ci: stage secret scan input inside scanner container

2026-08-27 19:00:11 +02:00
parent 25f4b9eac1
commit 4a0ec6a495
1 changed files with 1 additions and 1 deletions
@@ -16,7 +16,7 @@ jobs:
          set -euo pipefail
          scan_container="$(docker create ghcr.io/trufflesecurity/trufflehog:3.79.0 filesystem /scan --only-verified --fail --no-update)"
          trap 'docker rm -f "${scan_container}" >/dev/null 2>&1 || true' EXIT
-          tar --exclude=.git -cf - . | docker cp - "${scan_container}:/scan"
+          tar --exclude=.git --transform='s#^\.$#scan#;s#^\./#scan/#' -cf - . | docker cp - "${scan_container}:/"
          docker start -a "${scan_container}"

  quality: