diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 57750ec..8ffbc62 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -62,7 +62,7 @@ jobs: with: fetch-depth: 0 - name: Scan repository history - uses: trufflesecurity/trufflehog@20652fbbdefffcdaa493a5bf57ab2ac6b1db715b # v3.97.1 + uses: trufflesecurity/trufflehog@e76dff8a7e57d6df0c60ad8cbf5d5cba505a8fc9 # v3.99.2 with: version: 3.97.1 extra_args: --results=verified @@ -72,7 +72,7 @@ jobs: fetch-depth: 1 path: current - name: Scan the current source for verified and unknown secrets - uses: trufflesecurity/trufflehog@20652fbbdefffcdaa493a5bf57ab2ac6b1db715b # v3.97.1 + uses: trufflesecurity/trufflehog@e76dff8a7e57d6df0c60ad8cbf5d5cba505a8fc9 # v3.99.2 with: path: current head: HEAD