Skip to content

Commit 6295ff5

Browse files
fix(ci): drop the retired inline trufflehog job (#185)
The permission fix has landed, so `Secret Scanner` now **starts** — `gitleaks`, `rust-secrets` and `shell-secrets` all pass. But the workflow still reports **red**, because of a vestigial inline `trufflehog` job. `secret-scanner-reusable.yml` **deliberately retired** TruffleHog as redundant — from its own header: > Trufflehog removed: gitleaks provides sufficient coverage at lower cost. The inline job was left behind when the repo moved to the reusable. It fails and reds the whole workflow, so the repo keeps emitting `ci_activity` notifications even though secret scanning is green. This removes the retired job. Coverage is unchanged — gitleaks in the reusable already covers it. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
1 parent 0368e08 commit 6295ff5

1 file changed

Lines changed: 0 additions & 10 deletions

File tree

.github/workflows/secret-scanner.yml

Lines changed: 0 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -19,13 +19,3 @@ jobs:
1919
actions: read
2020
uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@d135b05bfc647d0c0fbfedc7e80f37ea50f49236
2121
secrets: inherit
22-
trufflehog:
23-
runs-on: ubuntu-latest
24-
steps:
25-
- uses: actions/checkout@v4
26-
with:
27-
fetch-depth: 0
28-
- name: TruffleHog Secret Scan
29-
uses: trufflesecurity/trufflehog@d411fff7b8879a62509f3fa98c07f247ac089a51 # v3.95.5
30-
with:
31-
extra_args: --only-verified --fail

0 commit comments

Comments
 (0)