From af182d9587941139ca09ecfc7d2b65f0f8f76c90 Mon Sep 17 00:00:00 2001 From: hyperpolymath <6759885+hyperpolymath@users.noreply.github.com> Date: Thu, 2 Jul 2026 05:14:51 +0100 Subject: [PATCH] fix(ci): trufflehog v3.95.6 action injects --fail itself The pinned action passes --fail internally, so repeating it in extra_args aborts with "flag 'fail' cannot be repeated"; the @main ref this replaced predated the injection. --results=verified also replaces the deprecated --only-verified. Failure-on-verified-findings behavior is unchanged. Co-Authored-By: Claude Fable 5 --- .github/workflows/secret-scanner.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/secret-scanner.yml b/.github/workflows/secret-scanner.yml index fff4433..075d699 100644 --- a/.github/workflows/secret-scanner.yml +++ b/.github/workflows/secret-scanner.yml @@ -23,4 +23,4 @@ jobs: - name: TruffleHog Secret Scan uses: trufflesecurity/trufflehog@30d5bb91af1a771378349dbbb0c82129392acf70 # v3.95.6 with: - extra_args: --only-verified --fail + extra_args: --results=verified