Skip to content

Commit 22361a9

Browse files
Drop redundant, broken trufflehog job from secret-scanner (#121)
The hand-rolled `trufflehog` job was both unpinned (`@main`, failing the Workflow security linter) and passed `--fail` on top of the action's own `--fail` (failing with "flag 'fail' cannot be repeated"). The reusable `scan` job (hyperpolymath/standards secret-scanner-reusable, SHA-pinned) already runs trufflehog — the passing `scan / trufflehog` check — so the local job was pure duplication. Remove it: fixes both red checks and de-duplicates secret scanning. Claude-Session: https://claude.ai/code/session_019i2e5ABGBKQmMdqk8puFWx Co-authored-by: Claude <noreply@anthropic.com>
1 parent 518764a commit 22361a9

1 file changed

Lines changed: 0 additions & 10 deletions

File tree

.github/workflows/secret-scanner.yml

Lines changed: 0 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -13,13 +13,3 @@ jobs:
1313
scan:
1414
uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@3e4bd4c93911750727e2e4c66dff859e00079da0
1515
secrets: inherit
16-
trufflehog:
17-
runs-on: ubuntu-latest
18-
steps:
19-
- uses: actions/checkout@v4
20-
with:
21-
fetch-depth: 0
22-
- name: TruffleHog Secret Scan
23-
uses: trufflesecurity/trufflehog@main
24-
with:
25-
extra_args: --only-verified --fail

0 commit comments

Comments
 (0)