Merge branch 'main' into dependabot/github_actions/dependabot/fetch-metadata-3.0.0

Author: anthony-nhs

.gitallowed

@@ -20,7 +20,7 @@ repos:
       - id: grype-scan-local
         name: Grype scan local changes
         entry: make
-        args: ["grype-scan-local"]
+        args: [ "grype-scan-local" ]
         language: system
         pass_filenames: false
         always_run: true
@@ -45,30 +45,31 @@ repos:
         pass_filenames: false
         always_run: true
 
-      - id: git-secrets
-        name: Git Secrets
-        description: git-secrets scans commits, commit messages, and --no-ff merges to prevent adding secrets into your git repositories.
+      - id: gitleaks
+        name: Git Leaks
+        description: gitleaks scans commits, commit messages, and --no-ff merges to
+          prevent adding secrets into your git repositories.
         entry: bash
         args:
           - -c
-          - "git-secrets --pre_commit_hook"
+          - "gitleaks git --pre-commit --redact --staged --verbose"
         language: system
 
       - id: lint-githubactions
         name: Lint github actions
         entry: make
-        args: ["lint-githubactions"]
+        args: [ "lint-githubactions" ]
         language: system
         files: ^.github
-        types_or: [yaml]
+        types_or: [ yaml ]
         pass_filenames: false
 
       - id: lint-githubaction-scripts
         name: Lint github action scripts
         entry: make
-        args: ["lint-githubaction-scripts"]
+        args: [ "lint-githubaction-scripts" ]
         language: system
         files: ^.github/scripts
-        types_or: [sh, shell]
+        types_or: [ sh, shell ]
         pass_filenames: false
 fail_fast: true

.pre-commit-config.yaml

@@ -13,8 +13,8 @@
   "author": "NHS Digital",
   "license": "MIT",
   "devDependencies": {
-    "@aws-sdk/client-cloudformation": "^3.1023.0",
-    "@aws-sdk/client-lambda": "^3.1023.0",
+    "@aws-sdk/client-cloudformation": "^3.1028.0",
+    "@aws-sdk/client-lambda": "^3.1028.0",
     "@semantic-release/changelog": "^6.0.3",
     "@semantic-release/commit-analyzer": "^13.0.1",
     "@semantic-release/github": "^12.0.6",