Merge branch 'trufflehog-update' into 'main'

staging_secrets_in_repo:

  stage: staging_secrets_in_repo

  # script:

  #   - |

  #     pip install trufflehog

  #     cd ../

  #     trufflehog filesystem capif --exclude-paths capif/cicd/exclusions --max-depth 5

  script:

    - |

      set -euo pipefail

      TRUF_VER="v3.82.0"

      ARCH="linux_amd64"

      curl -sSL -o /tmp/trufflehog.tgz "https://github.com/trufflesecurity/trufflehog/releases/download/${TRUF_VER}/trufflehog_${TRUF_VER#v}_${ARCH}.tar.gz"

      tar -xzf /tmp/trufflehog.tgz -C /usr/local/bin trufflehog

      trufflehog --version

      trufflehog filesystem capif --exclude-paths cicd/exclusions --max-depth 5

      pip install trufflehog

      cd ../

      trufflehog capif --exclude_paths capif/cicd/exclusions --max_depth=5

  <<: *staging_common

# define the process to do linting code: ruff