Secret scan#16

Current runner version: '2.338.2'
▸ Runner Image Provisioner
Hosted Compute Agent
Version: 20261103.629
Commit: 15dbd9ccb5dbf34fae002b6ed1a2670f52df37bc
Build Date: 2026-11-03T17:26:59Z
Worker ID: {cc04bdd2-f612-4a3c-869d-970bc204ee02}
Region: westus2
Cloud: Azure
▸ Operating System
Ubuntu
26.04.1
LTS
▸ Runner Image
Image: ubuntu-26.04
Version: 20261111.196.1
Included Software: https://github.com/actions/runner-images/blob/ubuntu26/20261111.196/images/ubuntu/Ubuntu2604-Readme.md
Image Release: https://github.com/actions/runner-images/releases/tag/ubuntu26%2F20261111.196
▸ GITHUB_TOKEN Permissions
Contents: read
Metadata: read
Secret source: Actions
Cache mode: write
Prepare workflow directory
Prepare all required actions
Getting action download info
Download action repository 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' (SHA:3d3c42e5aac5ba805825da76410c181273ba90b1)
Complete job name: gitleaks
▸ Run actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
with:
  fetch-depth: 0
  repository: screen-gd/Syllo
  token: ***
  ssh-strict: true
  ssh-user: git
  persist-credentials: true
  clean: true
  sparse-checkout-cone-mode: true
  fetch-tags: false
  show-progress: true
  lfs: false
  submodules: false
  set-safe-directory: true
  allow-unsafe-pr-checkout: false
Syncing repository: screen-gd/Syllo
▸ Getting Git version info
Working directory is '/home/runner/work/Syllo/Syllo'
[command]/usr/bin/git version
git version 2.56.1
Temporarily overriding HOME='/home/runner/work/_temp/f09e6e1b-9516-425d-95b8-5969941c40bd' before making global git config changes
Adding repository directory to the temporary git global config as a safe directory
[command]/usr/bin/git config --global --add safe.directory /home/runner/work/Syllo/Syllo
Deleting the contents of '/home/runner/work/Syllo/Syllo'
▸ Determining repository object format
▸ Initializing the repository
[command]/usr/bin/git init /home/runner/work/Syllo/Syllo
hint: Using 'master' as the name for the initial branch. This default branch name
hint: will change to "main" in Git 3.0. To configure the initial branch name
hint: to use in all of your new repositories, which will suppress this warning,
hint: call:
hint:
hint: 	git config --global init.defaultBranch <name>
hint:
hint: Names commonly chosen instead of 'master' are 'main', 'trunk' and
hint: 'development'. The just-created branch can be renamed via this command:
hint:
hint: 	git branch -m <name>
hint:
hint: Disable this message with "git config set advice.defaultBranchName false"
Initialized empty Git repository in /home/runner/work/Syllo/Syllo/.git/
[command]/usr/bin/git remote add origin https://github.com/screen-gd/Syllo
▸ Disabling automatic garbage collection
[command]/usr/bin/git config --local gc.auto 0
▸ Setting up auth
Removing SSH command configuration
[command]/usr/bin/git config --local --name-only --get-regexp core\.sshCommand
[command]/usr/bin/git submodule foreach --recursive sh -c "git config --local --name-only --get-regexp 'core\.sshCommand' && git config --local --unset-all 'core.sshCommand' || :"
Removing HTTP extra header
