From df87eb95ed0c9bfa791b3693cc5983bdad1483a1 Mon Sep 17 00:00:00 2001 From: Laith Al-Saadoon Date: Sat, 16 May 2026 23:32:53 +0000 Subject: [PATCH] fix(ci): pre-release gate aggregator needs betterleaks (was detect-secrets) --- .github/workflows/pre-release-gate.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/pre-release-gate.yml b/.github/workflows/pre-release-gate.yml index df07a29..949b9ef 100644 --- a/.github/workflows/pre-release-gate.yml +++ b/.github/workflows/pre-release-gate.yml @@ -9,7 +9,7 @@ # # - npm-audit at high+ severity # - pnpm lockfile integrity (frozen + no lifecycle scripts) -# - detect-secrets full sweep +# - betterleaks full sweep (with the vendored default config) # - license allowlist re-assertion # - aggregate "all checks green" gate that blocks merge if anything failed # @@ -113,7 +113,7 @@ jobs: needs: - npm-audit - lockfile-integrity - - detect-secrets + - betterleaks - licenses-reassert if: always() runs-on: ubuntu-latest