From 0557bcc04b0cb9c100c65168b0d3963c298a7a81 Mon Sep 17 00:00:00 2001
From: automation-bot <automation-bot@local.thesabear.net>
Date: Sun, 11 Oct 2026 11:01:28 +0300
Subject: [PATCH] ci: run shared gitleaks secret scan

---
 .gitea/workflows/ci.yml | 15 +++++++++++++++
 1 file changed, 15 insertions(+)
 create mode 100644 .gitea/workflows/ci.yml

diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
new file mode 100644
index 0000000..f85193a
--- /dev/null
+++ b/.gitea/workflows/ci.yml
@@ -0,0 +1,15 @@
+# CI for this repo - the actual checks live in the shared ci-workflows repo.
+name: ci
+
+"on":
+  push:
+    branches: [main]
+  pull_request:
+  workflow_dispatch:
+
+jobs:
+  gitleaks:
+    # Short owner/repo form: Gitea resolves reusable workflows server-side and
+    # rejects absolute URLs that don't match its own ROOT_URL.
+    uses: thesabear/ci-workflows/.gitea/workflows/gitleaks.yml@main
+    secrets: inherit