Skip to content

Commit a414ae3

Browse files
hyperpolymathclaude
andcommitted
fix(ci): drop the retired inline trufflehog job
secret-scanner-reusable.yml deliberately retired TruffleHog as redundant ("gitleaks provides sufficient coverage at lower cost" — see the reusable's header). The inline job survived here, fails, and turns the whole Secret Scanner workflow red even though gitleaks, rust-secrets and shell-secrets all pass — so the repo keeps emitting ci_activity notifications. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
1 parent f1e7b94 commit a414ae3

1 file changed

Lines changed: 0 additions & 14 deletions

File tree

.github/workflows/secret-scanner.yml

Lines changed: 0 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -20,17 +20,3 @@ jobs:
2020
actions: read
2121
uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@d135b05bfc647d0c0fbfedc7e80f37ea50f49236
2222
secrets: inherit
23-
trufflehog:
24-
runs-on: ubuntu-latest
25-
timeout-minutes: 15
26-
steps:
27-
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v4
28-
with:
29-
fetch-depth: 0
30-
- name: TruffleHog Secret Scan
31-
uses: trufflesecurity/trufflehog@27b0417c16317ca9a472a9a8092acce143b49c55 # v3.93.3
32-
with:
33-
# The action already appends `--fail` internally; repeating it here
34-
# makes the trufflehog binary abort with "flag 'fail' cannot be
35-
# repeated". Pass only `--only-verified`.
36-
extra_args: --only-verified

0 commit comments

Comments
 (0)