Secret scan#13

Current runner version: '2.338.2'
▸ Runner Image Provisioner
Hosted Compute Agent
Version: 20261028.624
Commit: 54898b74c23fde5556c9b3c3a2290865feef0dfe
Build Date: 2026-10-28T21:51:42Z
Worker ID: {e21743e7-ef08-4068-8366-4bb0d5d8d197}
Region: eastus2
Cloud: Azure
▸ Operating System
Ubuntu
26.04.1
LTS
▸ Runner Image
Image: ubuntu-26.04
Version: 20261101.186.1
Included Software: https://github.com/actions/runner-images/blob/ubuntu26/20261101.186/images/ubuntu/Ubuntu2604-Readme.md
Image Release: https://github.com/actions/runner-images/releases/tag/ubuntu26%2F20261101.186
▸ GITHUB_TOKEN Permissions
Contents: read
Metadata: read
Secret source: Actions
Cache mode: write
Prepare workflow directory
Prepare all required actions
Getting action download info
Download action repository 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' (SHA:3d3c42e5aac5ba805825da76410c181273ba90b1)
Complete job name: gitleaks
▸ Run actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
with:
  fetch-depth: 0
  repository: screen-gd/Syllo
  token: ***
  ssh-strict: true
  ssh-user: git
  persist-credentials: true
  clean: true
  sparse-checkout-cone-mode: true
  fetch-tags: false
  show-progress: true
  lfs: false
  submodules: false
  set-safe-directory: true
  allow-unsafe-pr-checkout: false
Syncing repository: screen-gd/Syllo
▸ Getting Git version info
Working directory is '/home/runner/work/Syllo/Syllo'
[command]/usr/bin/git version
git version 2.56.0
Temporarily overriding HOME='/home/runner/work/_temp/ca67d958-dbe1-495d-92b0-b2360b3a167b' before making global git config changes
Adding repository directory to the temporary git global config as a safe directory
[command]/usr/bin/git config --global --add safe.directory /home/runner/work/Syllo/Syllo
Deleting the contents of '/home/runner/work/Syllo/Syllo'
▸ Determining repository object format
▸ Initializing the repository
[command]/usr/bin/git init /home/runner/work/Syllo/Syllo
hint: Using 'master' as the name for the initial branch. This default branch name
hint: will change to "main" in Git 3.0. To configure the initial branch name
hint: to use in all of your new repositories, which will suppress this warning,
hint: call:
hint:
hint: 	git config --global init.defaultBranch <name>
hint:
hint: Names commonly chosen instead of 'master' are 'main', 'trunk' and
hint: 'development'. The just-created branch can be renamed via this command:
hint:
hint: 	git branch -m <name>
hint:
hint: Disable this message with "git config set advice.defaultBranchName false"
Initialized empty Git repository in /home/runner/work/Syllo/Syllo/.git/
[command]/usr/bin/git remote add origin https://github.com/screen-gd/Syllo
▸ Disabling automatic garbage collection
[command]/usr/bin/git config --local gc.auto 0
▸ Setting up auth
Removing SSH command configuration
[command]/usr/bin/git config --local --name-only --get-regexp core\.sshCommand
[command]/usr/bin/git submodule foreach --recursive sh -c "git config --local --name-only --get-regexp 'core\.sshCommand' && git config --local --unset-all 'core.sshCommand' || :"
Removing HTTP extra header
[command]/usr/bin/git config --local --name-only --get-regexp http\.https\:\/\/github\.com\/\.extraheader
[command]/usr/bin/git submodule foreach --recursive sh -c "git config --local --name-only --get-regexp 'http\.https\:\/\/github\.com\/\.extraheader' && git config --local --unset-all 'http.https://github.com/.extraheader' || :"
