ci: scan archived tracked files for gitleaks

Author: novatechflow

.github/workflows/secrets-scan.yml

@@ -24,4 +24,7 @@ jobs:
 
       - name: Run gitleaks
         run: |
-          gitleaks detect --source . --no-git --redact --exit-code 1
+          rm -rf /tmp/repo-scan
+          mkdir -p /tmp/repo-scan
+          git archive --format=tar HEAD | tar -xf - -C /tmp/repo-scan
+          gitleaks detect --source /tmp/repo-scan --no-git --redact --exit-code 1