update rm deadcode

.github/workflows/deploy.yml

@@ -12,11 +12,12 @@ jobs:
 
         steps:
             - name: Deploy
-              uses: appleboy/ssh-action@v1.2.0
+              uses: appleboy/ssh-action@7eaf76671a0d7eec5d98ee897acda4f968735a17 # v1.2.0
               with:
                   host: ${{ secrets.HOST }}
                   username: ${{ secrets.USERNAME }}
-                  password: ${{ secrets.PASSWORD }}
+                  key: ${{ secrets.SSH_PRIVATE_KEY }}
+                  fingerprint: ${{ secrets.SSH_HOST_FINGERPRINT }}
                   port: ${{ secrets.PORT }}
                   script_stop: true
                   script: |
@@ -58,9 +59,9 @@ jobs:
                         exit 1
                       fi
 
-                      composer install 
+                      composer install --no-dev --optimize-autoloader
 
-                      composer dump-autoload
+                      composer dump-autoload --no-dev --optimize
 
                       php artisan migrate --force
 

.github/workflows/gitleaks.yml

@@ -0,0 +1,21 @@
+name: Secret scan
+
+on:
+  push:
+  pull_request:
+
+jobs:
+  gitleaks:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+        with:
+          fetch-depth: 0
+
+      - name: Scan new commits
+        env:
+          RANGE: ${{ github.event_name == 'pull_request' && format('{0}..{1}', github.event.pull_request.base.sha, github.event.pull_request.head.sha) || format('{0}..{1}', github.event.before, github.sha) }}
+        run: |
+          case "$RANGE" in 0000000000000000000000000000000000000000..*) RANGE="${GITHUB_SHA}~1..${GITHUB_SHA}" ;; esac
+          curl -sSfL https://github.com/gitleaks/gitleaks/releases/download/v8.30.1/gitleaks_8.30.1_linux_x64.tar.gz | tar xz gitleaks
+          ./gitleaks git --redact --no-banner --log-opts="$RANGE" .