Removing includeIf entries pointing to credentials config files
[command]/usr/bin/git config --local --name-only --get-regexp ^includeIf\.gitdir:
[command]/usr/bin/git submodule foreach --recursive git config --local --show-origin --name-only --get-regexp remote.origin.url
[command]/usr/bin/git config --file /home/runner/work/_temp/git-credentials-6ed0bc0e-d9ce-4c48-9c65-c3f15adfa966.config http.https://github.com/.extraheader AUTHORIZATION: basic ***
[command]/usr/bin/git config --local includeIf.gitdir:/home/runner/work/Syllo/Syllo/.git.path /home/runner/work/_temp/git-credentials-6ed0bc0e-d9ce-4c48-9c65-c3f15adfa966.config
[command]/usr/bin/git config --local includeIf.gitdir:/home/runner/work/Syllo/Syllo/.git/worktrees/*.path /home/runner/work/_temp/git-credentials-6ed0bc0e-d9ce-4c48-9c65-c3f15adfa966.config
[command]/usr/bin/git config --local includeIf.gitdir:/github/workspace/.git.path /github/runner_temp/git-credentials-6ed0bc0e-d9ce-4c48-9c65-c3f15adfa966.config
[command]/usr/bin/git config --local includeIf.gitdir:/github/workspace/.git/worktrees/*.path /github/runner_temp/git-credentials-6ed0bc0e-d9ce-4c48-9c65-c3f15adfa966.config
▸ Fetching the repository
[command]/usr/bin/git -c protocol.version=2 fetch --no-tags --prune --no-recurse-submodules origin +refs/heads/*:refs/remotes/origin/* +refs/tags/*:refs/tags/*
From https://github.com/screen-gd/Syllo
 * [new branch]      chore/bun-package-manager -> origin/chore/bun-package-manager
 * [new branch]      chore/repo-layout-tidy -> origin/chore/repo-layout-tidy
 * [new branch]      chore/trim-legacy      -> origin/chore/trim-legacy
 * [new branch]      feat/product-workspace-rebuild -> origin/feat/product-workspace-rebuild
 * [new branch]      feat/tanstack-start    -> origin/feat/tanstack-start
 * [new branch]      feat/video-ladder      -> origin/feat/video-ladder
 * [new branch]      main                   -> origin/main
 * [new branch]      security/oct-2026      -> origin/security/oct-2026
 * [new branch]      security/secret-scanning -> origin/security/secret-scanning
[command]/usr/bin/git branch --list --remote origin/main
  origin/main
[command]/usr/bin/git rev-parse refs/remotes/origin/main
2678e67cac961f1821a37f413d75cb0867edf07f
▸ Determining the checkout info
[command]/usr/bin/git sparse-checkout disable
[command]/usr/bin/git config --local --unset-all extensions.worktreeConfig
▸ Checking out the ref
[command]/usr/bin/git checkout --progress --force -B main refs/remotes/origin/main
Switched to a new branch 'main'
branch 'main' set up to track 'origin/main'.
[command]/usr/bin/git log -1 --format=%H
2678e67cac961f1821a37f413d75cb0867edf07f
▸ Run curl -sSfL -o gitleaks.tar.gz https://github.com/gitleaks/gitleaks/releases/download/v8.30.1/gitleaks_8.30.1_linux_x64.tar.gz
curl -sSfL -o gitleaks.tar.gz https://github.com/gitleaks/gitleaks/releases/download/v8.30.1/gitleaks_8.30.1_linux_x64.tar.gz
echo "551f6fc83ea457d62a0d98237cbad105af8d557003051f41f3e7ca7b3f2470eb  gitleaks.tar.gz" | sha256sum -c -
tar -xzf gitleaks.tar.gz gitleaks
shell: /usr/bin/bash -e {0}
gitleaks.tar.gz: OK
▸ Run ./gitleaks git . --redact --no-banner --log-opts="$RANGE"
./gitleaks git . --redact --no-banner --log-opts="$RANGE"
shell: /usr/bin/bash -e {0}
env:
  RANGE: 8749e6a65f3d97164fb74ec18f758fc2d4fe1745..2678e67cac961f1821a37f413d75cb0867edf07f
11:07AM INF 3 commits scanned.
