name: Secret Scan

on:
  push:
    branches:
      - "*"
  pull_request:
    branches:
      - "*"
  workflow_dispatch:

jobs:
  leakguard:
    name: LeakGuard secret scan
    runs-on: ubuntu-latest
    steps:
      - uses: gitwall/leakguard@v1
        with:
          fail-on-leak: "true"
          min-confidence: "0.75"