[paloth]

Description

What are your needs or what are you planning to do in this PR?

On the quanta-security runners, "Install Gitleaks" parses the gitleaks releases feed with python3. That pool runs runners/base, which is being reduced to the bare actions runner plus gh and wget in centreon/centreon-images#400. Without Python, the step would not fail but would fall back to GITLEAKS_FALLBACK_VERSION with a gitleaks-version-fallback warning on every run.

The feed is now parsed with awk, same rules: only vX.Y.Z tags, published at least 4 days before the run. actions/setup-python is not used on purpose: this job downloads no action at "Set up job" (see the checkout step), to avoid the codeload.github.com rate limits.

Tested:

• Same result as the previous Python parser on the live feed for several cutoff dates; a pre-release tag and a release newer than the cutoff are excluded.
• The extracted step runs on the new minimal base image (no Python): resolves 8.30.1 and installs it, checksum verified.
• actionlint passes.

dependency-analysis.yml (also on quanta-security) uses wget, which stays in the new base image: no change needed.

🤖 Generated with Claude Code

[paloth]

Closing: Python 3.14 now ships in the runners/base image (centreon/centreon-images#400), so the quanta-security runners keep python3 and the existing feed parsing works as is.