Skip to content

Commit 7ac7f99

Browse files
hyperpolymathclaude
andcommitted
fix(ci): drop the retired inline trufflehog job
secret-scanner-reusable.yml deliberately retired TruffleHog as redundant ("gitleaks provides sufficient coverage at lower cost" — see the reusable's header). The inline job survived here, fails, and turns the whole Secret Scanner workflow red even though gitleaks, rust-secrets and shell-secrets all pass — so the repo keeps emitting ci_activity notifications. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
1 parent 4be0b6d commit 7ac7f99

1 file changed

Lines changed: 0 additions & 11 deletions

File tree

.github/workflows/secret-scanner.yml

Lines changed: 0 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -17,14 +17,3 @@ jobs:
1717
actions: read
1818
uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@09e7023d24682621bea4e11965a1ef5e87d86c3b
1919
secrets: inherit
20-
trufflehog:
21-
runs-on: ubuntu-latest
22-
timeout-minutes: 10
23-
steps:
24-
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
25-
with:
26-
fetch-depth: 0
27-
- name: TruffleHog Secret Scan
28-
uses: trufflesecurity/trufflehog@27b0417c16317ca9a472a9a8092acce143b49c55 # v3.95.9
29-
with:
30-
extra_args: --only-verified --fail

0 commit comments

Comments
 (0)