diff --git a/.github/workflows/secret-scanner.yml b/.github/workflows/secret-scanner.yml index 69e9bc2..d4ca958 100644 --- a/.github/workflows/secret-scanner.yml +++ b/.github/workflows/secret-scanner.yml @@ -18,20 +18,3 @@ jobs: contents: read uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@c65436ee3351cd6b0fa14b142938b195efc77586 secrets: inherit - trufflehog: - runs-on: ubuntu-latest - timeout-minutes: 10 - steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - with: - fetch-depth: 0 - - name: TruffleHog Secret Scan - uses: trufflesecurity/trufflehog@27b0417c16317ca9a472a9a8092acce143b49c55 # v3.95.9 - with: - # Empty base = full-tree scan; the action's default BASE/HEAD diff - # mode errors with "BASE == HEAD" on direct pushes to main. - base: "" - # The action appends its own --fail on the full-tree (empty-base) - # scan path; a --fail here too triggers - # "flag 'fail' cannot be repeated". --only-verified is enough. - extra_args: --only-verified