bc51c910ae
The --exclude-paths flag expects a plain text file with one regex per line, not a YAML file. Signed-off-by: Bryan Frimin <bryan@getprobo.com>
23 lines
462 B
YAML
23 lines
462 B
YAML
name: "trufflehog"
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- "main"
|
|
pull_request:
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
scan:
|
|
runs-on: "ubuntu-latest"
|
|
steps:
|
|
- uses: "actions/checkout@v6"
|
|
with:
|
|
fetch-depth: 0
|
|
submodules: recursive
|
|
- uses: "trufflesecurity/trufflehog@b78fbfd8eb982f4802e09a265fb2bc37b3040975" # main
|
|
with:
|
|
extra_args: "--results=verified,unknown --exclude-paths=.trufflehog-exclude"
|