11:07AM INF scanned ~368607 bytes (368.61 KB) in 203ms
11:07AM INF no leaks found
Post job cleanup.
[command]/usr/bin/git version
git version 2.56.0
Temporarily overriding HOME='/home/runner/work/_temp/903210a1-0876-4bd8-bed2-d004b094f736' before making global git config changes
Adding repository directory to the temporary git global config as a safe directory
[command]/usr/bin/git config --global --add safe.directory /home/runner/work/Syllo/Syllo
Removing SSH command configuration
[command]/usr/bin/git config --local --name-only --get-regexp core\.sshCommand
[command]/usr/bin/git submodule foreach --recursive sh -c "git config --local --name-only --get-regexp 'core\.sshCommand' && git config --local --unset-all 'core.sshCommand' || :"
Removing HTTP extra header
[command]/usr/bin/git config --local --name-only --get-regexp http\.https\:\/\/github\.com\/\.extraheader
[command]/usr/bin/git submodule foreach --recursive sh -c "git config --local --name-only --get-regexp 'http\.https\:\/\/github\.com\/\.extraheader' && git config --local --unset-all 'http.https://github.com/.extraheader' || :"
Removing includeIf entries pointing to credentials config files
[command]/usr/bin/git config --local --name-only --get-regexp ^includeIf\.gitdir:
includeif.gitdir:/home/runner/work/Syllo/Syllo/.git.path
includeif.gitdir:/home/runner/work/Syllo/Syllo/.git/worktrees/*.path
includeif.gitdir:/github/workspace/.git.path
includeif.gitdir:/github/workspace/.git/worktrees/*.path
[command]/usr/bin/git config --local --get-all includeif.gitdir:/home/runner/work/Syllo/Syllo/.git.path
/home/runner/work/_temp/git-credentials-6ed0bc0e-d9ce-4c48-9c65-c3f15adfa966.config
[command]/usr/bin/git config --local --unset includeif.gitdir:/home/runner/work/Syllo/Syllo/.git.path \/home\/runner\/work\/_temp\/git\-credentials\-6ed0bc0e\-d9ce\-4c48\-9c65\-c3f15adfa966\.config
[command]/usr/bin/git config --local --get-all includeif.gitdir:/home/runner/work/Syllo/Syllo/.git/worktrees/*.path
/home/runner/work/_temp/git-credentials-6ed0bc0e-d9ce-4c48-9c65-c3f15adfa966.config
[command]/usr/bin/git config --local --unset includeif.gitdir:/home/runner/work/Syllo/Syllo/.git/worktrees/*.path \/home\/runner\/work\/_temp\/git\-credentials\-6ed0bc0e\-d9ce\-4c48\-9c65\-c3f15adfa966\.config
[command]/usr/bin/git config --local --get-all includeif.gitdir:/github/workspace/.git.path
/github/runner_temp/git-credentials-6ed0bc0e-d9ce-4c48-9c65-c3f15adfa966.config
[command]/usr/bin/git config --local --unset includeif.gitdir:/github/workspace/.git.path \/github\/runner_temp\/git\-credentials\-6ed0bc0e\-d9ce\-4c48\-9c65\-c3f15adfa966\.config
[command]/usr/bin/git config --local --get-all includeif.gitdir:/github/workspace/.git/worktrees/*.path
/github/runner_temp/git-credentials-6ed0bc0e-d9ce-4c48-9c65-c3f15adfa966.config
[command]/usr/bin/git config --local --unset includeif.gitdir:/github/workspace/.git/worktrees/*.path \/github\/runner_temp\/git\-credentials\-6ed0bc0e\-d9ce\-4c48\-9c65\-c3f15adfa966\.config
[command]/usr/bin/git submodule foreach --recursive git config --local --show-origin --name-only --get-regexp remote.origin.url
Removing credentials config '/home/runner/work/_temp/git-credentials-6ed0bc0e-d9ce-4c48-9c65-c3f15adfa966.config'
Cleaning up orphan processes