Bryan BeverlyandCursor
84a2b33c9f
The SHA pin comment referenced `# v1`, but rwx-research/setup-captain has no rolling v1 tag (only specific versions like v1.4.1). This caused Renovate to fail with "Could not determine new digest for update." The SHA itself is unchanged -- only the comment is corrected to reflect the actual tagged version (v1.4.1) so Renovate can track updates. Co-authored-by: Cursor <[email protected]>
30 lines
909 B
YAML
30 lines
909 B
YAML
name: Detectors Aggregation
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
schedule:
|
|
- cron: "0 8 * * *"
|
|
|
|
jobs:
|
|
test-detectors:
|
|
if: ${{ github.repository == 'trufflesecurity/trufflehog' }}
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
actions: "read"
|
|
contents: "read"
|
|
id-token: "write"
|
|
steps:
|
|
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
|
|
- uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
|
|
- name: Install gotestsum
|
|
uses: jaxxstorm/action-install-gh-release@25e24d2d23ae098373794ef1d6faecb48ee52da8 # v3.0.0
|
|
with:
|
|
repo: gotestyourself/gotestsum
|
|
- uses: rwx-research/setup-captain@f761ee3671e4c027299f8a5842a53fba8ddd8e37 # v1.4.1
|
|
- name: Test Go
|
|
run: |
|
|
export CGO_ENABLED=1
|
|
captain run detectors
|
|
env:
|
|
RWX_ACCESS_TOKEN: ${{ secrets.RWX_ACCESS_TOKEN }}
|