feat: add `physicalai-lerobot-plugin` #652

	name: TruffleHog Secret Scan

	permissions: {} # No permissions by default on workflow level

	on:
	pull_request:
	workflow_dispatch:

	concurrency:
	group: ${{ github.workflow }}-${{ github.event.pull_request.number \|\| github.ref }}
	cancel-in-progress: true

	jobs:
	secret-scan:
	runs-on: ubuntu-latest
	permissions:
	contents: read
	steps:
	- name: Checkout code
	uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
	with:
	fetch-depth: 0
	persist-credentials: false

	- name: Secret Scanning
	uses: trufflesecurity/trufflehog@20652fbbdefffcdaa493a5bf57ab2ac6b1db715b # v3.97.1
	with:
	# Lob detector excluded: Python test function names (e.g. test_validate_gt_mask_invalid_dimensions)
	# match `\b(live\|test)_[a-zA-Z0-9_]{35}\b` and Lob's API returns 403 for any well-formed string,
	# causing false-positive "verified" findings. This repo does not use the Lob postal API.
	extra_args: --results=verified,unknown --exclude-detectors=Lob

Navigation Menu