Gitleaks Security Folder

.githooks/pre-commit

@@ -9,15 +9,15 @@ if command -v gitleaks >/dev/null 2>&1; then
   echo "⚡ Using local gitleaks binary"
   SCAN_CMD="gitleaks detect \
     --pipe \
-    --config=gitleaks.toml \
+    --config=.security/gitleaks.toml \
     --report-format=json \
     --report-path=.gitleaks_out/gitleaks-precommit.json \
     --no-banner"
 else
   echo "Local gitleaks not found, using Docker fallback"
   SCAN_CMD="docker run --rm -i -v \"$(pwd)\":/repo ghcr.io/gitleaks/gitleaks:v8.28.0 detect \
     --pipe \
-    --config=/repo/gitleaks.toml \
+    --config=/repo/.security/gitleaks.toml \
     --report-format=json \
     --report-path=/repo/.gitleaks_out/gitleaks-precommit.json \
     --no-banner"

.github/workflows/security.yml

@@ -17,7 +17,7 @@ jobs:
     name: Run Gitleaks Scan
     uses: peer-network/peer_global_security/.github/workflows/gitleaks.yml@main
     with:
-      config: gitleaks.toml
+      config: .security/gitleaks.toml
 
   trivy_scan:
     name: Run Trivy Security Scan