jared 371ed8116f Fix Python runner; add gitleaks secret scanning ...

- All Python jobs now install python3-pip via apt first (runner image
  has no pip by default)
- Added secret-scan job: gitleaks v8.21.2 scans full git history on
  every push/PR with --redact to avoid leaking found secrets in logs
- Added .gitleaks.toml allowlisting deploy/hooks-lxc*.json files
  (webhook HMAC secrets are intentional config, not leaks)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-04-20 16:29:14 -04:00

..

workflows

Fix Python runner; add gitleaks secret scanning

2026-04-20 16:29:14 -04:00