From bac5c90b470d25186a324bbaa30f957ab945a687 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 6 Jul 2026 01:54:36 +0000 Subject: [PATCH 1/2] ci: bump trufflesecurity/trufflehog in the actions-patch-minor group Bumps the actions-patch-minor group with 1 update: [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog). Updates `trufflesecurity/trufflehog` from 3.95.6 to 3.95.8 - [Release notes](https://github.com/trufflesecurity/trufflehog/releases) - [Commits](https://github.com/trufflesecurity/trufflehog/compare/30d5bb91af1a771378349dbbb0c82129392acf70...00155c9dc586f34d189adc83d3ac2698c2ec551f) --- updated-dependencies: - dependency-name: trufflesecurity/trufflehog dependency-version: 3.95.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-patch-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/secrets.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/secrets.yml b/.github/workflows/secrets.yml index 78359de..7d740ad 100644 --- a/.github/workflows/secrets.yml +++ b/.github/workflows/secrets.yml @@ -43,7 +43,7 @@ jobs: persist-credentials: false - name: Scan changed commits - uses: trufflesecurity/trufflehog@30d5bb91af1a771378349dbbb0c82129392acf70 # v3.95.6 + uses: trufflesecurity/trufflehog@00155c9dc586f34d189adc83d3ac2698c2ec551f # v3.95.8 with: path: ./ version: 3.95.3 From 8cadeef889de25be8824beab451d9f4b50f279a5 Mon Sep 17 00:00:00 2001 From: Altay Date: Sun, 12 Jul 2026 17:38:26 +0300 Subject: [PATCH 2/2] fix(ci): align TruffleHog scanner version --- .github/workflows/secrets.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/secrets.yml b/.github/workflows/secrets.yml index 7d740ad..0fafdcb 100644 --- a/.github/workflows/secrets.yml +++ b/.github/workflows/secrets.yml @@ -46,5 +46,5 @@ jobs: uses: trufflesecurity/trufflehog@00155c9dc586f34d189adc83d3ac2698c2ec551f # v3.95.8 with: path: ./ - version: 3.95.3 + version: 3.95.8 extra_args: --results=verified,unknown