Fix stale retail/healthcare recipe references and placeholder package metadata #26

	# Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
	#
	# Licensed under the Apache License, Version 2.0 (the "License");
	# you may not use this file except in compliance with the License.
	# You may obtain a copy of the License at
	#
	# http://www.apache.org/licenses/LICENSE-2.0
	#
	# Unless required by applicable law or agreed to in writing, software
	# distributed under the License is distributed on an "AS IS" BASIS,
	# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
	# See the License for the specific language governing permissions and
	# limitations under the License.
	name: Secrets detector

	on:
	pull_request:

	jobs:
	secrets-detector:
	name: Secrets detector
	runs-on: ubuntu-latest
	steps:
	- name: Checkout repository
	uses: actions/checkout@v4
	with:
	fetch-depth: 0

	- name: Install trufflehog
	run: \|
	curl -sSfL https://raw.githubusercontent.com/trufflesecurity/trufflehog/main/scripts/install.sh \| sh -s -- -b /usr/local/bin

	# --results=verified,unknown fails on confirmed secrets and on anything
	# TruffleHog could not check, but drops findings it actively verified as
	# not a secret. Without it, any 40-hex string near a keyword trips a
	# detector -- pinned upstream git SHAs read as Weights & Biases keys.
	# Keep the flags in sync with the secrets-detector job in .gitlab-ci.yml.
	- name: Scan for secrets
	run: \|
	trufflehog git file://. --since-commit ${{ github.event.pull_request.base.sha }} --fail --no-update --results=verified,unknown

Navigation Menu