devtool: add git-secrets to checkstyle if running outside CI

There's no point in running this in CI, sa by the time a commit reaches
the CI its too late to scan for accidentally commited secrets (they'll
be out in the open already). So instead, just run it locally when
running checkstyle.

Signed-off-by: Patrick Roy <[email protected]>

Author: roypat

tools/devtool

@@ -951,6 +951,10 @@ cmd_mkdocs() {
 }
 
 cmd_checkstyle() {
+    if [[ -z "$BUILDKITE" ]]; then
+      cmd_sh "git-secret --register-aws && git-secrets --scan"
+    fi
+
     cmd_test --no-build --no-kvm-check -- -n 4 --dist worksteal integration_tests/style || exit 1
     cmd_test --no-build --no-kvm-check -- -n 4 --doctest-modules framework || exit 1
 }