Skip to content

security: harden secrets scanning across the repository#682

Merged
AnnabelJoe merged 1 commit into
AnnabelJoe:mainfrom
devSoniia:issue-600-harden-secrets-scanning
Jun 27, 2026
Merged

security: harden secrets scanning across the repository#682
AnnabelJoe merged 1 commit into
AnnabelJoe:mainfrom
devSoniia:issue-600-harden-secrets-scanning

Conversation

@devSoniia

Copy link
Copy Markdown
Contributor

Closes #600

Changes

  • Add TruffleHog workflow as second-layer secret scanning on PRs
  • Improve .gitleaks.toml: widen allowlist paths, add placeholder allowlist
  • Schedule weekly secret scans
  • Enable gitleaks PR comments

Security

Two independent tools now scan every PR for secrets.

@drips-wave

drips-wave Bot commented Jun 26, 2026

Copy link
Copy Markdown

@devSoniia Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

@AnnabelJoe AnnabelJoe merged commit c195891 into AnnabelJoe:main Jun 27, 2026
6 of 17 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Harden secrets scanning across the repository

2 participants