diff --git a/.github/workflows/trufflehog.yml b/.github/workflows/trufflehog.yml new file mode 100644 index 00000000..d76ddd4b --- /dev/null +++ b/.github/workflows/trufflehog.yml @@ -0,0 +1,21 @@ +name: Scanning for Secrets + +run-name: ${{ github.actor }} is scanning for secrets +on: + pull_request: + +jobs: + TruffleHog: + runs-on: ubuntu-latest + steps: + - name: Checkout code + uses: actions/checkout@v3 + with: + fetch-depth: 0 + - name: TruffleHog OSS + uses: trufflesecurity/trufflehog@main + with: + path: ./ + base: ${{ github.event.repository.default_branch }} + head: HEAD + extra_args: --debug