fix(installation): query the openscience Chocolatey package for latest-version lookup #151

	name: Secret scan

	on:
	push:
	branches: [main]
	pull_request:
	workflow_dispatch:

	concurrency:
	group: gitleaks-${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	permissions:
	contents: read

	env:
	GITLEAKS_VERSION: 8.30.1
	# sha256 of gitleaks_8.30.1_linux_x64.tar.gz, from the release's checksums.txt
	GITLEAKS_SHA256: 551f6fc83ea457d62a0d98237cbad105af8d557003051f41f3e7ca7b3f2470eb

	jobs:
	gitleaks:
	name: Gitleaks
	runs-on: ubuntu-latest
	timeout-minutes: 15
	steps:
	- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
	with:
	fetch-depth: 0
	- name: Install gitleaks
	run: \|
	curl -sSL -o gitleaks.tar.gz "https://github.com/gitleaks/gitleaks/releases/download/v${GITLEAKS_VERSION}/gitleaks_${GITLEAKS_VERSION}_linux_x64.tar.gz"
	echo "${GITLEAKS_SHA256} gitleaks.tar.gz" \| sha256sum -c -
	tar -xzf gitleaks.tar.gz gitleaks
	sudo install gitleaks /usr/local/bin/gitleaks
	- name: Scan working tree
	run: gitleaks dir . --redact --exit-code 1
	# `dir` only sees the checkout; a secret committed and later deleted
	# passes it forever. `git` mode scans the full fetched history.
	- name: Scan git history
	run: gitleaks git . --redact --exit-code 1

Provide feedback