-
Notifications
You must be signed in to change notification settings - Fork 29
DO NOT MERGE: PDP-47:Setting up trufflehog scan for mlcp #503
New issue
Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? # to your account
base: develop
Are you sure you want to change the base?
DO NOT MERGE: PDP-47:Setting up trufflehog scan for mlcp #503
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull Request Overview
This PR sets up a TruffleHog secret scan for mlcp by adding a new GitHub Actions workflow.
- Introduces a workflow to run secret scans on pull requests and manual dispatch.
- Configures job steps to checkout the code and run TruffleHog.
Comments suppressed due to low confidence (1)
.github/workflows/main.yml:5
- Consider reviewing the branch filter syntax on line 5. If the intention is to target the 'develop' branch, replacing develop with 'develop' (without asterisks) may avoid potential misinterpretation by GitHub Actions.
pull_request: branches: [ *develop* ]
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull Request Overview
This PR sets up a new GitHub Actions workflow to enable TruffleHog secret scans on pull requests (targeting the develop branch) and via manual triggers.
- Added a new workflow file to run TruffleHog Secret Scan
- Configured the trigger to run on pull requests for the develop branch and manual dispatch
No description provided.