Add gitleaks detection

The gitleak detection is preconfigured for this repository and detects
secrets in commits. The installation has to be done in contributor
environment.

This commit also decrypt public certificates.

JIRA: ISV-1494, ISV-3273

Author: Allda

.pre-commit-config.yaml

@@ -0,0 +1,5 @@
+repos:
+  - repo: https://github.com/zricethezav/gitleaks
+    rev: v8.16.0
+    hooks:
+      - id: gitleaks

ansible/inventory/group_vars/operator-pipeline-prod.yml

@@ -16,7 +16,7 @@ operator_pipeline_kubeconfig_prow_local_path: ../../vaults/prod/kubeconfig-prow
 operator_pipeline_github_bot_token: ../../vaults/prod/github-bot-token.txt
 
 operator_pipeline_preflight_decryption_key_private_local_path: ../../vaults/prod/preflight-decryption-key-priv.gpg
-operator_pipeline_preflight_decryption_key_public_local_path: ../../vaults/prod/preflight-decryption-key-pub.gpg
+operator_pipeline_preflight_decryption_key_public_local_path: ../../vaults/prod/preflight-decryption-key-pub
 
 pipelines_metrics_endpoint: http://pipeline-metrics.pipeline-metrics-prod
 

ansible/inventory/group_vars/operator-pipeline.yml

@@ -35,7 +35,7 @@ operator_pipeline_hydra_sso_client_id_local_path: ../../vaults/common/nonprod-hy
 operator_pipeline_hydra_sso_client_secret_local_path: ../../vaults/common/nonprod-hydra-sso-client-secret
 
 operator_pipeline_preflight_decryption_key_private_local_path: ../../vaults/common/preflight-decryption-key-priv.gpg
-operator_pipeline_preflight_decryption_key_public_local_path: ../../vaults/common/preflight-decryption-key-pub.gpg
+operator_pipeline_preflight_decryption_key_public_local_path: ../../vaults/common/preflight-decryption-key-pub
 
 operator_pipeline_gpg_key_path: ../../vaults/{{ env }}/operator-pipeline-gpg.key
 operator_pipeline_gpg_passphrase_path: ../../vaults/{{ env }}/operator-pipeline-gpg.passphrase

ansible/vaults/common/preflight-decryption-key-pub

@@ -0,0 +1,52 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=jLOe
+-----END PGP PUBLIC KEY BLOCK-----