ci: stage secret scan input inside scanner container
Managed validation / full (pull_request) Successful in 47s
ForgeFlow quality gate / secret-scan (pull_request) Successful in 18s
ForgeFlow quality gate / quality (pull_request) Successful in 6m11s

This commit is contained in:
NuklearRabbit
2026-08-27 19:00:11 +02:00
parent 25f4b9eac1
commit 4a0ec6a495
+1 -1
View File
@@ -16,7 +16,7 @@ jobs:
set -euo pipefail set -euo pipefail
scan_container="$(docker create ghcr.io/trufflesecurity/trufflehog:3.79.0 filesystem /scan --only-verified --fail --no-update)" scan_container="$(docker create ghcr.io/trufflesecurity/trufflehog:3.79.0 filesystem /scan --only-verified --fail --no-update)"
trap 'docker rm -f "${scan_container}" >/dev/null 2>&1 || true' EXIT trap 'docker rm -f "${scan_container}" >/dev/null 2>&1 || true' EXIT
tar --exclude=.git -cf - . | docker cp - "${scan_container}:/scan" tar --exclude=.git --transform='s#^\.$#scan#;s#^\./#scan/#' -cf - . | docker cp - "${scan_container}:/"
docker start -a "${scan_container}" docker start -a "${scan_container}"
quality: quality: