Landing Page und Footer auf die Breite der Doku-Seiten bringen #216

	name: Secret Scanning (TruffleHog)

	# Scans every push and PR for accidentally committed secrets such as
	# API keys, Discord tokens, database passwords, OAuth secrets, etc.
	# TruffleHog uses entropy analysis + 800+ detectors for known secret formats.

	on:
	push:
	branches: [ "main" ]
	pull_request:
	branches: [ "main" ]

	permissions:
	contents: read
	id-token: write # required for verified results

	jobs:
	trufflehog:
	name: Scan for leaked secrets
	runs-on: ubuntu-latest

	steps:
	- name: Checkout repository
	uses: actions/checkout@v7
	with:
	# Fetch full history so TruffleHog can scan all commits in the push/PR
	fetch-depth: 0

	- name: TruffleHog OSS
	uses: trufflesecurity/trufflehog@main
	with:
	# On push: scan only the new commits in this push
	# On PR: scan only the commits added by the PR branch
	#
	# Exclude the Postgres detector: the only DB connection strings in this
	# repo are documentation placeholders (e.g.
	# postgres://user:password@host:5432/ticketbot) in the ticketbot docs.
	# They are not real credentials, so this detector only produces false
	# positives here. All other detectors (Discord tokens, API keys,
	# high-entropy secrets, …) stay fully active.
	extra_args: --results=verified,unknown --exclude-detectors=postgres

Navigation Menu