Skip to content

Commit 5764cba

Browse files
fix(ci): drop the retired inline trufflehog job (#12)
The permission fix has landed, so `Secret Scanner` now **starts** — `gitleaks`, `rust-secrets` and `shell-secrets` all pass. But the workflow still reports **red**, because of a vestigial inline `trufflehog` job. `secret-scanner-reusable.yml` **deliberately retired** TruffleHog as redundant — from its own header: > Trufflehog removed: gitleaks provides sufficient coverage at lower cost. The inline job was left behind when the repo moved to the reusable. It fails and reds the whole workflow, so the repo keeps emitting `ci_activity` notifications even though secret scanning is green. This removes the retired job. Coverage is unchanged — gitleaks in the reusable already covers it. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
1 parent 0ff8e68 commit 5764cba

1 file changed

Lines changed: 0 additions & 11 deletions

File tree

.github/workflows/secret-scanner.yml

Lines changed: 0 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -20,14 +20,3 @@ jobs:
2020
actions: read
2121
uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@09e7023d24682621bea4e11965a1ef5e87d86c3b
2222
secrets: inherit
23-
trufflehog:
24-
runs-on: ubuntu-latest
25-
timeout-minutes: 10
26-
steps:
27-
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
28-
with:
29-
fetch-depth: 0
30-
- name: TruffleHog Secret Scan
31-
uses: trufflesecurity/trufflehog@27b0417c16317ca9a472a9a8092acce143b49c55 # v3.95.9
32-
with:
33-
extra_args: --only-verified --fail

0 commit comments

Comments
 (0)