Skip to content

Commit ee8e254

Browse files
committed
Added Truffle scan in workflow check
1 parent 332155d commit ee8e254

File tree

1 file changed

+34
-0
lines changed

1 file changed

+34
-0
lines changed
+34
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,34 @@
1+
name: Trufflehog Security Scan
2+
on:
3+
push:
4+
branches:
5+
- main
6+
pull_request:
7+
workflow_call:
8+
permissions: write-all
9+
jobs:
10+
initialize:
11+
name: Initialize
12+
runs-on: ubuntu-latest
13+
steps:
14+
- name: Checkout Repository
15+
uses: actions/checkout@v2
16+
with:
17+
fetch-depth: 1
18+
- name: Setup Nodejs
19+
uses: actions/setup-node@v1
20+
21+
22+
trufflehog-scan:
23+
runs-on: ubuntu-latest
24+
steps:
25+
- uses: actions/checkout@v2
26+
- name: Installing trufflehog
27+
run: |
28+
curl -sSfL https://raw.githubusercontent.com/trufflesecurity/trufflehog/main/scripts/install.sh | sh -s -- -b /usr/local/bin
29+
- name: Run Trufflehog
30+
run: |
31+
git branch
32+
git status
33+
trufflehog git file://. --since-commit HEAD --only-verified --fail
34+

0 commit comments

Comments
 (0)