ci: add git-secrets (#22)

Author: drink7036290

.github/actions/basics/action.yml

@@ -59,6 +59,18 @@ runs:
 
     # ===============================================
 
+    - name: Install git-secrets
+      shell: bash
+      run: |
+        sudo apt-get update && sudo apt-get install -y git-secrets
+        git-secrets --register-aws
+
+    - uses: ./.github/actions/elapsed-time
+      with:
+        statement: "Install git-secrets"
+
+    # ===============================================
+
     - name: restore lychee cache
       uses: actions/cache@v4
       with:

.pre-commit-config.yaml

@@ -124,12 +124,17 @@ repos:
         pass_filenames: true
         types: [yaml]
 
+      - id: git-secrets
+        name: git-secrets
+        language: system
+        entry: bash
+        args:
+          - -c
+          - |
+            git-secrets --scan
+        pass_filenames: false
+
   - repo: https://github.com/igorshubovych/markdownlint-cli
     rev: v0.43.0
     hooks:
       - id: markdownlint
-
-  - repo: https://github.com/pre-commit/pre-commit-hooks
-    rev: v5.0.0
-    hooks:
-      - id: forbid-submodules