Threats affecting pkg:golang/gitleaks

Gitleaks versions up to 8.30.1 have a vulnerability where scan report files are created with insecure default permissions, allowing local users on shared systems to read plaintext secrets unless the --redact option is used.