From 2bb3d892a633e6fab3ef62a6778edb55567804db Mon Sep 17 00:00:00 2001 From: zksync-admin-bot2 Date: Thu, 8 Aug 2024 11:31:10 +0300 Subject: [PATCH] Updating TruffleHog --- .github/workflows/secrets_scanner.yaml | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) create mode 100644 .github/workflows/secrets_scanner.yaml diff --git a/.github/workflows/secrets_scanner.yaml b/.github/workflows/secrets_scanner.yaml new file mode 100644 index 0000000..4be8437 --- /dev/null +++ b/.github/workflows/secrets_scanner.yaml @@ -0,0 +1,19 @@ +name: Leaked Secrets Scan +on: + pull_request: + merge_group: +jobs: + TruffleHog: + runs-on: ubuntu-latest + steps: + - name: Checkout code + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + with: + fetch-depth: 0 + - name: TruffleHog OSS + uses: trufflesecurity/trufflehog@f2a0ea0b70288cf25ba46d906034417555a207a8 # v3.69.0 + with: + path: ./ + base: ${{ github.event.repository.default_branch }} + head: HEAD + extra_args: --debug --only-verified