From a278820549b6901fa2661a7e4161da792ef2ca8d Mon Sep 17 00:00:00 2001 From: Albert Villanova del Moral <8515462+albertvillanova@users.noreply.github.com> Date: Tue, 25 Aug 2026 18:30:58 +0200 Subject: [PATCH] Stop excluding the trufflehog lob detector --- .github/workflows/trufflehog.yml | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/.github/workflows/trufflehog.yml b/.github/workflows/trufflehog.yml index 045decd50bd..02c7a87dd5d 100644 --- a/.github/workflows/trufflehog.yml +++ b/.github/workflows/trufflehog.yml @@ -31,7 +31,5 @@ jobs: # pins only the wrapper. pin the image by digest too, and bump it together with the action SHA. version: 3.97.0@sha256:ff4c95e9df7d645daf2140e3ca1039031c63106268d5fbb25feb43ceca1bcc33 # exclude buggy detectors that cause false positives and are not relevant to our codebase. - # lob matches `(live|test)_[a-zA-Z0-9_]{35}`, which any pytest name of exactly 35 characters after - # `test_` satisfies (e.g. `test_reward_func_wrong_number_of_rewards`). # without --fail-on-scan-errors, a scan that errors out and covers nothing passes as a scan that found nothing. - extra_args: --results=verified,unknown --exclude-detectors=postgres,lob --fail-on-scan-errors + extra_args: --results=verified,unknown --exclude-detectors=postgres --fail-on-scan-errors