Skip to content

Updated trivy.yml and trufflehog.yml GHA workflows #10

Updated trivy.yml and trufflehog.yml GHA workflows

Updated trivy.yml and trufflehog.yml GHA workflows #10

Workflow file for this run

name: Trufflehog Security Scan
on:
push:
branches:
- master
pull_request:
jobs:
trufflehog-vulnerability-detection:
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@v4
- name: Secret Scanning
id: trufflehog_scan
uses: trufflesecurity/[email protected]
with:
path: ./
base: "" # No specific base commit for comparison, scans the entire branch
head: ${{ github.ref_name }} # Current branch name
extra_args: --exclude-detectors uri --exclude-paths .trufflehog/.trufflehogignore.txt # Exclude the URI detector and specific files from scanning