From bd6bdecb47917991a95cca361597b1b34e87c37e Mon Sep 17 00:00:00 2001 From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com> Date: Tue, 21 Jul 2026 07:26:12 +0100 Subject: [PATCH] fix(ci): drop the retired inline trufflehog job MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit secret-scanner-reusable.yml deliberately retired TruffleHog as redundant ("gitleaks provides sufficient coverage at lower cost" — see the reusable's header). The inline job survived here, fails, and turns the whole Secret Scanner workflow red even though gitleaks, rust-secrets and shell-secrets all pass — so the repo keeps emitting ci_activity notifications. Co-Authored-By: Claude Opus 4.8 --- .github/workflows/secret-scanner.yml | 11 ----------- 1 file changed, 11 deletions(-) diff --git a/.github/workflows/secret-scanner.yml b/.github/workflows/secret-scanner.yml index 1e94244..1a55271 100644 --- a/.github/workflows/secret-scanner.yml +++ b/.github/workflows/secret-scanner.yml @@ -16,14 +16,3 @@ jobs: contents: read uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@c65436ee3351cd6b0fa14b142938b195efc77586 secrets: inherit - trufflehog: - runs-on: ubuntu-latest - timeout-minutes: 10 - steps: - - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 - with: - fetch-depth: 0 - - name: TruffleHog Secret Scan - uses: trufflesecurity/trufflehog@30d5bb91af1a771378349dbbb0c82129392acf70 # v3.95.6 - with: - extra_args: --only-verified --fail \ No newline at end of file