Skip to content

chore: remove obsolete/corrupted check-no-vlang.sh gate (#26) #52

chore: remove obsolete/corrupted check-no-vlang.sh gate (#26)

chore: remove obsolete/corrupted check-no-vlang.sh gate (#26) #52

# SPDX-License-Identifier: MPL-2.0
name: Secret Scanner
on:
pull_request:
push:
branches: [main]
concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true
permissions:
contents: read
# Single secret scanner. The standards reusable runs gitleaks (+ a Rust-secrets
# check). An inline TruffleHog job previously lived here, but the reusable
# DELIBERATELY retired TruffleHog as redundant (gitleaks gives sufficient
# coverage at lower cost — see the reusable's header). Re-adding it was
# duplicated work, not extra coverage, so it has been removed. See
# .github/workflows/README.adoc.
jobs:
scan:
permissions:
contents: read
pull-requests: write
actions: read
uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@09e7023d24682621bea4e11965a1ef5e87d86c3b
secrets: inherit