Update security workflow

Author: mheadd

.github/workflows/security.yml

@@ -105,7 +105,7 @@ jobs:
       uses: actions/checkout@v4
 
     - name: Run TruffleHog secrets scan
-      uses: trufflesecurity/trufflehog@v3
+      uses: trufflesecurity/trufflehog@v3.95.5
       with:
         path: ./
         extra_args: --debug --only-verified
@@ -197,6 +197,7 @@ jobs:
   guarddog-scan:
     name: GuardDog Supply Chain Security
     runs-on: ubuntu-latest
+    timeout-minutes: 10
     permissions:
       contents: read
       security-events: write
@@ -217,7 +218,7 @@ jobs:
     - name: Run GuardDog scan
       run: |
         echo "🐕 Running GuardDog supply chain security scan..."
-        guarddog npm verify package.json --output-format json > guarddog-results.json || true
+        guarddog npm verify package.json --output-format json --exclude-rules potentially_compromised_email_domain,unclaimed_maintainer_email_domain,repository_integrity_mismatch > guarddog-results.json || true
         
     - name: Display GuardDog results
       if: always()