Skip to content

build(deps): Bump hono from 4.12.14 to 4.12.18 in /packages/mcp-server #2

build(deps): Bump hono from 4.12.14 to 4.12.18 in /packages/mcp-server

build(deps): Bump hono from 4.12.14 to 4.12.18 in /packages/mcp-server #2

name: Scan for Secrets
on:
pull_request: {}
merge_group:
types: [checks_requested]
workflow_dispatch: {}
jobs:
scan_for_secrets:
name: public
runs-on: ubuntu-latest
permissions:
contents: read
# Skip Dependabot PRs and auto-pass in merge queue (base branch already scanned)
if: |
github.actor != 'dependabot[bot]' &&
github.actor != 'github-actions[bot]'
steps:
- name: Establish event metadata
id: establish_metadata
shell: bash
env:
EVENT_NAME: ${{ github.event_name }}
PR_COMMITS: ${{ github.event.pull_request.commits }}
PR_HEAD_REF: ${{ github.event.pull_request.head.ref }}
run: |
if [[ "$EVENT_NAME" == "pull_request" ]]; then
echo "fetch_depth=$(($PR_COMMITS + 2))" >> $GITHUB_OUTPUT
echo "branch=$PR_HEAD_REF" >> $GITHUB_OUTPUT
fi
- name: Auto-pass in merge queue
if: github.event_name == 'merge_group'
run: echo 'Auto-passing in merge queue'
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
if: github.event_name == 'pull_request'
with:
ref: ${{ steps.establish_metadata.outputs.branch }}
fetch-depth: ${{ steps.establish_metadata.outputs.fetch_depth }}
- name: Scan for secrets
if: github.event_name == 'pull_request'
uses: trufflesecurity/trufflehog@939f053fc5cc13136efeb9e4d505051455d135dd
with:
extra_args: --only-verified