chore(ci): add gitleaks configuration

.compose/opentelemetry/receiver_prometheus.yaml

@@ -9,7 +9,7 @@ receivers:
           metrics_path: '/actuator/prometheus'
           basic_auth:
             username: "prometheus"
-            password: "***REMOVED***"
+            password: "uzpUAANKgZXxbdk19AjfWmknKfGbP2wKzAAMCpHm"
           static_configs:
             - targets: [baywatch:8081]
               labels:

.github/workflows/gitleaks.yml

@@ -0,0 +1,23 @@
+name: Gitleaks
+
+on:
+  push:
+    branches:
+      - master
+      - develop
+      - 'feature/**'
+  pull_request:
+    types: [opened, synchronize, reopened]
+
+permissions:
+  pull-requests: read
+
+jobs:
+  gitleaks:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v2
+
+      - name: Gitleaks Action
+        uses: zricethezav/gitleaks-action@master

.gitleaks.toml

@@ -0,0 +1,13 @@
+title = "Gitleaks Baywatch"
+[extend]
+useDefault = true
+
+[allowlist]
+description = "Ignore false positive"
+commits = [
+    "5a5bffb6a3fd2b0cb7d40849bd9f8c8d7f97dd5f",
+    "aaeeaca8f9279e16f18f9204c29fed4e4f857c10"
+]
+paths = [
+    "sandside/src/test"
+]