From a50106202ddd80dab3792838b96689af0c8a1871 Mon Sep 17 00:00:00 2001 From: Sebastian Mendel Date: Sun, 2 Aug 2026 13:45:56 +0200 Subject: [PATCH] chore: stop forwarding the deprecated GITLEAKS_LICENSE secret Secret scanning runs on betterleaks, which is OSS and needs no license. The shared gitleaks reusable declares GITLEAKS_LICENSE only for backwards compatibility and never reads it, and the org-level secret has been deleted, so this workflow was handing an empty value to an input that ignores it. Only the mapping line is removed; the enclosing `secrets:` key goes with it only when nothing else was left under it. Other secrets in the same block are untouched. Signed-off-by: Sebastian Mendel --- .github/workflows/ci.yml | 1 - 1 file changed, 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index ff727e9..c41cc12 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -56,7 +56,6 @@ jobs: enable-codeql: false secrets: CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }} - GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE }} # The bash suites are driven through python-ci's test step (it runs the # command with `bash -c` from the repo root), so no step-level action is