Skip to content
lock

GitHub Action

Trufflehog Check

v1.0.0 Latest version

Trufflehog Check

lock

Trufflehog Check

Scan for committed secrets with minimal configuration

Installation

Copy and paste the following snippet into your .yml file.

              

- name: Trufflehog Check

uses: UnicornGlobal/trufflehog-actions-scan@v1.0.0

Learn more about this action in UnicornGlobal/trufflehog-actions-scan

Choose a version

Trufflehog Action

Scan recent commits in repository for secrets with trufflehog.

Usage

steps:
- uses: actions/checkout@v2
- uses: UnicornGlobal/trufflehog-actions-scan@master
  with:
    branch: ${{ github.head_ref }}

This will make sure it only runs on the branch that's been pushed

Upstream

Based on: https://github.com/edplato/trufflehog-actions-scan

Why the changes?

We don't want to add a special key when we already have a local copy of the git repo. There is no need to check remotely.

We also don't need special config flags so we removed that functionality too.

We had to change a lot to get it to work.

MIT License