Removed internal workflows + updated pr-gitleaks.yml

.github/workflows/pr-gitleaks.yml

@@ -1,10 +1,32 @@
-name: CB Secret PR Scan
+name: Secret PR Scan
 
 on:
   pull_request:
     types: [opened, synchronize, reopened]
 
 jobs:
-  SecretScanning:
-    uses: chargebee/cb-secrets-scanner/.github/workflows/cb-secret-scan.yml@main
-    secrets: inherit
+  scan:
+    name: Secret PR Scan
+    runs-on: ubuntu-latest
+    steps:
+      - name: Get the file name changed in the PR
+        id: pr_files
+        run: |
+          changed_files=$(curl -s -H "Authorization: token ${{
+          secrets.GITHUB_TOKEN }}" \
+            -H "Accept: application/vnd.github.v3+json" \
+            https://api.github.com/repos/${{ github.repository }}/pulls/${{ github.event.pull_request.number }}/files | jq -r '.[].filename')
+          echo "Changed files: $changed_files"
+
+          echo "CHANGED_FILES<<EOF"$'\n'"$changed_files"$'\n'EOF >> $GITHUB_OUTPUT
+
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - uses: gitleaks/gitleaks-action@v2
+        env:
+          GITLEAKS_ENABLE_UPLOAD_ARTIFACT: false
+          GITHUB_TOKEN: '${{ secrets.GITHUB_TOKEN }}'
+          GITLEAKS_LICENSE: '${{ secrets.GITLEAKS_LICENSE_PUBLIC}}'
+          GITLEAKS_ENABLE_SUMMARY: false