Merge pull request #14685 from kobihikri/ci/pin-trufflehog

ci: pin trufflesecurity/trufflehog to a full commit SHA (v3.95.9)

Author: v-dvedak

.github/workflows/ScanSecrets.yaml

@@ -15,6 +15,6 @@ jobs:
         with:
           fetch-depth: 10
       - name: Secret Scanning
-        uses: trufflesecurity/trufflehog@main
+        uses: trufflesecurity/trufflehog@27b0417c16317ca9a472a9a8092acce143b49c55 # v3.95.9
         with:
           extra_args: --exclude-paths=.script/SecretScanning/Excludepathlist --only-verified