Update secret-scan.yml (#137)

getsentry · Jul 17, 2024 · 808a698 · 808a698
1 parent 9ec534e
commit 808a698
Showing 1 changed file with 8 additions and 5 deletions.
diff --git a/.github/workflows/secret-scan.yml b/.github/workflows/secret-scan.yml
@@ -20,14 +20,17 @@ jobs:
  - name: Install Cosign
  uses: sigstore/[email protected]
 
- - name: Get latest TruffleHog release
+ - name: Pin Trufflehog to a know good release
  id: trufflehog_release
  shell: bash
+ # run: |
+ # LATEST_TAG_NAME=$(curl -s https://api.github.com/repos/trufflesecurity/trufflehog/releases/latest | jq -r .name)
+ # LATEST_RELEASE=$(echo ${LATEST_TAG_NAME:1})
+ # echo "latest_tag_name=$LATEST_TAG_NAME" >> "$GITHUB_OUTPUT"
+ # echo "latest_release=$LATEST_RELEASE" >> "$GITHUB_OUTPUT"
  run: |
- LATEST_TAG_NAME=$(curl -s https://api.github.com/repos/trufflesecurity/trufflehog/releases/latest | jq -r .name)
- LATEST_RELEASE=$(echo ${LATEST_TAG_NAME:1})
- echo "latest_tag_name=$LATEST_TAG_NAME" >> "$GITHUB_OUTPUT"
- echo "latest_release=$LATEST_RELEASE" >> "$GITHUB_OUTPUT"
+ echo "latest_tag_name=v3.79.0" >> "$GITHUB_OUTPUT"
+ echo "latest_release=3.79.0" >> "$GITHUB_OUTPUT"
 
  - name: Download and verify TruffleHog release
  run: |