diff --git a/sdk/templates/ci_dev.gitlab-ci.yml b/sdk/templates/ci_dev.gitlab-ci.yml index b00cd24fd45d8f6938cc5317944047fdca4481f1..124345690e52fbb9be6eb8e315bf642a5e7178f6 100644 --- a/sdk/templates/ci_dev.gitlab-ci.yml +++ b/sdk/templates/ci_dev.gitlab-ci.yml @@ -22,25 +22,11 @@ dev_secrets_in_repo: - if: '$CI_PIPELINE_SOURCE == "merge_request_event"' when: never - when: always - # script: - # - | - # pip install trufflehog - # cd ../ - # trufflehog filesystem sdk --exclude-paths sdk/cicd/exclusions --max-depth 5 script: - | - set -euo pipefail - - # 1) Descargar trufflehog v3 (binario) en vez del "trufflehog" de pip (v2) - TRUF_VER="v3.82.0" - ARCH="linux_amd64" # si tus runners son amd64 - curl -sSL -o /tmp/trufflehog.tgz "https://github.com/trufflesecurity/trufflehog/releases/download/${TRUF_VER}/trufflehog_${TRUF_VER#v}_${ARCH}.tar.gz" - tar -xzf /tmp/trufflehog.tgz -C /usr/local/bin trufflehog - trufflehog --version - - # 2) Ejecutar scan sobre la carpeta sdk - # OJO: usa el fichero real de exclusiones (ajusta si no está en cicd/exclusions) - trufflehog filesystem sdk --exclude-paths cicd/exclusions --max-depth 5 + pip install trufflehog + cd ../ + trufflehog sdk --exclude_paths sdk/cicd/exclusions --max_depth=5 <<: *dev_common # define the process to do linting code: ruff