Add secrets scanning in CI (#3)

Add secrets scanning in CI Signed-off-by: Ziwen Ning <[email protected]>
aws-neuron · Jan 10, 2024 · c582ea4 · c582ea4
1 parent bfdb65c
commit c582ea4
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
@@ -31,3 +31,13 @@ jobs:
           dockerfile: Dockerfile.neuronx
           recursive: true
           failure-threshold: error
+  secrets-scanning:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - uses: trufflesecurity/trufflehog@main
+        with:
+          extra_args: --only-verified