Use inline trufflehog:ignore instead of exclude paths file
Inline comments are more targeted than excluding the entire file from secret scanning. Remove the .trufflehog.yml exclude file and the --exclude-paths flag from the workflow. Signed-off-by: Bryan Frimin <bryan@getprobo.com>
This commit is contained in:
committed by
Sacha Al Himdani
parent
bba7855678
commit
7dcc3d21ac
2
.github/workflows/secrets.yaml
vendored
2
.github/workflows/secrets.yaml
vendored
@@ -19,4 +19,4 @@ jobs:
|
||||
submodules: recursive
|
||||
- uses: "trufflesecurity/trufflehog@b78fbfd8eb982f4802e09a265fb2bc37b3040975" # main
|
||||
with:
|
||||
extra_args: "--results=verified,unknown --exclude-paths=.trufflehog.yml"
|
||||
extra_args: "--results=verified,unknown"
|
||||
|
||||
Reference in New Issue
Block a user