fix: scanning secrets only for the last 5 commits (#78)

* fix: scanning secrets only for the last commit * Update reusable-build-test-release.yml
splunk · May 31, 2023 · c337191 · c337191
1 parent 2ce8a17
commit c337191
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/reusable-build-test-release.yml b/.github/workflows/reusable-build-test-release.yml
@@ -320,7 +320,7 @@ jobs:
       - name: Trufflehog Actions Scan
         uses: edplato/[email protected]
         with:
-          scanArguments: "--max_dept 50 -x .github/workflows/exclude-patterns.txt --allow .github/workflows/trufflehog-false-positive.json"
+          scanArguments: "--max_dept 5 -x .github/workflows/exclude-patterns.txt --allow .github/workflows/trufflehog-false-positive.json"
 
   semgrep:
     runs-on: ubuntu-latest