feat: use shared gitleaks rules from bcregistry-sre

.gitleaks.toml

@@ -1,10 +1,11 @@
 title = "namerequest gitleaks config"
 
-# Start from gitleaks' maintained default ruleset and layer an allowlist
-# on top for this repo's known false positives, per the Git Hooks RFC:
-# https://github.com/bcgov/connect/discussions/23
+# Shared rules (gitleaks defaults + password rules) come from bcgov/bcregistry-sre,
+# downloaded by lefthook remotes - see lefthook.yml and
+# https://github.com/bcgov/bcregistry-sre/tree/main/git-hooks
+# Only this repo's own false positives go below.
 [extend]
-useDefault = true
+path = ".git/info/lefthook-remotes/bcregistry-sre-main/git-hooks/gitleaks-base.toml"
 
 [allowlist]
 description = "Files that routinely trip default rules with non-secret content"

app/src/components/lower-info-area/name-build-info.vue

@@ -94,7 +94,7 @@
 import { Component, Vue } from 'vue-property-decorator'
 import { Getter } from 'pinia-class'
 import { useStore } from '@/store'
-import { BusinessDesignation, ConsentWords, ExampleName, UnavailableWords, UniqueNames}
+import { BusinessDesignation, ConsentWords, ExampleName, UnavailableWords, UniqueNames }
   from '@/components/lower-info-area/name-build-sub-components'
 
 @Component({

lefthook.yml

@@ -6,4 +6,12 @@ pre-commit:
   commands:
     secret-scan:
       tags: security
-      run: npx gitleaks-secret-scanner
+      run: if [ ! -f .git/info/lefthook-remotes/bcregistry-sre-main/git-hooks/gitleaks-base.toml ]; then echo Shared gitleaks rules missing - run npx lefthook install; exit 1; fi; npx --yes gitleaks-secret-scanner
+
+# Shared gitleaks rules: https://github.com/bcgov/bcregistry-sre/tree/main/git-hooks
+remotes:
+  - git_url: https://github.com/bcgov/bcregistry-sre
+    ref: main
+    refetch_frequency: 24h
+    configs:
+      - git-hooks/lefthook-remote.yml