fix: use docker-based TruffleHog scan for scheduled runs

Author: MustBeSimo

.github/workflows/security-audit.yml

@@ -32,12 +32,15 @@ jobs:
       - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
         with:
           fetch-depth: 0
-      - uses: trufflesecurity/trufflehog@47e7b7cd74f578e1e3145d48f669f22fd1330ca6 # v3.94.3
-        with:
-          path: ./
-          base: ${{ github.event.repository.default_branch }}
-          head: HEAD
-          extra_args: --results=verified,unknown
+      - name: TruffleHog scan
+        run: |
+          docker run --rm -v "$GITHUB_WORKSPACE:/tmp" -w /tmp \
+            ghcr.io/trufflesecurity/trufflehog:latest \
+            git file:///tmp/ \
+            --only-verified \
+            --fail \
+            --no-update \
+            --github-actions
 
   semgrep:
     name: Semgrep (SAST)