ci: bump trufflesecurity/trufflehog in the actions-patch-minor group … #122

	name: Secret scanning

	on:
	push:
	branches:
	- main
	pull_request:
	workflow_dispatch:
	schedule:
	- cron: "17 6 * * 1"

	permissions:
	contents: read

	concurrency:
	group: secret-scanning-${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	gitleaks:
	name: Gitleaks
	runs-on: ubuntu-latest
	steps:
	- name: Checkout repository
	uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
	with:
	fetch-depth: 0
	persist-credentials: false

	- name: Scan Git history
	uses: docker://zricethezav/gitleaks:v8.30.1
	with:
	args: detect --source . --redact --verbose

	trufflehog:
	name: TruffleHog
	runs-on: ubuntu-latest
	steps:
	- name: Checkout repository
	uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
	with:
	fetch-depth: 0
	persist-credentials: false

	- name: Scan changed commits
	uses: trufflesecurity/trufflehog@27b0417c16317ca9a472a9a8092acce143b49c55 # v3.95.9
	with:
	path: ./
	version: 3.95.8
	extra_args: --results=verified,unknown

Provide feedback