Repository navigation
v1.0.1
v1.0.1 (2026-09-04)
Fix
- fix(ci): pin trufflehog action to a real release tag
The floating @v3 tag on trufflesecurity/trufflehog no longer exists
upstream (they only publish precise vX.Y.Z tags now), which broke
the security job's "Set up job" step on push. Pin to v3.97.4 in both
this repo's own ci.yml and the copy shipped inside template/ for
generated projects.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01MkpJdUbmXe6dt5zmrUjNWp (2b8b67a)