From cb2f6fc99a8a08f2ae50dcd644c3caadb948f174 Mon Sep 17 00:00:00 2001
From: Shaishav Pidadi <shaivpidadi@gmail.com>
Date: Fri, 24 Apr 2026 19:25:17 -0400
Subject: [PATCH] ci: remove gitleaks secret-scan job (ADR-001)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

ADR-001 mandates GitHub-native secret scanning only — never gitleaks
or alternatives. GitHub native secret scanning remains enabled at the
repo level and covers this surface.

Refs: GOV-1865
---
 .github/workflows/ci.yml | 12 ------------
 1 file changed, 12 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index b0a5507..e3abea7 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -54,15 +54,3 @@ jobs:
 
       - name: jest
         run: npm test -- --ci --forceExit
-
-  secret-scan:
-    name: Secret Scan
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-
-      - uses: gitleaks/gitleaks-action@v2
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}