thevoid.cafe
Non stop entertainment! The wackiest NixOS configuration to-date.
thevoid.cafe/projects/puzzlevision
nixos
flake
flake-parts
dotfiles
home-manager
nix
👷 Add TruffleHog scan pipeline
+15
+15
.tangled/workflows/trufflehog-scan.yaml
+15
.tangled/workflows/trufflehog-scan.yaml
···
1
+
when:
2
+
- event: ["push", "manual"]
3
+
branch: ["stable", "develop", "bugfix/*", "feature/*", "refactor/*"]
4
+
- event: ["pull_request"]
5
+
branch: ["stable"]
6
+
7
+
engine: "nixery"
8
+
9
+
dependencies:
10
+
nixpkgs:
11
+
- trufflehog
12
+
13
+
steps:
14
+
- name: "TruffleHog: scan for exposed secrets"
15
+
command: "trufflehog git --only-verified file://."