[command]/usr/bin/git config --local --name-only --get-regexp http\.https\:\/\/github\.com\/\.extraheader
[command]/usr/bin/git submodule foreach --recursive sh -c "git config --local --name-only --get-regexp 'http\.https\:\/\/github\.com\/\.extraheader' && git config --local --unset-all 'http.https://github.com/.extraheader' || :"
Removing includeIf entries pointing to credentials config files
[command]/usr/bin/git config --local --name-only --get-regexp ^includeIf\.gitdir:
[command]/usr/bin/git submodule foreach --recursive git config --local --show-origin --name-only --get-regexp remote.origin.url
[command]/usr/bin/git config --file /home/runner/work/_temp/git-credentials-5bc20c61-eaac-45e8-9d8f-56dd6f63f0a4.config http.https://github.com/.extraheader AUTHORIZATION: basic ***
[command]/usr/bin/git config --local includeIf.gitdir:/home/runner/work/Syllo/Syllo/.git.path /home/runner/work/_temp/git-credentials-5bc20c61-eaac-45e8-9d8f-56dd6f63f0a4.config
[command]/usr/bin/git config --local includeIf.gitdir:/home/runner/work/Syllo/Syllo/.git/worktrees/*.path /home/runner/work/_temp/git-credentials-5bc20c61-eaac-45e8-9d8f-56dd6f63f0a4.config
[command]/usr/bin/git config --local includeIf.gitdir:/github/workspace/.git.path /github/runner_temp/git-credentials-5bc20c61-eaac-45e8-9d8f-56dd6f63f0a4.config
[command]/usr/bin/git config --local includeIf.gitdir:/github/workspace/.git/worktrees/*.path /github/runner_temp/git-credentials-5bc20c61-eaac-45e8-9d8f-56dd6f63f0a4.config
▸ Fetching the repository
[command]/usr/bin/git -c protocol.version=2 fetch --no-tags --prune --no-recurse-submodules origin +refs/heads/*:refs/remotes/origin/* +refs/tags/*:refs/tags/* +dea791d5decebd6d102305e08b81e80d54af6614:refs/remotes/pull/22/merge
From https://github.com/screen-gd/Syllo
 * [new branch]      chore/bun-package-manager                -> origin/chore/bun-package-manager
 * [new branch]      chore/repo-layout-tidy                   -> origin/chore/repo-layout-tidy
 * [new branch]      chore/trim-legacy                        -> origin/chore/trim-legacy
 * [new branch]      feat/product-workspace-rebuild           -> origin/feat/product-workspace-rebuild
 * [new branch]      feat/screen-time-focus                   -> origin/feat/screen-time-focus
 * [new branch]      feat/tanstack-start                      -> origin/feat/tanstack-start
 * [new branch]      feat/video-ladder                        -> origin/feat/video-ladder
 * [new branch]      main                                     -> origin/main
 * [new branch]      security/oct-2026                        -> origin/security/oct-2026
 * [new branch]      security/secret-scanning                 -> origin/security/secret-scanning
 * [new ref]         dea791d5decebd6d102305e08b81e80d54af6614 -> pull/22/merge
▸ Determining the checkout info
[command]/usr/bin/git sparse-checkout disable
[command]/usr/bin/git config --local --unset-all extensions.worktreeConfig
▸ Checking out the ref
[command]/usr/bin/git checkout --progress --force refs/remotes/pull/22/merge
Note: switching to 'refs/remotes/pull/22/merge'.

