From 0e87017c9709c83d40019457d66f184e1d6c6483 Mon Sep 17 00:00:00 2001 From: James Garriss <52328727+james-garriss@users.noreply.github.com> Date: Wed, 14 Feb 2024 10:26:38 -0500 Subject: [PATCH] add cli --- .github/workflows/secret.yaml | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) diff --git a/.github/workflows/secret.yaml b/.github/workflows/secret.yaml index 9b490e0..98dfa77 100644 --- a/.github/workflows/secret.yaml +++ b/.github/workflows/secret.yaml @@ -39,3 +39,23 @@ jobs: uses: trufflesecurity/TruffleHog-Enterprise-Github-Action@main with: args: --fail-verified ${{ github.event.repository.default_branch }} HEAD + truffle-cli: + name: TruffleHog CLI + runs-on: ubuntu-latest + steps: + - name: Checkout + uses: actions/checkout@v4 + with: + fetch-depth: 0 # fetch all history so multiple commits can be scanned + - name: TruffleHog OSS + id: trufflehog + uses: trufflesecurity/trufflehog@add-actions-cli-switch + continue-on-error: true + with: + path: ./ + base: "${{ github.event.repository.default_branch }}" + head: HEAD + extra_args: --debug --only-verified  + - name: Scan Results Status + if: steps.trufflehog.outcome == 'failure' + run: exit 1