Skip to content

Commit 59f0837

Browse files
fix(ci): drop the retired inline trufflehog job (#76)
The permission fix has landed, so `Secret Scanner` now **starts** — `gitleaks`, `rust-secrets` and `shell-secrets` all pass. But the workflow still reports **red**, because of a vestigial inline `trufflehog` job. `secret-scanner-reusable.yml` **deliberately retired** TruffleHog as redundant — from its own header: > Trufflehog removed: gitleaks provides sufficient coverage at lower cost. The inline job was left behind when the repo moved to the reusable. It fails and reds the whole workflow, so the repo keeps emitting `ci_activity` notifications even though secret scanning is green. This removes the retired job. Coverage is unchanged — gitleaks in the reusable already covers it. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
1 parent 5210a51 commit 59f0837

1 file changed

Lines changed: 0 additions & 11 deletions

File tree

.github/workflows/secret-scanner.yml

Lines changed: 0 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -16,14 +16,3 @@ jobs:
1616
contents: read
1717
uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@c65436ee3351cd6b0fa14b142938b195efc77586
1818
secrets: inherit
19-
trufflehog:
20-
runs-on: ubuntu-latest
21-
timeout-minutes: 10
22-
steps:
23-
- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
24-
with:
25-
fetch-depth: 0
26-
- name: TruffleHog Secret Scan
27-
uses: trufflesecurity/trufflehog@30d5bb91af1a771378349dbbb0c82129392acf70 # v3.95.6
28-
with:
29-
extra_args: --only-verified --fail

0 commit comments

Comments
 (0)