Secret scan#8

Current runner version: '2.338.2'
▸ Runner Image Provisioner
Hosted Compute Agent
Version: 20261021.618
Commit: 21505ad2541d5be6135ed84fc33697146cf75b8e
Build Date: 2026-10-21T00:45:21Z
Worker ID: {198cbc06-2301-4d31-84d6-2580850684f1}
Region: eastus2
Cloud: Azure
▸ Operating System
Ubuntu
26.04.1
LTS
▸ Runner Image
Image: ubuntu-26.04
Version: 20261025.179.1
Included Software: https://github.com/actions/runner-images/blob/ubuntu26/20261025.179/images/ubuntu/Ubuntu2604-Readme.md
Image Release: https://github.com/actions/runner-images/releases/tag/ubuntu26%2F20261025.179
▸ GITHUB_TOKEN Permissions
Contents: read
Metadata: read
Secret source: Actions
Cache mode: write
Prepare workflow directory
Prepare all required actions
Getting action download info
Download action repository 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' (SHA:3d3c42e5aac5ba805825da76410c181273ba90b1)
Complete job name: gitleaks
▸ Run actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
with:
  fetch-depth: 0
  repository: screen-gd/Syllo
  token: ***
  ssh-strict: true
  ssh-user: git
  persist-credentials: true
  clean: true
  sparse-checkout-cone-mode: true
  fetch-tags: false
  show-progress: true
  lfs: false
  submodules: false
  set-safe-directory: true
  allow-unsafe-pr-checkout: false
Syncing repository: screen-gd/Syllo
▸ Getting Git version info
Working directory is '/home/runner/work/Syllo/Syllo'
[command]/usr/bin/git version
git version 2.56.0
Temporarily overriding HOME='/home/runner/work/_temp/ead75974-cad8-4af9-98ed-1631e43891b5' before making global git config changes
Adding repository directory to the temporary git global config as a safe directory
[command]/usr/bin/git config --global --add safe.directory /home/runner/work/Syllo/Syllo
Deleting the contents of '/home/runner/work/Syllo/Syllo'
▸ Determining repository object format
▸ Initializing the repository
[command]/usr/bin/git init /home/runner/work/Syllo/Syllo
hint: Using 'master' as the name for the initial branch. This default branch name
hint: will change to "main" in Git 3.0. To configure the initial branch name
hint: to use in all of your new repositories, which will suppress this warning,
hint: call:
hint:
hint: 	git config --global init.defaultBranch <name>
hint:
hint: Names commonly chosen instead of 'master' are 'main', 'trunk' and
hint: 'development'. The just-created branch can be renamed via this command:
hint:
hint: 	git branch -m <name>
hint:
hint: Disable this message with "git config set advice.defaultBranchName false"
Initialized empty Git repository in /home/runner/work/Syllo/Syllo/.git/
[command]/usr/bin/git remote add origin https://github.com/screen-gd/Syllo
▸ Disabling automatic garbage collection
[command]/usr/bin/git config --local gc.auto 0
▸ Setting up auth
Removing SSH command configuration
[command]/usr/bin/git config --local --name-only --get-regexp core\.sshCommand
[command]/usr/bin/git submodule foreach --recursive sh -c "git config --local --name-only --get-regexp 'core\.sshCommand' && git config --local --unset-all 'core.sshCommand' || :"
Removing HTTP extra header
[command]/usr/bin/git config --local --name-only --get-regexp http\.https\:\/\/github\.com\/\.extraheader
[command]/usr/bin/git submodule foreach --recursive sh -c "git config --local --name-only --get-regexp 'http\.https\:\/\/github\.com\/\.extraheader' && git config --local --unset-all 'http.https://github.com/.extraheader' || :"
Removing includeIf entries pointing to credentials config files
[command]/usr/bin/git config --local --name-only --get-regexp ^includeIf\.gitdir:
[command]/usr/bin/git submodule foreach --recursive git config --local --show-origin --name-only --get-regexp remote.origin.url
[command]/usr/bin/git config --file /home/runner/work/_temp/git-credentials-123b9781-b779-4aba-8ed9-bb058903c452.config http.https://github.com/.extraheader AUTHORIZATION: basic ***
[command]/usr/bin/git config --local includeIf.gitdir:/home/runner/work/Syllo/Syllo/.git.path /home/runner/work/_temp/git-credentials-123b9781-b779-4aba-8ed9-bb058903c452.config
[command]/usr/bin/git config --local includeIf.gitdir:/home/runner/work/Syllo/Syllo/.git/worktrees/*.path /home/runner/work/_temp/git-credentials-123b9781-b779-4aba-8ed9-bb058903c452.config
[command]/usr/bin/git config --local includeIf.gitdir:/github/workspace/.git.path /github/runner_temp/git-credentials-123b9781-b779-4aba-8ed9-bb058903c452.config
[command]/usr/bin/git config --local includeIf.gitdir:/github/workspace/.git/worktrees/*.path /github/runner_temp/git-credentials-123b9781-b779-4aba-8ed9-bb058903c452.config
▸ Fetching the repository
[command]/usr/bin/git -c protocol.version=2 fetch --no-tags --prune --no-recurse-submodules origin +refs/heads/*:refs/remotes/origin/* +refs/tags/*:refs/tags/*
From https://github.com/screen-gd/Syllo
 * [new branch]      chore/repo-layout-tidy -> origin/chore/repo-layout-tidy
 * [new branch]      feat/product-workspace-rebuild -> origin/feat/product-workspace-rebuild
 * [new branch]      feat/tanstack-start    -> origin/feat/tanstack-start
 * [new branch]      feat/video-ladder      -> origin/feat/video-ladder
 * [new branch]      main                   -> origin/main
 * [new branch]      security/oct-2026      -> origin/security/oct-2026
 * [new branch]      security/secret-scanning -> origin/security/secret-scanning
[command]/usr/bin/git branch --list --remote origin/main
  origin/main
[command]/usr/bin/git rev-parse refs/remotes/origin/main
8749e6a65f3d97164fb74ec18f758fc2d4fe1745
▸ Determining the checkout info
[command]/usr/bin/git sparse-checkout disable
[command]/usr/bin/git config --local --unset-all extensions.worktreeConfig
▸ Checking out the ref
[command]/usr/bin/git checkout --progress --force -B main refs/remotes/origin/main
Switched to a new branch 'main'
branch 'main' set up to track 'origin/main'.
