PDP-1182: Add org ruleset support to trufflehog-scan.yml#45

Merged

GAdityaVarma merged 10 commits intomainfrom

feat/PDP-1182-trufflehog-org-ruleset-support

Apr 9, 2026

Commits on Apr 8, 2026

PDP-1182: Add org ruleset support to trufflehog-scan.yml

SameeraPriyathamTadikonda
and
Copilot
committed
simplify: replace dual-scanner with Docker-only filesystem scan

SameeraPriyathamTadikonda
and
Copilot
committed
fix: honor exclusion patterns in Docker filesystem scan

SameeraPriyathamTadikonda
and
Copilot
committed
security: pin actions to commit SHAs (SECCMP-1797)

SameeraPriyathamTadikonda
and
Copilot
committed
revert: remove copyright-check.yml changes from trufflehog PR

SameeraPriyathamTadikonda
and
Copilot
committed
fix: address valid PR review comments (comments 5, 6, 7)

SameeraPriyathamTadikonda
and
Copilot
committed
fix: add issues: write permission for PR comment step (github.rest.issues.*)

SameeraPriyathamTadikonda
and
Copilot
committed
security: move all event payload expressions to env: vars (SECCMP-1797)

SameeraPriyathamTadikonda
and
Copilot
committed
fix: use herestring instead of echo pipe for grep (prevents -n/-e filename edge case)

SameeraPriyathamTadikonda
and
Copilot
committed
fix: fail explicitly when Docker scan fails to prevent fail-open bypass

SameeraPriyathamTadikonda
and
Copilot
committed