From 275dceedf49d8be3cc4f95f4a0f66c9ee6dc0eab Mon Sep 17 00:00:00 2001
From: "guiddeco-idans-claude[bot]"
 <315078169+guiddeco-idans-claude[bot]@users.noreply.github.com>
Date: Tue, 11 Aug 2026 13:13:13 +0000
Subject: [PATCH] ci: add secret scanning workflow for pull requests

---
 .github/workflows/secret-scanning.yaml | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)
 create mode 100644 .github/workflows/secret-scanning.yaml

diff --git a/.github/workflows/secret-scanning.yaml b/.github/workflows/secret-scanning.yaml
new file mode 100644
index 0000000000000..c250773d20b73
--- /dev/null
+++ b/.github/workflows/secret-scanning.yaml
@@ -0,0 +1,24 @@
+name: 'Secret Scanning'
+
+on:
+  pull_request:
+    branches:
+      - main
+      - master
+      - develop
+
+permissions: {}
+
+concurrency:
+  group: secret-scanning-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  secret-scan:
+    name: 'Scan for secrets'
+    uses: guiddeco/shared-workflows/.github/workflows/ci-secret-scanning.yaml@v1
+    permissions:
+      contents: read
+      pull-requests: write
+    with:
+      fail_on_findings: false