diff --git a/.github/workflows/trufflehog.yaml b/.github/workflows/trufflehog.yaml index 7f6646e1..9a065f44 100644 --- a/.github/workflows/trufflehog.yaml +++ b/.github/workflows/trufflehog.yaml @@ -17,4 +17,5 @@ jobs: - name: Secret Scanning uses: trufflesecurity/trufflehog@main with: - extra_args: --results=verified,unknown + # exclude buggy postgres detector that is causing false positives and not relevant to our codebase + extra_args: --results=verified,unknown --exclude-detectors=postgres