Secret scan#7

Current runner version: '2.338.0'
▸ Runner Image Provisioner
Hosted Compute Agent
Version: 20261021.618
Commit: 21505ad2541d5be6135ed84fc33697146cf75b8e
Build Date: 2026-10-21T00:45:21Z
Worker ID: {80acabee-c10f-464e-95d0-26d2e2f6fa95}
Region: westus
Cloud: Azure
▸ Operating System
Ubuntu
26.04.1
LTS
▸ Runner Image
Image: ubuntu-26.04
Version: 20261012.163.1
Included Software: https://github.com/actions/runner-images/blob/ubuntu26/20261012.163/images/ubuntu/Ubuntu2604-Readme.md
Image Release: https://github.com/actions/runner-images/releases/tag/ubuntu26%2F20261012.163
▸ GITHUB_TOKEN Permissions
Contents: read
Metadata: read
Secret source: Actions
Cache mode: write
Prepare workflow directory
Prepare all required actions
Getting action download info
Download action repository 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' (SHA:3d3c42e5aac5ba805825da76410c181273ba90b1)
Complete job name: gitleaks
▸ Run actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
with:
  fetch-depth: 0
  repository: screen-gd/Syllo
  token: ***
  ssh-strict: true
  ssh-user: git
  persist-credentials: true
  clean: true
  sparse-checkout-cone-mode: true
  fetch-tags: false
  show-progress: true
  lfs: false
  submodules: false
  set-safe-directory: true
  allow-unsafe-pr-checkout: false
Syncing repository: screen-gd/Syllo
▸ Getting Git version info
Working directory is '/home/runner/work/Syllo/Syllo'
[command]/usr/bin/git version
git version 2.55.0
Temporarily overriding HOME='/home/runner/work/_temp/b209c882-5c38-492d-9c31-2a8c15e95206' before making global git config changes
Adding repository directory to the temporary git global config as a safe directory
[command]/usr/bin/git config --global --add safe.directory /home/runner/work/Syllo/Syllo
Deleting the contents of '/home/runner/work/Syllo/Syllo'
▸ Determining repository object format
▸ Initializing the repository
[command]/usr/bin/git init /home/runner/work/Syllo/Syllo
hint: Using 'master' as the name for the initial branch. This default branch name
hint: will change to "main" in Git 3.0. To configure the initial branch name
hint: to use in all of your new repositories, which will suppress this warning,
hint: call:
hint:
hint: 	git config --global init.defaultBranch <name>
hint:
hint: Names commonly chosen instead of 'master' are 'main', 'trunk' and
hint: 'development'. The just-created branch can be renamed via this command:
hint:
hint: 	git branch -m <name>
hint:
hint: Disable this message with "git config set advice.defaultBranchName false"
Initialized empty Git repository in /home/runner/work/Syllo/Syllo/.git/
[command]/usr/bin/git remote add origin https://github.com/screen-gd/Syllo
▸ Disabling automatic garbage collection
[command]/usr/bin/git config --local gc.auto 0
▸ Setting up auth
Removing SSH command configuration
[command]/usr/bin/git config --local --name-only --get-regexp core\.sshCommand
[command]/usr/bin/git submodule foreach --recursive sh -c "git config --local --name-only --get-regexp 'core\.sshCommand' && git config --local --unset-all 'core.sshCommand' || :"
Removing HTTP extra header
[command]/usr/bin/git config --local --name-only --get-regexp http\.https\:\/\/github\.com\/\.extraheader
[command]/usr/bin/git submodule foreach --recursive sh -c "git config --local --name-only --get-regexp 'http\.https\:\/\/github\.com\/\.extraheader' && git config --local --unset-all 'http.https://github.com/.extraheader' || :"
Removing includeIf entries pointing to credentials config files
[command]/usr/bin/git config --local --name-only --get-regexp ^includeIf\.gitdir:
[command]/usr/bin/git submodule foreach --recursive git config --local --show-origin --name-only --get-regexp remote.origin.url
[command]/usr/bin/git config --file /home/runner/work/_temp/git-credentials-66d45f11-af2c-4242-915e-efb298b0825f.config http.https://github.com/.extraheader AUTHORIZATION: basic ***
[command]/usr/bin/git config --local includeIf.gitdir:/home/runner/work/Syllo/Syllo/.git.path /home/runner/work/_temp/git-credentials-66d45f11-af2c-4242-915e-efb298b0825f.config
[command]/usr/bin/git config --local includeIf.gitdir:/home/runner/work/Syllo/Syllo/.git/worktrees/*.path /home/runner/work/_temp/git-credentials-66d45f11-af2c-4242-915e-efb298b0825f.config
[command]/usr/bin/git config --local includeIf.gitdir:/github/workspace/.git.path /github/runner_temp/git-credentials-66d45f11-af2c-4242-915e-efb298b0825f.config
[command]/usr/bin/git config --local includeIf.gitdir:/github/workspace/.git/worktrees/*.path /github/runner_temp/git-credentials-66d45f11-af2c-4242-915e-efb298b0825f.config
▸ Fetching the repository
[command]/usr/bin/git -c protocol.version=2 fetch --no-tags --prune --no-recurse-submodules origin +refs/heads/*:refs/remotes/origin/* +refs/tags/*:refs/tags/*
From https://github.com/screen-gd/Syllo
 * [new branch]      chore/repo-layout-tidy -> origin/chore/repo-layout-tidy
 * [new branch]      feat/product-workspace-rebuild -> origin/feat/product-workspace-rebuild
 * [new branch]      feat/tanstack-start    -> origin/feat/tanstack-start
 * [new branch]      feat/video-ladder      -> origin/feat/video-ladder
 * [new branch]      main                   -> origin/main
 * [new branch]      security/oct-2026      -> origin/security/oct-2026
 * [new branch]      security/secret-scanning -> origin/security/secret-scanning
[command]/usr/bin/git branch --list --remote origin/main
  origin/main
[command]/usr/bin/git rev-parse refs/remotes/origin/main
a0351e77e9f0c7dd4f40e5d93bd79b3890b786f7
▸ Determining the checkout info
[command]/usr/bin/git sparse-checkout disable
[command]/usr/bin/git config --local --unset-all extensions.worktreeConfig
▸ Checking out the ref
[command]/usr/bin/git checkout --progress --force -B main refs/remotes/origin/main
Switched to a new branch 'main'
branch 'main' set up to track 'origin/main'.
