fix(ci): ignore vendor directories in trufflehog scans (#9)

* fix(ci): ignore vendor directories in trufflehog scans

Signed-off-by: Samuel Boynton <sboynton@nvidia.com>

* fix(ci): add headers to trufflehog-exclude-paths

Signed-off-by: Samuel Boynton <sboynton@nvidia.com>

---------

Signed-off-by: Samuel Boynton <sboynton@nvidia.com>

Author: sboynton-nv

.github/workflows/ci.yml

@@ -164,6 +164,7 @@ jobs:
         with:
           post-pr-comment: "true"
           fail-on-findings: "true"
+          extra-args: "--exclude-paths=.trufflehog-exclude-paths"
 
   security-container-scan:
     name: Container Scan (auth-callout)

.trufflehog-exclude-paths

@@ -0,0 +1,4 @@
+# Copyright 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
+(^|/)vendor/