-
Notifications
You must be signed in to change notification settings - Fork 9
/
action.yml
32 lines (30 loc) · 1.42 KB
/
action.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
name: 'TruffleHog Enterprise'
description: 'Scan Github Actions with TruffleHog Enterprise'
author: Truffle Security Co. <support@trufflesec.com>
inputs:
args:
description: |
Flags:
--help Show context-sensitive help (also try --help-long and --help-man).
-v, --debug Enable debug mode.
--trace Enable tracing of code line numbers.
--json Enable JSON output.
--send-error-telemetry Turns error telemetry off.
--fail-verified Only emit failure code for verified findings.
--quiet Only show results.
--config=CONFIG Path to configuration file. You can also specify Google Secrets Manager secrets with
'gsm://<project_id>/<secret_name>'.
Args:
<base> Start scanning from here (usually main branch).
<head> Scan commits until here (usually dev branch).
[<workdir>] Optional path to the repo to scan.
required: false
deprecationMessage: This action is deprecated. Please use the open-source scanner to scan via GitHub actions, as described at https://github.com/trufflesecurity/trufflehog?tab=readme-ov-file#octocat-trufflehog-github-action.
branding:
icon: "shield"
color: "green"
runs:
using: "docker"
image: "Dockerfile"
args:
- ${{ inputs.args }}