fix(report): normalize Gitleaks report

  before_script:

    - *gitleaks-scripts

    - install_ca_certs "${CUSTOM_CA_CERTS:-$DEFAULT_CA_CERTS}"

    - mkdir -p ./gitleaks

    - mkdir -p -m 777 reports

    - install_gitleaks_rules

    - git config --global --add safe.directory "${CI_PROJECT_DIR}"

  script:

    - gitleaks detect ${TRACE+--log-level debug} --source . $gitleaks_rule_opts --report-path ./gitleaks/gitleaks-report.json $GITLEAKS_ARGS

    - gitleaks detect ${TRACE+--log-level debug} --source . $gitleaks_rule_opts --report-path reports/gitleaks.native.json $GITLEAKS_ARGS

  artifacts:

    name: "$CI_JOB_NAME artifacts from $CI_PROJECT_NAME on $CI_COMMIT_REF_SLUG"

    when: always

    paths:

      - gitleaks/

      - reports/gitleaks.*

  rules:

    - !reference [.test-policy, rules]