From ee8e254c825d8eaf2cad84c774dd5e337a236260 Mon Sep 17 00:00:00 2001 From: Akash Jaiswal Date: Wed, 17 Apr 2024 18:43:23 +0530 Subject: [PATCH 1/2] Added Truffle scan in workflow check --- .github/workflows/trufflehog-scan.yaml | 34 ++++++++++++++++++++++++++ 1 file changed, 34 insertions(+) create mode 100644 .github/workflows/trufflehog-scan.yaml diff --git a/.github/workflows/trufflehog-scan.yaml b/.github/workflows/trufflehog-scan.yaml new file mode 100644 index 0000000..de436dc --- /dev/null +++ b/.github/workflows/trufflehog-scan.yaml @@ -0,0 +1,34 @@ +name: Trufflehog Security Scan +on: + push: + branches: + - main + pull_request: + workflow_call: +permissions: write-all +jobs: + initialize: + name: Initialize + runs-on: ubuntu-latest + steps: + - name: Checkout Repository + uses: actions/checkout@v2 + with: + fetch-depth: 1 + - name: Setup Nodejs + uses: actions/setup-node@v1 + + + trufflehog-scan: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v2 + - name: Installing trufflehog + run: | + curl -sSfL https://raw.githubusercontent.com/trufflesecurity/trufflehog/main/scripts/install.sh | sh -s -- -b /usr/local/bin + - name: Run Trufflehog + run: | + git branch + git status + trufflehog git file://. --since-commit HEAD --only-verified --fail + From afb2a38d87879f201eeb3a17771aa851266954dc Mon Sep 17 00:00:00 2001 From: Akash Jaiswal Date: Mon, 22 Apr 2024 16:52:09 +0530 Subject: [PATCH 2/2] Update the truffle --- .github/workflows/trufflehog-scan.yaml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/trufflehog-scan.yaml b/.github/workflows/trufflehog-scan.yaml index de436dc..e080022 100644 --- a/.github/workflows/trufflehog-scan.yaml +++ b/.github/workflows/trufflehog-scan.yaml @@ -12,17 +12,17 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout Repository - uses: actions/checkout@v2 + uses: actions/checkout@v3 with: fetch-depth: 1 - name: Setup Nodejs - uses: actions/setup-node@v1 + uses: actions/setup-node@v3 trufflehog-scan: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v3 - name: Installing trufflehog run: | curl -sSfL https://raw.githubusercontent.com/trufflesecurity/trufflehog/main/scripts/install.sh | sh -s -- -b /usr/local/bin