diff --git a/.gitleaks.toml b/.gitleaks.toml
index 0c1bd3823..a7ee7974c 100644
--- a/.gitleaks.toml
+++ b/.gitleaks.toml
@@ -44,7 +44,8 @@ keywords = [
 [allowlist]
 paths = [
   '''js/openpgp\.min\.js''',
-  # Paths otherwise .gitignored should be listed here if you want to run with --no-git
+  '''site/vendor/''',
+  # Paths otherwise .gitignored should be listed here if you want to use `gitleaks directory`
   '''i/build/''',
   '''site/temp/cache/''',
 ]
diff --git a/.gitleaksignore b/.gitleaksignore
index ea617050b..1a5f14d88 100644
--- a/.gitleaksignore
+++ b/.gitleaksignore
@@ -4,7 +4,7 @@
 4eea8b8b4a748558fc9d148e870c046e70f02e93:site/app/config/config.local.template.neon:generic-api-key-extra-keywords:71
 4eea8b8b4a748558fc9d148e870c046e70f02e93:site/app/config/config.local.template.neon:generic-api-key-extra-keywords:73
 8e2f5d8924f633825fdd9e83431ac83166fb2ba4:site/app/config/config.local.template.neon:generic-api-key-extra-keywords:80
-bcedeb91aedc5501ee37ef6e71e0abe5ec5f8622:app/config/config.neon:generic-api-key-extra-keywords:37
+e8ee56be1f7af3c54ecc5aff2e5b525151dcd847:app/config/config.neon:generic-api-key-extra-keywords:37
 0a582d9b6820eec34b371c48ac33c95512013fcf:site/config/local.template.neon:michalspacek.cz-encryption-keys:52
 0a582d9b6820eec34b371c48ac33c95512013fcf:site/config/local.template.neon:generic-api-key-extra-keywords:52
 0a582d9b6820eec34b371c48ac33c95512013fcf:site/config/local.template.neon:michalspacek.cz-encryption-keys:54
diff --git a/app/Makefile b/app/Makefile
index 1ddec111c..30a66f569 100644
--- a/app/Makefile
+++ b/app/Makefile
@@ -61,7 +61,7 @@ tester-include-skipped:
 	$(MAKE) tester
 
 gitleaks:
-	gitleaks detect --verbose --source $(realpath ..)
+	gitleaks git --verbose $(realpath ..)
 
 composer-dependency-analyser:
 	vendor/bin/composer-dependency-analyser --verbose