.gitea/workflows/ci.yml

@@ -1,5 +1,5 @@
 ---
-# ci-sync: 2026-05-30T01:31:02Z
+# ci-sync: 2026-05-30T02:19:44Z
 # Homelab CI — Node/pages lane (git-ci-01) + secret scan (git-ci-02)
 name: CI
 
@@ -85,5 +85,9 @@ jobs:
           fetch-depth: 0
       - name: Gitleaks
         run: |
+          extra=""
+          if [ -f .gitleaks.toml ]; then
+            extra="--config /repo/.gitleaks.toml"
+          fi
           docker run --rm -v "$PWD:/repo" ghcr.io/gitleaks/gitleaks:latest \
-            detect --source /repo --no-banner --redact
+            detect --source /repo --no-banner --redact ${extra}