diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 1f7cbac..acc01cc 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -129,7 +129,7 @@ jobs: - name: TruffleHog Secret Scan (PR) if: github.event_name == 'pull_request' - uses: trufflesecurity/trufflehog@5f47aad1c2df34f7c6230784ce9a5a659922f479 # main + uses: trufflesecurity/trufflehog@37b77001d0174ebec2fcca2bd83ff83a6d45a3ab # main with: path: ./ base: ${{ github.event.pull_request.base.sha }} @@ -138,7 +138,7 @@ jobs: - name: TruffleHog Secret Scan (Push) if: github.event_name == 'push' - uses: trufflesecurity/trufflehog@5f47aad1c2df34f7c6230784ce9a5a659922f479 # main + uses: trufflesecurity/trufflehog@37b77001d0174ebec2fcca2bd83ff83a6d45a3ab # main with: path: ./ base: ${{ github.event.before }} @@ -147,7 +147,7 @@ jobs: - name: TruffleHog Secret Scan (Scheduled) if: github.event_name == 'schedule' - uses: trufflesecurity/trufflehog@5f47aad1c2df34f7c6230784ce9a5a659922f479 # main + uses: trufflesecurity/trufflehog@37b77001d0174ebec2fcca2bd83ff83a6d45a3ab # main with: path: ./ extra_args: --only-verified --since-commit HEAD~100