fix(pr-lint): remove unreachable trufflehog scan-results step - #985
Conversation
The trufflesecurity/trufflehog step has no continue-on-error, so a failure already stops the does-not-contain-secrets job immediately. The subsequent Scan Results Status step (if: outcome == 'failure') can never run and is dead code. Closes #871
|
Implemented per the approved plan: removed the unreachable |
|
Simplify clean - advancing to code review |
|
Code review clean - advancing to security review |
|
Security review clean, advancing to coverage check |
|
Coverage ratchet passed - advancing to Human Review |
|
PR was still a draft, so auto-merge could not be enabled directly; marked it ready for review instead. All automated phases (development, simplify, code review, security review, coverage) have passed - ready for human review. |
Super-linter summary
All files and directories linted successfully For more information, see the GitHub Actions workflow run Powered by Super-linter |
|
Auto-merge enabled - PR is ready and will merge once required approvals/checks are satisfied. |
Summary
The
trufflesecurity/trufflehogstep indoes-not-contain-secretshas nocontinue-on-error: true, so a failure already stops the job immediately. The subsequentScan Results Statusstep (if: steps.trufflehog.outcome == 'failure',run: exit 1) can never execute and is dead code. This removes it.No CHANGELOG.md entry is included: this repository name ends in
-template, and the repo's pre-commit changelog lint enforces that CHANGELOG.md stays blank for template repos.How Has This Been Tested
Types of changes
Checklist
run:/script:body.Closes #871