Skip to content

Commit 4fd78da

Browse files
hyperpolymathclaude
andcommitted
fix(ci): drop the retired inline trufflehog job
secret-scanner-reusable.yml deliberately retired TruffleHog as redundant ("gitleaks provides sufficient coverage at lower cost" — see the reusable's header). The inline job survived here, fails, and turns the whole workflow red even when gitleaks, rust-secrets and shell-secrets all pass — so the repo keeps emitting ci_activity notifications after the startup_failure is fixed. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
1 parent b6ef087 commit 4fd78da

1 file changed

Lines changed: 0 additions & 10 deletions

File tree

.github/workflows/secret-scanner.yml

Lines changed: 0 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -20,13 +20,3 @@ jobs:
2020
actions: read
2121
uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@d135b05bfc647d0c0fbfedc7e80f37ea50f49236
2222
secrets: inherit
23-
trufflehog:
24-
runs-on: ubuntu-latest
25-
steps:
26-
- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
27-
with:
28-
fetch-depth: 0
29-
- name: TruffleHog Secret Scan
30-
uses: trufflesecurity/trufflehog@30d5bb91af1a771378349dbbb0c82129392acf70 # v3.95.6
31-
with:
32-
extra_args: --only-verified --fail

0 commit comments

Comments
 (0)