
-        - name: Run Snyk to check for vulnerabilities
-          uses: snyk/actions/node@master
-          env:
-            SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
-          with:
-            command: monitor
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@master
+      - name: Run Snyk to check for vulnerabilities
+        uses: snyk/actions/node@master
+        env:
+          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+        with:
+          command: monitor
+
+  scan:
+    name: gitleaks
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - uses: gitleaks/gitleaks-action@v2
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.pre-commit-config.yaml

@@ -20,3 +20,7 @@ repos:
       - id: ruff
         args: [ --fix ]
       - id: ruff-format
+  - repo: https://github.com/gitleaks/gitleaks
+    rev: v8.19.3
+    hooks:
+      - id: gitleaks