From 418c35c09e9e3cf2a42c78afd1081178f784947d Mon Sep 17 00:00:00 2001 From: Luc Georges Date: Mon, 10 Jun 2024 16:10:23 +0200 Subject: [PATCH] feat(ci): add trufflehog secrets detection (#1551) * feat(ci): add trufflehog secrets detection * fix(ci): remove unnecessary permissions --- .github/workflows/trufflehog.yml | 15 +++++++++++++++ 1 file changed, 15 insertions(+) create mode 100644 .github/workflows/trufflehog.yml diff --git a/.github/workflows/trufflehog.yml b/.github/workflows/trufflehog.yml new file mode 100644 index 000000000..9cbbf6803 --- /dev/null +++ b/.github/workflows/trufflehog.yml @@ -0,0 +1,15 @@ +on: + push: + +name: Secret Leaks + +jobs: + trufflehog: + runs-on: ubuntu-latest + steps: + - name: Checkout code + uses: actions/checkout@v4 + with: + fetch-depth: 0 + - name: Secret Scanning + uses: trufflesecurity/trufflehog@main