diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
index 532eeb4a..892f49f3 100644
--- a/.github/CODEOWNERS
+++ b/.github/CODEOWNERS
@@ -1,18 +1,22 @@
 # NHS Notify Code Owners
 
 # Notify default owners
-*                           @NHSDigital/nhs-notify-repository-template
+*                             @NHSDigital/nhs-notify-repository-template
 
-/.github/                   @NHSDigital/nhs-notify-repository-template-admins
-*.code-workspace            @NHSDigital/nhs-notify-repository-template-admins
-/infrastructure/terraform/  @NHSDigital/nhs-notify-platform
+/.github/                     @NHSDigital/nhs-notify-repository-template-admins
+*.code-workspace              @NHSDigital/nhs-notify-repository-template-admins
+/infrastructure/terraform/    @NHSDigital/nhs-notify-platform
 
 # Root level AGENTS.md owned by platform.
 AGENTS.md
 
+# Gitleaks files owned by platform
+.gitleaksignore               @NHSDigital/nhs-notify-platform
+/scrips/config/gitleaks.toml  @NHSDigital/nhs-notify-platform
+
 # Codeowners must be final check
-/.github/CODEOWNERS         @NHSDigital/nhs-notify-code-owners
-/CODEOWNERS                 @NHSDigital/nhs-notify-code-owners
+/.github/CODEOWNERS           @NHSDigital/nhs-notify-code-owners
+/CODEOWNERS                   @NHSDigital/nhs-notify-code-owners
 
 
 # Each NHS Notify repository should have clear code owners set.
diff --git a/.github/workflows/stage-1-commit.yaml b/.github/workflows/stage-1-commit.yaml
index 685c982b..aba22c13 100644
--- a/.github/workflows/stage-1-commit.yaml
+++ b/.github/workflows/stage-1-commit.yaml
@@ -52,7 +52,7 @@ jobs:
         with:
           fetch-depth: 0 # Full history is needed to scan all commits
       - name: "Scan secrets"
-        uses: NHSDigital/nhs-notify-shared-modules/.github/actions/scan-secrets@4.0.5
+        uses: NHSDigital/nhs-notify-shared-modules/.github/actions/scan-secrets@5.0.1
   check-file-format:
     name: "Check file format"
     runs-on: ubuntu-latest
@@ -63,7 +63,7 @@ jobs:
         with:
           fetch-depth: 0 # Full history is needed to compare branches
       - name: "Check file format"
-        uses: NHSDigital/nhs-notify-shared-modules/.github/actions/check-file-format@4.0.5
+        uses: NHSDigital/nhs-notify-shared-modules/.github/actions/check-file-format@5.0.1
   check-markdown-format:
     name: "Check Markdown format"
     runs-on: ubuntu-latest
@@ -74,7 +74,7 @@ jobs:
         with:
           fetch-depth: 0 # Full history is needed to compare branches
       - name: "Check Markdown format"
-        uses: NHSDigital/nhs-notify-shared-modules/.github/actions/check-markdown-format@4.0.5
+        uses: NHSDigital/nhs-notify-shared-modules/.github/actions/check-markdown-format@5.0.1
   terraform-docs:
     name: "Run terraform-docs"
     runs-on: ubuntu-latest
@@ -109,7 +109,7 @@ jobs:
         with:
           fetch-depth: 0 # Full history is needed to compare branches
       - name: "Check English usage"
-        uses: NHSDigital/nhs-notify-shared-modules/.github/actions/check-english-usage@4.0.5
+        uses: NHSDigital/nhs-notify-shared-modules/.github/actions/check-english-usage@5.0.1
   check-todo-usage:
     name: "Check TODO usage"
     runs-on: ubuntu-latest
@@ -120,7 +120,7 @@ jobs:
         with:
           fetch-depth: 0 # Full history is needed to compare branches
       - name: "Check TODO usage"
-        uses: NHSDigital/nhs-notify-shared-modules/.github/actions/check-todo-usage@4.0.5
+        uses: NHSDigital/nhs-notify-shared-modules/.github/actions/check-todo-usage@5.0.1
   detect-terraform-changes:
     name: "Detect Terraform Changes"
     runs-on: ubuntu-latest
@@ -156,7 +156,7 @@ jobs:
       - name: "Setup ASDF"
         uses: asdf-vm/actions/setup@b7bcd026f18772e44fe1026d729e1611cc435d47 # v4.0.1
       - name: "Lint Terraform"
-        uses: NHSDigital/nhs-notify-shared-modules/.github/actions/lint-terraform@4.0.5
+        uses: NHSDigital/nhs-notify-shared-modules/.github/actions/lint-terraform@5.0.1
   #TODO - Re-visit Trivy usage https://nhsd-jira.digital.nhs.uk/browse/CCM-15549
   # trivy-iac:
   #   name: "Trivy IaC Scan"
@@ -198,7 +198,7 @@ jobs:
       - name: "Checkout code"
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: "Count lines of code"
-        uses: NHSDigital/nhs-notify-shared-modules/.github/actions/create-lines-of-code-report@4.0.5
+        uses: NHSDigital/nhs-notify-shared-modules/.github/actions/create-lines-of-code-report@5.0.1
         with:
           build_datetime: "${{ inputs.build_datetime }}"
           build_timestamp: "${{ inputs.build_timestamp }}"
diff --git a/scripts/config/pre-commit.yaml b/scripts/config/pre-commit.yaml
index c5f2353c..324a71ab 100644
--- a/scripts/config/pre-commit.yaml
+++ b/scripts/config/pre-commit.yaml
@@ -17,11 +17,11 @@ repos:
     # -   id: ...
 
   - repo: https://github.com/NHSDigital/nhs-notify-shared-modules
-    rev: 3.1.2
+    rev: 5.0.1
     hooks:
       - id: sort-dictionary
       - id: scan-secrets
-        args: [check=whole-history]
+        args: [check=staged-changes]
       - id: check-file-format
         args: [check=branch]
       - id: check-markdown-format