From 9c469e4a904e5324ea50fe323ac11c558d1f3eb3 Mon Sep 17 00:00:00 2001
From: Krzysztof Szarek <kszarek@gmail.com>
Date: Thu, 8 Jan 2026 11:38:12 +0100
Subject: [PATCH] Add secrets scanning workflow for PR checks

- Add secrets-scan-on-pr.yaml workflow that runs on pull requests
- Uses detect-secrets-action to scan for accidentally committed secrets
- Required for all PRs as per repository requirements
---
 .github/workflows/secrets-scan-on-pr.yaml | 9 +++++++++
 1 file changed, 9 insertions(+)
 create mode 100644 .github/workflows/secrets-scan-on-pr.yaml

diff --git a/.github/workflows/secrets-scan-on-pr.yaml b/.github/workflows/secrets-scan-on-pr.yaml
new file mode 100644
index 0000000..a6d4e4e
--- /dev/null
+++ b/.github/workflows/secrets-scan-on-pr.yaml
@@ -0,0 +1,9 @@
+name: Secrets Scan
+
+on:
+  pull_request:
+
+jobs:
+  scan:
+    uses: AirHelp/gh-actions/.github/workflows/secrets-scan-on-pr.yaml@master
+    secrets: inherit