Skip to content

Commit d0cadd4

Browse files
hyperpolymathclaude
andcommitted
fix(ci): drop the retired inline trufflehog job
secret-scanner-reusable.yml deliberately retired TruffleHog as redundant ("gitleaks provides sufficient coverage at lower cost" — see the reusable's header). The inline job survived here, fails, and turns the whole Secret Scanner workflow red even though gitleaks, rust-secrets and shell-secrets all pass — so the repo keeps emitting ci_activity notifications. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
1 parent 0368e08 commit d0cadd4

1 file changed

Lines changed: 0 additions & 10 deletions

File tree

.github/workflows/secret-scanner.yml

Lines changed: 0 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -19,13 +19,3 @@ jobs:
1919
actions: read
2020
uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@d135b05bfc647d0c0fbfedc7e80f37ea50f49236
2121
secrets: inherit
22-
trufflehog:
23-
runs-on: ubuntu-latest
24-
steps:
25-
- uses: actions/checkout@v4
26-
with:
27-
fetch-depth: 0
28-
- name: TruffleHog Secret Scan
29-
uses: trufflesecurity/trufflehog@d411fff7b8879a62509f3fa98c07f247ac089a51 # v3.95.5
30-
with:
31-
extra_args: --only-verified --fail

0 commit comments

Comments
 (0)