From e7dcb5362d7be35cf9c6a13e32c7cb2017b6b168 Mon Sep 17 00:00:00 2001
From: EllAchE <26192612+EllAchE@users.noreply.github.com>
Date: Sat, 12 Sep 2026 23:53:25 -0400
Subject: [PATCH] S-138738: Cancel superseded CI runs on pull requests

---
 .github/workflows/gitleaks.yml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/.github/workflows/gitleaks.yml b/.github/workflows/gitleaks.yml
index 43b7b62..c943fc6 100644
--- a/.github/workflows/gitleaks.yml
+++ b/.github/workflows/gitleaks.yml
@@ -6,6 +6,13 @@ on:
   push:
     branches: [main]
 
+concurrency:
+  # A new push to a pull request supersedes the run already in flight, and
+  # nothing downstream waits on the older one. Push events are exempt: a push
+  # run is the record that a given commit passed, so it always finishes.
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
 jobs:
   gitleaks:
     if: ${{ !contains(github.event.pull_request.labels.*.name, 'no_gha') }}