use docker image in gitleaks image and prepare semver of pipelines

README.md

@@ -101,11 +101,13 @@ This repository also provides useful Gitlab CI pipelines
 include:
   - project: 'digit-c4/dev/best-practices'
     file: 'gitlab-ci/test-static-scan.yml'
-    ref: main
+    ref: v1.0
   
 stages:
   - test
 
 test-static-scan-gitleaks:
   stage: test
+  variables:
+    #SRC_PATH: "./"
 ```

gitlab-ci/test-static-scan-gitleaks.yml

@@ -2,13 +2,9 @@
 test-static-scan-gitleaks:
   tags:
     - docker
-  image: golang
-  before_script:
+  image: code.europa.eu:4567/digit-c4/dev/best-practices/test-static-scan-gitleaks:latest
     # gitleaks the first best secret detection
     # Tufflehog the second one
     # source: https://arxiv.org/pdf/2307.00714.pdf
-    - apt-get install -y git --no-install-recommends
-    - git clone https://github.com/gitleaks/gitleaks.git
-    - cd gitleaks && make build && cd ../
   script:
-    - ./gitleaks/gitleaks detect --source . -v
+    - gitleaks detect --source ${SRC_PATH:=./} -v