[command]/usr/bin/git log -1 --format=%H
8749e6a65f3d97164fb74ec18f758fc2d4fe1745
▸ Run curl -sSfL -o gitleaks.tar.gz https://github.com/gitleaks/gitleaks/releases/download/v8.30.1/gitleaks_8.30.1_linux_x64.tar.gz
curl -sSfL -o gitleaks.tar.gz https://github.com/gitleaks/gitleaks/releases/download/v8.30.1/gitleaks_8.30.1_linux_x64.tar.gz
echo "551f6fc83ea457d62a0d98237cbad105af8d557003051f41f3e7ca7b3f2470eb  gitleaks.tar.gz" | sha256sum -c -
tar -xzf gitleaks.tar.gz gitleaks
shell: /usr/bin/bash -e {0}
gitleaks.tar.gz: OK
▸ Run ./gitleaks git . --redact --no-banner --log-opts="$RANGE"
./gitleaks git . --redact --no-banner --log-opts="$RANGE"
shell: /usr/bin/bash -e {0}
env:
  RANGE: a0351e77e9f0c7dd4f40e5d93bd79b3890b786f7..8749e6a65f3d97164fb74ec18f758fc2d4fe1745
10:50AM INF 2 commits scanned.
10:50AM INF scanned ~80946 bytes (80.95 KB) in 187ms
10:50AM INF no leaks found
Post job cleanup.
[command]/usr/bin/git version
git version 2.56.0
Temporarily overriding HOME='/home/runner/work/_temp/d90161f4-fe08-4eaa-943f-6756146a5298' before making global git config changes
Adding repository directory to the temporary git global config as a safe directory
[command]/usr/bin/git config --global --add safe.directory /home/runner/work/Syllo/Syllo
Removing SSH command configuration
[command]/usr/bin/git config --local --name-only --get-regexp core\.sshCommand
[command]/usr/bin/git submodule foreach --recursive sh -c "git config --local --name-only --get-regexp 'core\.sshCommand' && git config --local --unset-all 'core.sshCommand' || :"
Removing HTTP extra header
[command]/usr/bin/git config --local --name-only --get-regexp http\.https\:\/\/github\.com\/\.extraheader
[command]/usr/bin/git submodule foreach --recursive sh -c "git config --local --name-only --get-regexp 'http\.https\:\/\/github\.com\/\.extraheader' && git config --local --unset-all 'http.https://github.com/.extraheader' || :"
Removing includeIf entries pointing to credentials config files
[command]/usr/bin/git config --local --name-only --get-regexp ^includeIf\.gitdir:
includeif.gitdir:/home/runner/work/Syllo/Syllo/.git.path
includeif.gitdir:/home/runner/work/Syllo/Syllo/.git/worktrees/*.path
includeif.gitdir:/github/workspace/.git.path
includeif.gitdir:/github/workspace/.git/worktrees/*.path
[command]/usr/bin/git config --local --get-all includeif.gitdir:/home/runner/work/Syllo/Syllo/.git.path
/home/runner/work/_temp/git-credentials-123b9781-b779-4aba-8ed9-bb058903c452.config
[command]/usr/bin/git config --local --unset includeif.gitdir:/home/runner/work/Syllo/Syllo/.git.path \/home\/runner\/work\/_temp\/git\-credentials\-123b9781\-b779\-4aba\-8ed9\-bb058903c452\.config
[command]/usr/bin/git config --local --get-all includeif.gitdir:/home/runner/work/Syllo/Syllo/.git/worktrees/*.path
/home/runner/work/_temp/git-credentials-123b9781-b779-4aba-8ed9-bb058903c452.config
[command]/usr/bin/git config --local --unset includeif.gitdir:/home/runner/work/Syllo/Syllo/.git/worktrees/*.path \/home\/runner\/work\/_temp\/git\-credentials\-123b9781\-b779\-4aba\-8ed9\-bb058903c452\.config
[command]/usr/bin/git config --local --get-all includeif.gitdir:/github/workspace/.git.path
/github/runner_temp/git-credentials-123b9781-b779-4aba-8ed9-bb058903c452.config
[command]/usr/bin/git config --local --unset includeif.gitdir:/github/workspace/.git.path \/github\/runner_temp\/git\-credentials\-123b9781\-b779\-4aba\-8ed9\-bb058903c452\.config
[command]/usr/bin/git config --local --get-all includeif.gitdir:/github/workspace/.git/worktrees/*.path
/github/runner_temp/git-credentials-123b9781-b779-4aba-8ed9-bb058903c452.config
[command]/usr/bin/git config --local --unset includeif.gitdir:/github/workspace/.git/worktrees/*.path \/github\/runner_temp\/git\-credentials\-123b9781\-b779\-4aba\-8ed9\-bb058903c452\.config
[command]/usr/bin/git submodule foreach --recursive git config --local --show-origin --name-only --get-regexp remote.origin.url
Removing credentials config '/home/runner/work/_temp/git-credentials-123b9781-b779-4aba-8ed9-bb058903c452.config'
Cleaning up orphan processes