You are in 'detached HEAD' state. You can look around, make experimental
changes and commit them, and you can discard any commits you make in this
state without impacting any branches by switching back to a branch.

If you want to create a new branch to retain commits you create, you may
do so (now or later) by using -c with the switch command. Example:

  git switch -c <new-branch-name>

Or undo this operation with:

  git switch -

Turn off this advice by setting config variable advice.detachedHead to false

HEAD is now at dea791d Merge 2d108a648c894865a279d57b94b835ca3afc12f3 into 2678e67cac961f1821a37f413d75cb0867edf07f
[command]/usr/bin/git log -1 --format=%H
dea791d5decebd6d102305e08b81e80d54af6614
▸ Run curl -sSfL -o gitleaks.tar.gz https://github.com/gitleaks/gitleaks/releases/download/v8.30.1/gitleaks_8.30.1_linux_x64.tar.gz
curl -sSfL -o gitleaks.tar.gz https://github.com/gitleaks/gitleaks/releases/download/v8.30.1/gitleaks_8.30.1_linux_x64.tar.gz
echo "551f6fc83ea457d62a0d98237cbad105af8d557003051f41f3e7ca7b3f2470eb  gitleaks.tar.gz" | sha256sum -c -
tar -xzf gitleaks.tar.gz gitleaks
shell: /usr/bin/bash -e {0}
gitleaks.tar.gz: OK
▸ Run ./gitleaks git . --redact --no-banner --log-opts="$RANGE"
./gitleaks git . --redact --no-banner --log-opts="$RANGE"
shell: /usr/bin/bash -e {0}
env:
  RANGE: 2678e67cac961f1821a37f413d75cb0867edf07f..2d108a648c894865a279d57b94b835ca3afc12f3
8:54PM INF 3 commits scanned.
8:54PM INF scanned ~55200 bytes (55.20 KB) in 182ms
8:54PM INF no leaks found
Post job cleanup.
[command]/usr/bin/git version
git version 2.56.1
Temporarily overriding HOME='/home/runner/work/_temp/383d9ec0-5653-4a04-8bba-7e2bd34949b4' before making global git config changes
Adding repository directory to the temporary git global config as a safe directory
[command]/usr/bin/git config --global --add safe.directory /home/runner/work/Syllo/Syllo
Removing SSH command configuration
[command]/usr/bin/git config --local --name-only --get-regexp core\.sshCommand
[command]/usr/bin/git submodule foreach --recursive sh -c "git config --local --name-only --get-regexp 'core\.sshCommand' && git config --local --unset-all 'core.sshCommand' || :"
Removing HTTP extra header
[command]/usr/bin/git config --local --name-only --get-regexp http\.https\:\/\/github\.com\/\.extraheader
[command]/usr/bin/git submodule foreach --recursive sh -c "git config --local --name-only --get-regexp 'http\.https\:\/\/github\.com\/\.extraheader' && git config --local --unset-all 'http.https://github.com/.extraheader' || :"
Removing includeIf entries pointing to credentials config files
[command]/usr/bin/git config --local --name-only --get-regexp ^includeIf\.gitdir:
includeif.gitdir:/home/runner/work/Syllo/Syllo/.git.path
includeif.gitdir:/home/runner/work/Syllo/Syllo/.git/worktrees/*.path
includeif.gitdir:/github/workspace/.git.path
includeif.gitdir:/github/workspace/.git/worktrees/*.path
[command]/usr/bin/git config --local --get-all includeif.gitdir:/home/runner/work/Syllo/Syllo/.git.path
/home/runner/work/_temp/git-credentials-5bc20c61-eaac-45e8-9d8f-56dd6f63f0a4.config
[command]/usr/bin/git config --local --unset includeif.gitdir:/home/runner/work/Syllo/Syllo/.git.path \/home\/runner\/work\/_temp\/git\-credentials\-5bc20c61\-eaac\-45e8\-9d8f\-56dd6f63f0a4\.config
[command]/usr/bin/git config --local --get-all includeif.gitdir:/home/runner/work/Syllo/Syllo/.git/worktrees/*.path
/home/runner/work/_temp/git-credentials-5bc20c61-eaac-45e8-9d8f-56dd6f63f0a4.config
[command]/usr/bin/git config --local --unset includeif.gitdir:/home/runner/work/Syllo/Syllo/.git/worktrees/*.path \/home\/runner\/work\/_temp\/git\-credentials\-5bc20c61\-eaac\-45e8\-9d8f\-56dd6f63f0a4\.config
[command]/usr/bin/git config --local --get-all includeif.gitdir:/github/workspace/.git.path
/github/runner_temp/git-credentials-5bc20c61-eaac-45e8-9d8f-56dd6f63f0a4.config
[command]/usr/bin/git config --local --unset includeif.gitdir:/github/workspace/.git.path \/github\/runner_temp\/git\-credentials\-5bc20c61\-eaac\-45e8\-9d8f\-56dd6f63f0a4\.config
[command]/usr/bin/git config --local --get-all includeif.gitdir:/github/workspace/.git/worktrees/*.path
/github/runner_temp/git-credentials-5bc20c61-eaac-45e8-9d8f-56dd6f63f0a4.config
[command]/usr/bin/git config --local --unset includeif.gitdir:/github/workspace/.git/worktrees/*.path \/github\/runner_temp\/git\-credentials\-5bc20c61\-eaac\-45e8\-9d8f\-56dd6f63f0a4\.config
[command]/usr/bin/git submodule foreach --recursive git config --local --show-origin --name-only --get-regexp remote.origin.url
Removing credentials config '/home/runner/work/_temp/git-credentials-5bc20c61-eaac-45e8-9d8f-56dd6f63f0a4.config'
Cleaning up orphan processes