---
steps:
  gitleaks:
    image: zricethezav/gitleaks:v8.18.2
    commands:
      - gitleaks detect --no-git --verbose --source $CI_WORKSPACE
    when:
      - event: [push, pull_request, cron]
        evaluate: 'CI_COMMIT_AUTHOR_EMAIL != "renovate@mgrote.net"'
...