diff --git a/.github/workflows/secret.yaml b/.github/workflows/secret.yaml index 9b490e0..98dfa77 100644 --- a/.github/workflows/secret.yaml +++ b/.github/workflows/secret.yaml @@ -39,3 +39,23 @@ jobs: uses: trufflesecurity/TruffleHog-Enterprise-Github-Action@main with: args: --fail-verified ${{ github.event.repository.default_branch }} HEAD + truffle-cli: + name: TruffleHog CLI + runs-on: ubuntu-latest + steps: + - name: Checkout + uses: actions/checkout@v4 + with: + fetch-depth: 0 # fetch all history so multiple commits can be scanned + - name: TruffleHog OSS + id: trufflehog + uses: trufflesecurity/trufflehog@add-actions-cli-switch + continue-on-error: true + with: + path: ./ + base: "${{ github.event.repository.default_branch }}" + head: HEAD + extra_args: --debug --only-verified  + - name: Scan Results Status + if: steps.trufflehog.outcome == 'failure' + run: exit 1