diff --git a/.github/workflows/secret.yaml b/.github/workflows/secret.yaml index a86ba24..9b490e0 100644 --- a/.github/workflows/secret.yaml +++ b/.github/workflows/secret.yaml @@ -10,9 +10,6 @@ jobs: gitleaks: name: Gitleaks runs-on: ubuntu-latest - defaults: - run: - shell: bash steps: - name: Checkout Repo uses: actions/checkout@v4 @@ -23,9 +20,6 @@ jobs: truffle: name: TruffleHog runs-on: ubuntu-latest - defaults: - run: - shell: bash steps: - name: Checkout Repo uses: actions/checkout@v4 @@ -33,3 +27,15 @@ jobs: uses: trufflesecurity/trufflehog@main with: extra_args: --no-verification + truffle-enterprise: + name: TruffleHog Enterprise + runs-on: ubuntu-latest + steps: + - name: Checkout + uses: actions/checkout@v4 + with: + fetch-depth: 0 # fetch all history so multiple commits can be scanned + - name: Scan with TruffleHog Enterprise + uses: trufflesecurity/TruffleHog-Enterprise-Github-Action@main + with: + args: --fail-verified ${{ github.event.repository.default_branch }} HEAD