Typeform · pmlanger · Oct 7, 2025 · Oct 7, 2025 · Oct 7, 2025 · Oct 7, 2025
@@ -18,10 +18,15 @@ on:
         required: false
         default: false
         description: 'whether to use Typeform/ci-standard-checks@v1-beta'
+      runner:
+        description: "Self-hosted GHA runner"
+        type: string
+        required: false
+        default: "ci-base"
 
 jobs:
   ci-standard-checks:
-    runs-on: 'ubuntu-latest'
+    runs-on: [self-hosted, "${{ inputs.runner }}"]
     steps:
       - name: Check Out Source Code
         uses: actions/checkout@v5
@@ -30,14 +35,14 @@ jobs:
       - uses: actions/setup-node@v5
         with:
           node-version: 20
-      - name: CI Standard Checks
+      - name: CI Standard Checks # bump3
         if: ${{ inputs.useBeta == false }}
         uses: Typeform/ci-standard-checks@v1
         with:
           githubToken: ${{ secrets.GITHUB_TOKEN }}
           skipChecks: ${{ inputs.skipChecks }}
           enableChecks: ${{ inputs.enableChecks }}
-      - name: CI Standard Checks @v1-beta
+      - name: CI Standard Checks @v1-beta # bump3
         if: ${{ inputs.useBeta == true }}
         uses: Typeform/ci-standard-checks@v1-beta
         with:

@@ -16,13 +16,7 @@ inputs:
 runs:
   using: "composite"
   steps:
-    - run: docker login -u=${{ inputs.docker-username }} -p=${{ inputs.docker-password }} ${{ inputs.docker-registry}}
-      shell: bash
-
     - run: ${{ github.action_path }}/secrets-scan.sh
       env:
-        DOCKER_REGISTRY: ${{ inputs.docker-registry }}
-        DOCKER_USERNAME: ${{ inputs.docker-username }}
-        DOCKER_PASSWORD: ${{ inputs.docker-password }}
         GH_TOKEN: ${{ inputs.gh-token }}
       shell: bash
@@ -10,9 +10,9 @@ then
     exit 1
 fi
 
-# Check if user is logged in to quay.io
-DOCKER_REGISTRY=quay.io
-docker pull ${DOCKER_REGISTRY}/typeform/gitleaks-config
+# Check if user is logged in to ECR
+DOCKER_REGISTRY=567716553783.dkr.ecr.us-east-1.amazonaws.com
+docker pull ${DOCKER_REGISTRY}/gitleaks-config
 exit_code=$?
 
 if [ ! $exit_code -eq 0 ]; then
@@ -30,7 +30,7 @@ mkdir -p $tmp_dir
 local_config=".gitleaks.toml"
 final_config="$tmp_dir/gitleaks_config.toml"
 commits_file="$tmp_dir/commit_list.txt"
-gitleaks_config_container="${DOCKER_REGISTRY}/typeform/gitleaks-config"
+gitleaks_config_container="${DOCKER_REGISTRY}/gitleaks-config"
 gitleaks_container="zricethezav/gitleaks"
 gitleaks_version="v7.2.0"