diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 57750ec..93f0065 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -62,7 +62,7 @@ jobs: with: fetch-depth: 0 - name: Scan repository history - uses: trufflesecurity/trufflehog@20652fbbdefffcdaa493a5bf57ab2ac6b1db715b # v3.97.1 + uses: trufflesecurity/trufflehog@4dd8831c5f12599465d4d45c3c447b4018a34c85 # v3.97.9 with: version: 3.97.1 extra_args: --results=verified @@ -72,7 +72,7 @@ jobs: fetch-depth: 1 path: current - name: Scan the current source for verified and unknown secrets - uses: trufflesecurity/trufflehog@20652fbbdefffcdaa493a5bf57ab2ac6b1db715b # v3.97.1 + uses: trufflesecurity/trufflehog@4dd8831c5f12599465d4d45c3c447b4018a34c85 # v3.97.9 with: path: current head: HEAD