[command]/usr/bin/git log -1 --format=%H
a0351e77e9f0c7dd4f40e5d93bd79b3890b786f7
▸ Run curl -sSfL -o gitleaks.tar.gz https://github.com/gitleaks/gitleaks/releases/download/v8.30.1/gitleaks_8.30.1_linux_x64.tar.gz
curl -sSfL -o gitleaks.tar.gz https://github.com/gitleaks/gitleaks/releases/download/v8.30.1/gitleaks_8.30.1_linux_x64.tar.gz
echo "551f6fc83ea457d62a0d98237cbad105af8d557003051f41f3e7ca7b3f2470eb  gitleaks.tar.gz" | sha256sum -c -
tar -xzf gitleaks.tar.gz gitleaks
shell: /usr/bin/bash -e {0}
gitleaks.tar.gz: OK
▸ Run ./gitleaks git . --redact --no-banner --log-opts="$RANGE"
./gitleaks git . --redact --no-banner --log-opts="$RANGE"
shell: /usr/bin/bash -e {0}
env:
  RANGE: 2696d81f6f3c3dc8cf6abf3a1cf6f22352ff6a30..a0351e77e9f0c7dd4f40e5d93bd79b3890b786f7
3:33PM INF 2 commits scanned.
3:33PM INF scanned ~155972 bytes (155.97 KB) in 184ms
3:33PM INF no leaks found
Post job cleanup.
[command]/usr/bin/git version
git version 2.55.0
Temporarily overriding HOME='/home/runner/work/_temp/a7450cda-845d-4e1f-a142-0df8e0208b17' before making global git config changes
Adding repository directory to the temporary git global config as a safe directory
[command]/usr/bin/git config --global --add safe.directory /home/runner/work/Syllo/Syllo
Removing SSH command configuration
[command]/usr/bin/git config --local --name-only --get-regexp core\.sshCommand
[command]/usr/bin/git submodule foreach --recursive sh -c "git config --local --name-only --get-regexp 'core\.sshCommand' && git config --local --unset-all 'core.sshCommand' || :"
Removing HTTP extra header
[command]/usr/bin/git config --local --name-only --get-regexp http\.https\:\/\/github\.com\/\.extraheader
[command]/usr/bin/git submodule foreach --recursive sh -c "git config --local --name-only --get-regexp 'http\.https\:\/\/github\.com\/\.extraheader' && git config --local --unset-all 'http.https://github.com/.extraheader' || :"
Removing includeIf entries pointing to credentials config files
[command]/usr/bin/git config --local --name-only --get-regexp ^includeIf\.gitdir:
includeif.gitdir:/home/runner/work/Syllo/Syllo/.git.path
includeif.gitdir:/home/runner/work/Syllo/Syllo/.git/worktrees/*.path
includeif.gitdir:/github/workspace/.git.path
includeif.gitdir:/github/workspace/.git/worktrees/*.path
[command]/usr/bin/git config --local --get-all includeif.gitdir:/home/runner/work/Syllo/Syllo/.git.path
/home/runner/work/_temp/git-credentials-66d45f11-af2c-4242-915e-efb298b0825f.config
[command]/usr/bin/git config --local --unset includeif.gitdir:/home/runner/work/Syllo/Syllo/.git.path \/home\/runner\/work\/_temp\/git\-credentials\-66d45f11\-af2c\-4242\-915e\-efb298b0825f\.config
[command]/usr/bin/git config --local --get-all includeif.gitdir:/home/runner/work/Syllo/Syllo/.git/worktrees/*.path
/home/runner/work/_temp/git-credentials-66d45f11-af2c-4242-915e-efb298b0825f.config
[command]/usr/bin/git config --local --unset includeif.gitdir:/home/runner/work/Syllo/Syllo/.git/worktrees/*.path \/home\/runner\/work\/_temp\/git\-credentials\-66d45f11\-af2c\-4242\-915e\-efb298b0825f\.config
[command]/usr/bin/git config --local --get-all includeif.gitdir:/github/workspace/.git.path
/github/runner_temp/git-credentials-66d45f11-af2c-4242-915e-efb298b0825f.config
[command]/usr/bin/git config --local --unset includeif.gitdir:/github/workspace/.git.path \/github\/runner_temp\/git\-credentials\-66d45f11\-af2c\-4242\-915e\-efb298b0825f\.config
[command]/usr/bin/git config --local --get-all includeif.gitdir:/github/workspace/.git/worktrees/*.path
/github/runner_temp/git-credentials-66d45f11-af2c-4242-915e-efb298b0825f.config
[command]/usr/bin/git config --local --unset includeif.gitdir:/github/workspace/.git/worktrees/*.path \/github\/runner_temp\/git\-credentials\-66d45f11\-af2c\-4242\-915e\-efb298b0825f\.config
[command]/usr/bin/git submodule foreach --recursive git config --local --show-origin --name-only --get-regexp remote.origin.url
Removing credentials config '/home/runner/work/_temp/git-credentials-66d45f11-af2c-4242-915e-efb298b0825f.config'
Cleaning up orphan processes