b60b21aad0
The sensitive_data_test.go file contains dummy connection strings (postgres://, mongodb://, amqp://) used as test fixtures for the data leak guardrail. These trigger false positives in TruffleHog. Signed-off-by: Bryan Frimin <bryan@getprobo.com>
23 lines
458 B
YAML
23 lines
458 B
YAML
name: "trufflehog"
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- "main"
|
|
pull_request:
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
scan:
|
|
runs-on: "ubuntu-latest"
|
|
steps:
|
|
- uses: "actions/checkout@v6"
|
|
with:
|
|
fetch-depth: 0
|
|
submodules: recursive
|
|
- uses: "trufflesecurity/trufflehog@b78fbfd8eb982f4802e09a265fb2bc37b3040975" # main
|
|
with:
|
|
extra_args: "--results=verified,unknown --exclude-paths=.trufflehog.yml"
|