Skip to content

chore(deps): bump the actions group with 3 updates #188

chore(deps): bump the actions group with 3 updates

chore(deps): bump the actions group with 3 updates #188

Workflow file for this run

# SPDX-License-Identifier: MPL-2.0
# This workflow is managed by gh actions-lock.
# Calls the estate's shared secret scanner (gitleaks + rust-secrets +
# shell-secrets). Replaces an inline trufflehog job: trufflehog was retired
# estate-wide as redundant, and this repo had no other leak scanning, so the
# scanner is UPGRADED here rather than removed.
#
# `secrets: inherit` is REQUIRED — without it the gitleaks action's inner
# secrets.GITHUB_TOKEN is empty and the scan silently degrades.
name: 'Secret Scanner'
on:
pull_request:
push:
branches: [main, master]
concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true
permissions:
actions: read
contents: read
jobs:
scan:
uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@bd0df9ead7faf0cdfe0e13e7966d91e28d0101d4

Check failure on line 23 in .github/workflows/secret-scanner.yml

View workflow run for this annotation

GitHub Actions / .github/workflows/secret-scanner.yml

Invalid workflow file

error parsing called workflow ".github/workflows/secret-scanner.yml" -> "hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@bd0df9ead7faf0cdfe0e13e7966d91e28d0101d4" : workflow was not found. See https://docs.github.com/actions/learn-github-actions/reusing-workflows#access-to-reusable-workflows for more information.
secrets: inherit