ci(action): add truffle job

Author: scottzach1

.github/workflows/pipeline.yml

@@ -114,10 +114,22 @@ jobs:
           folder: badges/
           clean: false
 
+  truffle:
+    runs-on: ubuntu-latest
+    steps:
+    - name: Check out repository
+      uses: actions/checkout@v4
+      with:
+        fetch-depth: 0
+    - name: Secret Scanning
+      uses: trufflesecurity/trufflehog@main
+      with:
+        extra_args: --results=verified,unknown
+
   pypi-publish:
     name: Upload release to PyPI
     runs-on: ubuntu-latest
-    needs: [ ruff, pytest, audit ]
+    needs: [ ruff, pytest, audit, truffle ]
     if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags')
     environment:
       name: pypi