Skip to content

Commit e269081

Browse files
Enable blocking on verified secrets in TruffleHog scan (#138)
1 parent 020de3b commit e269081

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

.github/workflows/org-required-trufflehog.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ jobs:
2424
uses: grafana/security-github-actions/.github/workflows/reusable-trufflehog.yml@main
2525
with:
2626
# Fail on verified secrets - blocking mode
27-
fail-on-verified: "false" # Block on verified secrets
27+
fail-on-verified: "true" # Block on verified secrets
2828
fail-on-unverified: "false" # Don't block on unverified secrets
2929
runs-on: ${{ !github.event.repository.private && 'ubuntu-latest' || 'ubuntu-arm64-small' }} # Use same runner pattern as zizmor
3030
secrets: inherit

0 commit comments

Comments
 (0)