We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 82ad258 commit ab4c178Copy full SHA for ab4c178
.github/workflows/pipeline.yml
@@ -114,10 +114,23 @@ jobs:
114
folder: badges/
115
clean: false
116
117
+ truffle:
118
+ name: Truffle Hog
119
+ runs-on: ubuntu-latest
120
+ steps:
121
+ - name: Check out repository
122
+ uses: actions/checkout@v4
123
+ with:
124
+ fetch-depth: 0
125
+ - name: Secret Scanning
126
+ uses: trufflesecurity/trufflehog@main
127
128
+ extra_args: --results=verified,unknown
129
+
130
pypi-publish:
131
name: Upload release to PyPI
132
runs-on: ubuntu-latest
- needs: [ ruff, pytest, audit ]
133
+ needs: [ ruff, pytest, audit, truffle ]
134
if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags')
135
environment:
136
name: pypi
0 commit comments