Merge branch '421380_add_gitleaks_to_pre_push_lefthook' into 'master'

Run gitleaks in pre-push hook

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/149481



Merged-by: Jennifer Li <jli@gitlab.com>
Approved-by: Jennifer Li <jli@gitlab.com>
Co-authored-by: Kevin-Damian Gosa <mail@kevingosa.de>

lefthook.yml

@@ -120,6 +120,10 @@ pre-push:
       files: git diff --name-only --diff-filter=d $(git merge-base origin/master HEAD)..HEAD
       glob: 'tests.yml'
       run: scripts/verify-tff-mapping
+    secrets-detection:
+      tags: secrets
+      files: git diff --name-only --diff-filter=d $(git merge-base origin/master HEAD)..HEAD
+      run: 'if command -v gitleaks > /dev/null 2>&1; then gitleaks detect --log-opts="$(git merge-base origin/master HEAD)..HEAD" --no-banner --redact --verbose; else echo "WARNING: gitleaks is not installed. Please install it. See https://github.com/zricethezav/gitleaks#installing."; fi'
 
   scripts:
     'merge_conflicts':