Clean up TruffleHog workflow - remove unnecessary logic

Removed:
- Debug/test code checking for test-secrets.txt
- Excessive verbose logging and debug output
- Unused verify-secrets input parameter
- Redundant echo statements and file size checks
- Overly verbose comments

Benefits:
- Cleaner, more professional output
- Faster execution (less logging overhead)
- Easier to read and maintain
- Reduced noise in GitHub Actions logs

Author: isaiah-grafana

.github/workflows/reusable-trufflehog.yml

@@ -28,11 +28,6 @@ on:
         required: false
         default: ""
         type: string
-      verify-secrets:
-        description: "Enable secret verification against real APIs (may trigger rate limits)"
-        required: false
-        default: "true"
-        type: string
       runs-on:
         description: "The runner to use for the job"
         required: false
@@ -78,12 +73,6 @@ jobs:
             | sh -s -- -b /usr/local/bin "${{ steps.version.outputs.version }}"
           trufflehog --version
 
-      - name: Check test files for debugging
-        run: |
-          echo "=== Debugging: Check if test file exists ==="
-          ls -la test-secrets.txt || echo "test-secrets.txt not found"
-          echo "=== File content sample ==="
-          head -10 test-secrets.txt || echo "Cannot read test-secrets.txt"
 
       - name: Identify changed files in pull request for targeted scanning
         id: changed-files
@@ -108,25 +97,14 @@ jobs:
           # Initialize result files
           echo "[]" > all-results.json
 
-          # TruffleHog optimizations applied:
-          # --results=verified,unverified (include both verified and custom detector results)
-          # --filter-unverified (only first unverified per chunk to reduce duplicates)
-          # --filter-entropy=3.0 (filter low-entropy noise)
-          # --max-depth=10 (limit git history)
-          # --exclude-globs (skip common noise files)
-          echo "TruffleHog optimized scan starting (includes custom detector results)..."
+          echo "Starting TruffleHog scan..."
 
           # Full repository scanning
           if [[ "${SCAN_SCOPE}" == "full-repo" || "${SCAN_SCOPE}" == "both" ]]; then
             echo "Running full repository scan..."
 
             if [[ "${SCAN_TYPE}" == "commits" || "${SCAN_TYPE}" == "both" ]]; then
               echo "Scanning git commit history..."
-              echo "=== TruffleHog command ==="
-              echo "trufflehog git file://. --json --no-update (built-in detectors only)"
-
-              # Scan with built-in detectors only
-              echo "=== Scanning with built-in detectors ==="
               trufflehog git file://. \
                 --json \
                 --no-update \
@@ -136,27 +114,17 @@ jobs:
                 --max-depth=10 \
                 --exclude-globs="*.lock,*.sum,node_modules/**,*.git/**" \
                 > commit-results.json || true
-
-              echo "=== Raw results ==="
-              head -20 commit-results.json || echo "No results file"
-              echo "=== Results file size ==="
-              wc -l commit-results.json || echo "No results file"
             fi
 
             if [[ "${SCAN_TYPE}" == "filesystem" || "${SCAN_TYPE}" == "both" ]]; then
               echo "Scanning current filesystem..."
-              echo "=== Filesystem scan command ==="
-              echo "trufflehog filesystem . --json --no-update --results=verified,unverified --filter-unverified (built-in detectors)"
               trufflehog filesystem . \
                 --json \
                 --no-update \
                 --results=verified,unverified \
                 --filter-unverified \
                 --filter-entropy=3.0 \
                 > fs-results.json || true
-              echo "=== Filesystem scan results ==="
-              wc -l fs-results.json || echo "No filesystem results"
-              head -5 fs-results.json || echo "No filesystem content"
             fi
           fi
 
@@ -186,12 +154,10 @@ jobs:
             fi
           fi
 
-          # Merge all results - TruffleHog outputs newline-delimited JSON (NDJSON)
-          echo "Merging scan results..."
-          touch all-results.ndjson  # Create empty file
+          # Merge all results
+          touch all-results.ndjson
           for f in commit-results.json fs-results.json changed-files-results.json; do
             if [[ -s "${f}" ]]; then
-              echo "Merging results from ${f}"
               cat "${f}" >> all-results.ndjson
             fi
           done