Skip to content
This repository was archived by the owner on Dec 30, 2025. It is now read-only.

Commit 6a6c419

Browse files
committed
refactor: remove redundant TruffleHog secret detection
- Remove TruffleHog job from security workflow as it duplicates GitLeaks functionality - GitLeaks already provides comprehensive secret detection in CI workflow - Eliminates redundancy and reduces workflow complexity - Maintains security coverage without duplicate scanning
1 parent 9184e85 commit 6a6c419

File tree

1 file changed

+0
-25
lines changed

1 file changed

+0
-25
lines changed

.github/workflows/security.yml

Lines changed: 0 additions & 25 deletions
Original file line numberDiff line numberDiff line change
@@ -128,31 +128,6 @@ jobs:
128128
filter_mode: nofilter
129129
fail_level: none
130130
trivy_flags: --severity HIGH,CRITICAL --exit-code 0
131-
secrets:
132-
name: Secret Detection
133-
runs-on: ubuntu-latest
134-
needs: [changes]
135-
if: always()
136-
permissions:
137-
contents: read
138-
security-events: write
139-
steps:
140-
- name: Checkout
141-
uses: actions/checkout@v4
142-
- name: Scan for Secrets
143-
uses: trufflesecurity/trufflehog@main
144-
with:
145-
path: ./
146-
base: main
147-
head: HEAD
148-
extra_args: --debug --only-verified
149-
- name: Upload Results
150-
if: always()
151-
uses: actions/upload-artifact@v4
152-
with:
153-
name: trufflehog-results
154-
path: trufflehog-results.json
155-
retention-days: 30
156131
shell:
157132
name: Shell Script Security
158133
runs-on: ubuntu-latest

0 commit comments

Comments
 (0)