Skip to content

fix(pr-lint): remove unreachable trufflehog scan-results step - #985

Merged
dnyw4l3n13 merged 1 commit into
mainfrom
fix/871-remove-dead-trufflehog-status-step
Sep 11, 2026
Merged

fix(pr-lint): remove unreachable trufflehog scan-results step#985
dnyw4l3n13 merged 1 commit into
mainfrom
fix/871-remove-dead-trufflehog-status-step

Conversation

@dnyw4l3n13

@dnyw4l3n13 dnyw4l3n13 commented Sep 11, 2026

Copy link
Copy Markdown
Collaborator

Summary

The trufflesecurity/trufflehog step in does-not-contain-secrets has no continue-on-error: true, so a failure already stops the job immediately. The subsequent Scan Results Status step (if: steps.trufflehog.outcome == 'failure', run: exit 1) can never execute and is dead code. This removes it.

No CHANGELOG.md entry is included: this repository name ends in -template, and the repo's pre-commit changelog lint enforces that CHANGELOG.md stays blank for template repos.

How Has This Been Tested

  • Workflow YAML change only; no unit/integration tests apply.
  • Verified via repo's actionlint/yamllint pre-commit hooks.

Types of changes

  • Removed no-longer used code

Checklist

  • No user-controlled or step-output value is string-interpolated directly into a run:/script: body.

Closes #871

The trufflesecurity/trufflehog step has no continue-on-error, so a
failure already stops the does-not-contain-secrets job immediately.
The subsequent Scan Results Status step (if: outcome == 'failure')
can never run and is dead code.

Closes #871
@dnyw4l3n13 dnyw4l3n13 added the auto-pr Pull request created automatically label Sep 11, 2026
@dnyw4l3n13 dnyw4l3n13 self-assigned this Sep 11, 2026
@dnyw4l3n13 dnyw4l3n13 added the auto-pr Pull request created automatically label Sep 11, 2026
@dnyw4l3n13

Copy link
Copy Markdown
Collaborator Author

Implemented per the approved plan: removed the unreachable Scan Results Status step from the does-not-contain-secrets job in pr-lint.yml, since the preceding trufflehog step has no continue-on-error and already fails the job on its own. No CHANGELOG.md entry was added - this repo's pre-commit changelog lint requires CHANGELOG.md to stay blank for -template repositories. Draft PR opened; the pull-request workflow will take it from here.

@dnyw4l3n13 dnyw4l3n13 added github-actions Github actions workflow files AI-Work Work for an AI Agent Low Low Priority labels Sep 11, 2026
@dnyw4l3n13

Copy link
Copy Markdown
Collaborator Author

Simplify clean - advancing to code review

@dnyw4l3n13

Copy link
Copy Markdown
Collaborator Author

Code review clean - advancing to security review

@dnyw4l3n13

Copy link
Copy Markdown
Collaborator Author

Security review clean, advancing to coverage check

@dnyw4l3n13

Copy link
Copy Markdown
Collaborator Author

Coverage ratchet passed - advancing to Human Review

@dnyw4l3n13
dnyw4l3n13 marked this pull request as ready for review September 11, 2026 16:09
@dnyw4l3n13
dnyw4l3n13 requested a review from a team as a code owner September 11, 2026 16:09
@dnyw4l3n13

Copy link
Copy Markdown
Collaborator Author

PR was still a draft, so auto-merge could not be enabled directly; marked it ready for review instead. All automated phases (development, simplify, code review, security review, coverage) have passed - ready for human review.

@credfeto

Copy link
Copy Markdown
Member

Super-linter summary

Language Validation result
GITHUB_ACTIONS Pass ✅
YAML Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

@dnyw4l3n13

Copy link
Copy Markdown
Collaborator Author

Auto-merge enabled - PR is ready and will merge once required approvals/checks are satisfied.

@dnyw4l3n13
dnyw4l3n13 merged commit 372b53d into main Sep 11, 2026
62 checks passed
@dnyw4l3n13
dnyw4l3n13 deleted the fix/871-remove-dead-trufflehog-status-step branch September 11, 2026 18:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

AI-Work Work for an AI Agent auto-pr Pull request created automatically github-actions Github actions workflow files Low Low Priority

Projects

None yet

Development

Successfully merging this pull request may close these issues.

fix(pr-lint): trufflehog result step is unreachable dead code

2 participants