Secret scan#10

Current runner version: '2.338.2'
▸ Runner Image Provisioner
Hosted Compute Agent
Version: 20261028.624
Commit: 54898b74c23fde5556c9b3c3a2290865feef0dfe
Build Date: 2026-10-28T21:51:42Z
Worker ID: {5202cc00-6ce5-4296-928c-4e5afa655715}
Region: eastus2
Cloud: Azure
▸ Operating System
Ubuntu
26.04.1
LTS
▸ Runner Image
Image: ubuntu-26.04
Version: 20261101.186.1
Included Software: https://github.com/actions/runner-images/blob/ubuntu26/20261101.186/images/ubuntu/Ubuntu2604-Readme.md
Image Release: https://github.com/actions/runner-images/releases/tag/ubuntu26%2F20261101.186
▸ GITHUB_TOKEN Permissions
Contents: read
Metadata: read
Secret source: Actions
Cache mode: write
Prepare workflow directory
Prepare all required actions
Getting action download info
Download action repository 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' (SHA:3d3c42e5aac5ba805825da76410c181273ba90b1)
Complete job name: gitleaks
▸ Run actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
with:
  fetch-depth: 0
  repository: screen-gd/Syllo
  token: ***
  ssh-strict: true
  ssh-user: git
  persist-credentials: true
  clean: true
  sparse-checkout-cone-mode: true
  fetch-tags: false
  show-progress: true
  lfs: false
  submodules: false
  set-safe-directory: true
  allow-unsafe-pr-checkout: false
Syncing repository: screen-gd/Syllo
▸ Getting Git version info
Working directory is '/home/runner/work/Syllo/Syllo'
[command]/usr/bin/git version
git version 2.56.0
Temporarily overriding HOME='/home/runner/work/_temp/4d0563bb-d8e3-4a27-8581-814c0cba3182' before making global git config changes
Adding repository directory to the temporary git global config as a safe directory
[command]/usr/bin/git config --global --add safe.directory /home/runner/work/Syllo/Syllo
Deleting the contents of '/home/runner/work/Syllo/Syllo'
▸ Determining repository object format
▸ Initializing the repository
[command]/usr/bin/git init /home/runner/work/Syllo/Syllo
hint: Using 'master' as the name for the initial branch. This default branch name
hint: will change to "main" in Git 3.0. To configure the initial branch name
hint: to use in all of your new repositories, which will suppress this warning,
hint: call:
hint:
hint: 	git config --global init.defaultBranch <name>
hint:
hint: Names commonly chosen instead of 'master' are 'main', 'trunk' and
hint: 'development'. The just-created branch can be renamed via this command:
hint:
hint: 	git branch -m <name>
hint:
hint: Disable this message with "git config set advice.defaultBranchName false"
Initialized empty Git repository in /home/runner/work/Syllo/Syllo/.git/
[command]/usr/bin/git remote add origin https://github.com/screen-gd/Syllo
▸ Disabling automatic garbage collection
[command]/usr/bin/git config --local gc.auto 0
▸ Setting up auth
Removing SSH command configuration
[command]/usr/bin/git config --local --name-only --get-regexp core\.sshCommand
[command]/usr/bin/git submodule foreach --recursive sh -c "git config --local --name-only --get-regexp 'core\.sshCommand' && git config --local --unset-all 'core.sshCommand' || :"
