👷 Nix -> Lix, and scan more file types for exposed secrets

.github/actions/install-lix/action.yml

@@ -1,4 +1,4 @@
-# Taken from: https://github.com/isabelroses/dotfiles/blob/9335e5728eaaa9bdcb0d5c3130a5d7c8dddbb6e3/.github/actions/install-lix/action.yml :3
+# Derived from: https://github.com/isabelroses/dotfiles/blob/9335e5728eaaa9bdcb0d5c3130a5d7c8dddbb6e3/.github/actions/install-lix/action.yml :3
 name: Install Lix
 description: "Install Lix for the specified system"
 

.github/workflows/check-leaks.yml

@@ -7,6 +7,8 @@ on:
     paths:
       - "**.nix"
       - ".github/workflows/check-leaks.yml"
+      - "**.yaml"
+      - "**.md"
 
 permissions:
   contents: read

.github/workflows/deadnix.yml

@@ -14,8 +14,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@main
-      
+
-      - name: Install lix
+      - name: Install Lix
         uses: ./.github/actions/install-lix
 
       - uses: phucleeuwu/deadnix-action@v1

.github/workflows/validate.yml

@@ -16,11 +16,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4
-        with:
-          ref: ${{ github.ref_name }}
-          persist-credentials: false
 
-      - name: Install Nix
+      - name: Install Lix
         uses: ./.github/actions/install-lix
 
       - name: Validate Flake