```yaml
version: "1.0"
updated: 2026-06-20

when: >
  Invoked when the user wants to install gitleaks and wire it as a git pre-commit secret
  scanner, update the hook in an existing repo, tune allowlist rules to suppress false
  positives, debug a scan finding, or rotate a real secret that was found. Covers the full
  lifecycle: install → configure → maintain → remediate. Not invoked for general code
  security review (security-review skill) or CI pipeline secret scanning (write-ci-pipeline skill).

references:
  - https://github.com/gitleaks/gitleaks/releases/tag/v8.24.2
  - https://github.com/gitleaks/gitleaks/blob/main/README.md
```