Gitleaks

What's fixed

• There was a bug where the filepath in the global allowlist was not respected when scanning unstaged changes. https://github.com/zricethezav/gitleaks/issues/553