Removing HTTP extra header
[command]/usr/bin/git config --local --name-only --get-regexp http\.https\:\/\/github\.com\/\.extraheader
[command]/usr/bin/git submodule foreach --recursive sh -c "git config --local --name-only --get-regexp 'http\.https\:\/\/github\.com\/\.extraheader' && git config --local --unset-all 'http.https://github.com/.extraheader' || :"
Removing includeIf entries pointing to credentials config files
[command]/usr/bin/git config --local --name-only --get-regexp ^includeIf\.gitdir:
[command]/usr/bin/git submodule foreach --recursive git config --local --show-origin --name-only --get-regexp remote.origin.url
[command]/usr/bin/git config --file /home/runner/work/_temp/git-credentials-3c21b593-e767-4226-a3c4-1a3a94e2d1e4.config http.https://github.com/.extraheader AUTHORIZATION: basic ***
[command]/usr/bin/git config --local includeIf.gitdir:/home/runner/work/Syllo/Syllo/.git.path /home/runner/work/_temp/git-credentials-3c21b593-e767-4226-a3c4-1a3a94e2d1e4.config
[command]/usr/bin/git config --local includeIf.gitdir:/home/runner/work/Syllo/Syllo/.git/worktrees/*.path /home/runner/work/_temp/git-credentials-3c21b593-e767-4226-a3c4-1a3a94e2d1e4.config
[command]/usr/bin/git config --local includeIf.gitdir:/github/workspace/.git.path /github/runner_temp/git-credentials-3c21b593-e767-4226-a3c4-1a3a94e2d1e4.config
[command]/usr/bin/git config --local includeIf.gitdir:/github/workspace/.git/worktrees/*.path /github/runner_temp/git-credentials-3c21b593-e767-4226-a3c4-1a3a94e2d1e4.config
▸ Fetching the repository
[command]/usr/bin/git -c protocol.version=2 fetch --no-tags --prune --no-recurse-submodules origin +refs/heads/*:refs/remotes/origin/* +refs/tags/*:refs/tags/* +9cc806c9606e38589bd2c292c625347339f644c3:refs/remotes/pull/21/merge
From https://github.com/screen-gd/Syllo
 * [new branch]      chore/bun-package-manager                -> origin/chore/bun-package-manager
 * [new branch]      chore/repo-layout-tidy                   -> origin/chore/repo-layout-tidy
 * [new branch]      chore/trim-legacy                        -> origin/chore/trim-legacy
 * [new branch]      feat/product-workspace-rebuild           -> origin/feat/product-workspace-rebuild
 * [new branch]      feat/tanstack-start                      -> origin/feat/tanstack-start
 * [new branch]      feat/video-ladder                        -> origin/feat/video-ladder
 * [new branch]      main                                     -> origin/main
 * [new branch]      security/oct-2026                        -> origin/security/oct-2026
 * [new branch]      security/secret-scanning                 -> origin/security/secret-scanning
 * [new ref]         9cc806c9606e38589bd2c292c625347339f644c3 -> pull/21/merge
▸ Determining the checkout info
[command]/usr/bin/git sparse-checkout disable
[command]/usr/bin/git config --local --unset-all extensions.worktreeConfig
▸ Checking out the ref
[command]/usr/bin/git checkout --progress --force refs/remotes/pull/21/merge
Note: switching to 'refs/remotes/pull/21/merge'.

