From 037996848ad8c9c49727afb8b1c93a0368db8b78 Mon Sep 17 00:00:00 2001 From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com> Date: Sun, 17 May 2026 03:00:31 +0100 Subject: [PATCH] ci: repin trufflehog off unresolvable moving-main SHA MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit trufflesecurity/trufflehog@7ee2e0fd… (a SHA from upstream's moving `main`, since GC'd) no longer resolves -> the job hard-fails at "Set up job". Repin to released tag v3.92.3 (canonical pin used by reposystem/v3-templater quality.yml). Refs hyperpolymath/standards#82 Co-Authored-By: Claude Opus 4.7 (1M context) --- .github/workflows/quality.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/quality.yml b/.github/workflows/quality.yml index 90a5839..a266bdf 100644 --- a/.github/workflows/quality.yml +++ b/.github/workflows/quality.yml @@ -66,7 +66,7 @@ jobs: - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - name: Check for secrets - uses: trufflesecurity/trufflehog@7ee2e0fdffec27d19ccbb8fb3dcf8a83b9d7f9e8 # main + uses: trufflesecurity/trufflehog@05cccb53bc9e13bc6d17997db5a6bcc3df44bf2f # v3.92.3 with: path: ./ base: ${{ github.event.pull_request.base.sha || github.event.before }}