Scan only HEAD commit for SDK secret checks

Author: jiayuqi7813

.github/workflows/secret-scan.yml

@@ -22,4 +22,4 @@ jobs:
             | tar -xz
           sudo install gitleaks /usr/local/bin/gitleaks
       - name: Run gitleaks
-        run: gitleaks dir . --redact --no-banner --exit-code 1 --verbose
+        run: gitleaks git . --log-opts="-1" --redact --no-banner --exit-code 1 --verbose