tanshu 2aab1aec1e Add secret scanning, layout checks, and a --changed mode ...

gitleaks runs before each commit and in CI, with known values in a redacted baseline. The layout check rejects empty readmes and main.yml role entrypoints. --changed lints only the YAML files that differ from HEAD.

2026-10-18 21:53:29 +05:30

..

workflows

Add secret scanning, layout checks, and a --changed mode

2026-10-18 21:53:29 +05:30