diff --git a/.github/workflows/secrets.yml b/.github/workflows/secrets.yml deleted file mode 100644 index e1a03cbf..00000000 --- a/.github/workflows/secrets.yml +++ /dev/null @@ -1,39 +0,0 @@ -name: Secrets -on: - pull_request: ~ - push: - branches: - - main - schedule: - - cron: "0 3 * * *" - workflow_dispatch: ~ - -permissions: read-all - -jobs: - secrets: - name: Secrets - runs-on: ubuntu-24.04 - steps: - - name: Harden runner - uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2 - with: - disable-sudo: true - egress-policy: block - allowed-endpoints: > - actions-results-receiver-production.githubapp.com:443 - api.github.com:443 - artifactcache.actions.githubusercontent.com:443 - ghcr.io:443 - github.com:443 - objects.githubusercontent.com:443 - pkg-containers.githubusercontent.com:443 - - name: Checkout repository - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 - with: - fetch-depth: 0 - persist-credentials: false - - name: Scan for secrets - uses: trufflesecurity/trufflehog@4d355d414e2d6c674bcebfe40cb648e22f6457ae # v3.83.1 - with: - extra_args: --only-verified