Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/org-required-trufflehog.yml
Original file line number Diff line number Diff line change
Expand Up @@ -21,7 +21,7 @@ permissions:
jobs:
secret-scan:
name: TruffleHog Secret Scan
uses: grafana/security-github-actions/.github/workflows/reusable-trufflehog.yml@main
uses: grafana/security-github-actions/.github/workflows/reusable-trufflehog.yml@796b732982506cdbe7c80de335bde851c42fbf55 # main
with:
# Non-blocking: job succeeds; PR still gets comments/artifacts when findings exist
fail-on-verified: "false" # Set "true" to fail on verified secrets
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/semgrep.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@ jobs:
runs-on: ubuntu-latest
container:
# A Docker image with Semgrep installed. Do not change this.
image: semgrep/semgrep:1.152.0
image: semgrep/semgrep:1.152.0@sha256:e04d2cb132288d90035db8791d64f610cb255b21e727b94db046243b30c01ae9
steps:
# Fetch project source with GitHub Actions Checkout.
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
Expand Down
Loading