You are in 'detached HEAD' state. You can look around, make experimental
changes and commit them, and you can discard any commits you make in this
state without impacting any branches by switching back to a branch.

If you want to create a new branch to retain commits you create, you may
do so (now or later) by using -c with the switch command. Example:

  git switch -c <new-branch-name>

Or undo this operation with:

  git switch -

Turn off this advice by setting config variable advice.detachedHead to false

HEAD is now at 9cc806c Merge 2f5453047b2333182991efb2d7ee2ab621d65c8a into 8749e6a65f3d97164fb74ec18f758fc2d4fe1745
[command]/usr/bin/git log -1 --format=%H
9cc806c9606e38589bd2c292c625347339f644c3
▸ Run curl -sSfL -o gitleaks.tar.gz https://github.com/gitleaks/gitleaks/releases/download/v8.30.1/gitleaks_8.30.1_linux_x64.tar.gz
curl -sSfL -o gitleaks.tar.gz https://github.com/gitleaks/gitleaks/releases/download/v8.30.1/gitleaks_8.30.1_linux_x64.tar.gz
echo "551f6fc83ea457d62a0d98237cbad105af8d557003051f41f3e7ca7b3f2470eb  gitleaks.tar.gz" | sha256sum -c -
tar -xzf gitleaks.tar.gz gitleaks
shell: /usr/bin/bash -e {0}
gitleaks.tar.gz: OK
▸ Run ./gitleaks git . --redact --no-banner --log-opts="$RANGE"
./gitleaks git . --redact --no-banner --log-opts="$RANGE"
shell: /usr/bin/bash -e {0}
env:
  RANGE: 8749e6a65f3d97164fb74ec18f758fc2d4fe1745..2f5453047b2333182991efb2d7ee2ab621d65c8a
11:30PM INF 1 commits scanned.
11:30PM INF scanned ~360114 bytes (360.11 KB) in 235ms
11:30PM INF no leaks found
Post job cleanup.
[command]/usr/bin/git version
git version 2.56.0
Temporarily overriding HOME='/home/runner/work/_temp/843a3e8e-2895-47f5-82dc-3e96db81fc2c' before making global git config changes
Adding repository directory to the temporary git global config as a safe directory
[command]/usr/bin/git config --global --add safe.directory /home/runner/work/Syllo/Syllo
Removing SSH command configuration
[command]/usr/bin/git config --local --name-only --get-regexp core\.sshCommand
[command]/usr/bin/git submodule foreach --recursive sh -c "git config --local --name-only --get-regexp 'core\.sshCommand' && git config --local --unset-all 'core.sshCommand' || :"
Removing HTTP extra header
[command]/usr/bin/git config --local --name-only --get-regexp http\.https\:\/\/github\.com\/\.extraheader
[command]/usr/bin/git submodule foreach --recursive sh -c "git config --local --name-only --get-regexp 'http\.https\:\/\/github\.com\/\.extraheader' && git config --local --unset-all 'http.https://github.com/.extraheader' || :"
Removing includeIf entries pointing to credentials config files
[command]/usr/bin/git config --local --name-only --get-regexp ^includeIf\.gitdir:
includeif.gitdir:/home/runner/work/Syllo/Syllo/.git.path
includeif.gitdir:/home/runner/work/Syllo/Syllo/.git/worktrees/*.path
includeif.gitdir:/github/workspace/.git.path
includeif.gitdir:/github/workspace/.git/worktrees/*.path
[command]/usr/bin/git config --local --get-all includeif.gitdir:/home/runner/work/Syllo/Syllo/.git.path
/home/runner/work/_temp/git-credentials-3c21b593-e767-4226-a3c4-1a3a94e2d1e4.config
[command]/usr/bin/git config --local --unset includeif.gitdir:/home/runner/work/Syllo/Syllo/.git.path \/home\/runner\/work\/_temp\/git\-credentials\-3c21b593\-e767\-4226\-a3c4\-1a3a94e2d1e4\.config
[command]/usr/bin/git config --local --get-all includeif.gitdir:/home/runner/work/Syllo/Syllo/.git/worktrees/*.path
/home/runner/work/_temp/git-credentials-3c21b593-e767-4226-a3c4-1a3a94e2d1e4.config
[command]/usr/bin/git config --local --unset includeif.gitdir:/home/runner/work/Syllo/Syllo/.git/worktrees/*.path \/home\/runner\/work\/_temp\/git\-credentials\-3c21b593\-e767\-4226\-a3c4\-1a3a94e2d1e4\.config
[command]/usr/bin/git config --local --get-all includeif.gitdir:/github/workspace/.git.path
/github/runner_temp/git-credentials-3c21b593-e767-4226-a3c4-1a3a94e2d1e4.config
[command]/usr/bin/git config --local --unset includeif.gitdir:/github/workspace/.git.path \/github\/runner_temp\/git\-credentials\-3c21b593\-e767\-4226\-a3c4\-1a3a94e2d1e4\.config
[command]/usr/bin/git config --local --get-all includeif.gitdir:/github/workspace/.git/worktrees/*.path
/github/runner_temp/git-credentials-3c21b593-e767-4226-a3c4-1a3a94e2d1e4.config
[command]/usr/bin/git config --local --unset includeif.gitdir:/github/workspace/.git/worktrees/*.path \/github\/runner_temp\/git\-credentials\-3c21b593\-e767\-4226\-a3c4\-1a3a94e2d1e4\.config
[command]/usr/bin/git submodule foreach --recursive git config --local --show-origin --name-only --get-regexp remote.origin.url
Removing credentials config '/home/runner/work/_temp/git-credentials-3c21b593-e767-4226-a3c4-1a3a94e2d1e4.config'
Cleaning up orphan processes