Skip to content

Commit fd3db1f

Browse files
Enable blocking mode for verified secrets in TruffleHog (#116)
1 parent 1252e24 commit fd3db1f

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

.github/workflows/org-required-trufflehog.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ jobs:
2323
uses: grafana/security-github-actions/.github/workflows/reusable-trufflehog.yml@main
2424
with:
2525
# Fail on verified secrets - blocking mode
26-
fail-on-verified: "false" # Block on verified secrets
26+
fail-on-verified: "true" # Block on verified secrets
2727
fail-on-unverified: "false" # Don't block on unverified secrets
2828
runs-on: ${{ !github.event.repository.private && 'ubuntu-latest' || 'ubuntu-arm64-small' }} # Use same runner pattern as zizmor
2929
secrets: inherit

0 commit comments

Comments
 (0)