Skip to content

Commit 9bfd33d

Browse files
committed
Added Truffle scan in workflow check
1 parent 332155d commit 9bfd33d

File tree

1 file changed

+36
-0
lines changed

1 file changed

+36
-0
lines changed
+36
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
name: Trufflehog Security Scan
2+
on:
3+
push:
4+
branches:
5+
- main
6+
pull_request:
7+
branches:
8+
- main
9+
workflow_call:
10+
permissions: write-all
11+
jobs:
12+
terraform:
13+
name: Initialize
14+
runs-on: ubuntu-latest
15+
steps:
16+
- name: Checkout Repository
17+
uses: actions/checkout@v2
18+
with:
19+
fetch-depth: 1
20+
- name: Setup Nodejs
21+
uses: actions/setup-node@v1
22+
23+
24+
trufflehog-scan:
25+
runs-on: ubuntu-latest
26+
steps:
27+
- uses: actions/checkout@v2
28+
- name: Installing trufflehog
29+
run: |
30+
curl -sSfL https://raw.githubusercontent.com/trufflesecurity/trufflehog/main/scripts/install.sh | sh -s -- -b /usr/local/bin
31+
- name: Run Trufflehog
32+
run: |
33+
git branch
34+
git status
35+
trufflehog git file://. --since-commit HEAD --only-verified --fail
36+

0 commit comments

Comments
 (0)