Merge branch 'secret-detection-commits-file' into 'master'

Update Secret-Detection template to use commits file

See merge request gitlab-org/gitlab!41364

changelogs/unreleased/secret-detection-commits-file.yml

+---
+title: Update Secret-Detection template to use commits file
+merge_request: 41364
+author:
+type: changed

lib/gitlab/ci/templates/Security/Secret-Detection.gitlab-ci.yml

@@ -35,6 +35,7 @@ secret_detection:
     - if: $CI_COMMIT_BRANCH && $CI_COMMIT_BRANCH != $CI_DEFAULT_BRANCH
   script:
     - git fetch origin $CI_DEFAULT_BRANCH $CI_BUILD_REF_NAME
-    - export SECRET_DETECTION_COMMIT_TO=$(git log --left-right --cherry-pick --pretty=format:"%H" refs/remotes/origin/$CI_DEFAULT_BRANCH...refs/remotes/origin/$CI_BUILD_REF_NAME | tail -n 1)
-    - export SECRET_DETECTION_COMMIT_FROM=$CI_COMMIT_SHA
+    - git log --left-right --cherry-pick --pretty=format:"%H" refs/remotes/origin/$CI_DEFAULT_BRANCH...refs/remotes/origin/$CI_BUILD_REF_NAME > "$CI_COMMIT_SHA"_commit_list.txt
+    - export SECRET_DETECTION_COMMITS_FILE="$CI_COMMIT_SHA"_commit_list.txt
     - /analyzer run
+    - rm "$CI_COMMIT_SHA"_commit_list.txt