Skip to content

Commit bd6bdec

Browse files
hyperpolymathclaude
andcommitted
fix(ci): drop the retired inline trufflehog job
secret-scanner-reusable.yml deliberately retired TruffleHog as redundant ("gitleaks provides sufficient coverage at lower cost" — see the reusable's header). The inline job survived here, fails, and turns the whole Secret Scanner workflow red even though gitleaks, rust-secrets and shell-secrets all pass — so the repo keeps emitting ci_activity notifications. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
1 parent 5210a51 commit bd6bdec

1 file changed

Lines changed: 0 additions & 11 deletions

File tree

.github/workflows/secret-scanner.yml

Lines changed: 0 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -16,14 +16,3 @@ jobs:
1616
contents: read
1717
uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@c65436ee3351cd6b0fa14b142938b195efc77586
1818
secrets: inherit
19-
trufflehog:
20-
runs-on: ubuntu-latest
21-
timeout-minutes: 10
22-
steps:
23-
- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
24-
with:
25-
fetch-depth: 0
26-
- name: TruffleHog Secret Scan
27-
uses: trufflesecurity/trufflehog@30d5bb91af1a771378349dbbb0c82129392acf70 # v3.95.6
28-
with:
29-
extra_args: --only-verified --fail

0 commit comments

Comments
 (0)