From ba9cb87874ebdab7f8fcb5e4d9d3138f74c1de71 Mon Sep 17 00:00:00 2001 From: Gustav-Eikaas <89254170+Gustav-Eikaas@users.noreply.github.com> Date: Tue, 19 Mar 2024 14:38:55 +0100 Subject: [PATCH] ci: add trufflehog (#594) --- .github/workflows/trufflehog.yml | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) create mode 100644 .github/workflows/trufflehog.yml diff --git a/.github/workflows/trufflehog.yml b/.github/workflows/trufflehog.yml new file mode 100644 index 00000000..d76ddd4b --- /dev/null +++ b/.github/workflows/trufflehog.yml @@ -0,0 +1,21 @@ +name: Scanning for Secrets + +run-name: ${{ github.actor }} is scanning for secrets +on: + pull_request: + +jobs: + TruffleHog: + runs-on: ubuntu-latest + steps: + - name: Checkout code + uses: actions/checkout@v3 + with: + fetch-depth: 0 + - name: TruffleHog OSS + uses: trufflesecurity/trufflehog@main + with: + path: ./ + base: ${{ github.event.repository.default_branch }} + head: HEAD + extra_args: --debug