Problem:

• When releasing detect-secrets - different deployers may get different results depending on env setup
• Mainly revolving around if they are using a local copy of detect-secrets or not
• When deploying we perform a commit - therefore we run pre-commit hook detect-secrets. Since in the commit we just updated the .secrets.baseline to a new version. If the installed version of detect-secrets is different - the hook will fail.

Solution:

• When installing dependencies in the deploy process. Install a local copy of detect-secrets so there are no differences in .secrets.baseline upgraded version and old hook version.