Pr/trufflehog scan

[isaiah-grafana]

No description provided.

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[github-actions]

😢 zizmor failed with exit code 14.

Expand for full output

warning[artipacked]: credential persistence through GitHub Actions artifacts
  --> ./.github/workflows/reusable-trufflehog.yml:21:9
   |
21 |         - name: Checkout code
   |  _________-
22 | |         uses: actions/checkout@v4
   | |_________________________________- does not set persist-credentials: false
   |
   = note: audit confidence → Low
   = note: this finding has an auto-fix

error[template-injection]: code injection via template expansion
  --> ./.github/workflows/reusable-trufflehog.yml:42:17
   |
35 |         run: |
   |         ^^^ this run block
36 |           trufflehog filesystem . \
...
41 |             --exclude-paths=.git,.github,node_modules,venv,env \
42 |             ${{ inputs.extra_args }} \
   |                 ^^^^^^^^^^^^^^^^^ may expand into attacker-controllable code
   |
   = note: audit confidence → High
   = note: this finding has an auto-fix

64 findings (12 ignored, 50 suppressed, 2 fixable): 0 unknown, 0 informational, 0 low, 1 medium, 1 high

[github-actions]

😢 zizmor failed with exit code 14.

Expand for full output

warning[artipacked]: credential persistence through GitHub Actions artifacts
  --> ./.github/workflows/reusable-trufflehog.yml:21:9
   |
21 |         - name: Checkout code
   |  _________-
22 | |         uses: actions/checkout@v4
   | |_________________________________- does not set persist-credentials: false
   |
   = note: audit confidence → Low
   = note: this finding has an auto-fix

error[template-injection]: code injection via template expansion
  --> ./.github/workflows/reusable-trufflehog.yml:42:17
   |
35 |         run: |
   |         ^^^ this run block
36 |           trufflehog filesystem . \
...
41 |             --exclude-paths=.git,.github,node_modules,venv,env \
42 |             ${{ inputs.extra_args }} \
   |                 ^^^^^^^^^^^^^^^^^ may expand into attacker-controllable code
   |
   = note: audit confidence → High
   = note: this finding has an auto-fix

65 findings (12 ignored, 51 suppressed, 2 fixable): 0 unknown, 0 informational, 0 low, 1 medium, 1 high