Repository navigation

chore: remove nested duplicate trees #125

	# SPDX-License-Identifier: MPL-2.0
	# Prevention workflow - scans for hardcoded secrets before they reach main.
	#
	# Calls the estate's shared secret scanner (gitleaks + rust-secrets +
	# shell-secrets). The job key MUST stay `scan`: the estate-wide
	# Secret-Scan-Floor ruleset requires the check context `scan / gitleaks`.
	#
	# No `secrets:` line, deliberately: the reusable references no secrets
	# (gitleaks runs as a checksum-verified binary, not gitleaks-action), so
	# `secrets: inherit` would only hand it every repo and org secret (CWE-250).
	{
	name: "Secret Scanner",
	on: {
	pull_request: null,
	push: {
	branches: [
	"main",
	],
	},
	},
	concurrency: {
	group: "${{ github.workflow }}-${{ github.ref }}",
	cancel-in-progress: true,
	},
	permissions: {
	contents: "read",
	},
	jobs: {
	scan: {
	uses: "hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@900c42c70b968e11a2bca04bf0ce050be5c286dc",
	},
	},
	}