implement scan trufflehog

2026-04-19 22:29:36 -06:00
parent df10609df5
commit 35d8630bf2
1 changed files with 30 additions and 0 deletions
@@ -0,0 +1,30 @@
 {{- if .Values.pipeline.enabled }}
 apiVersion: argoproj.io/v1alpha1
 kind: ClusterWorkflowTemplate
 metadata:
  name: amp-security-pipeline-v1.0.0
 spec:
  templates:
    - name: scan-trufflehog
      metadata:
        annotations:
          secrets.infisical.com/auto-reload: "true"
      initContainers:
        - name: wait-for-infisical
          image: alpine:3.20
          command:
            - sh
            - -c
          args:
            - until [ -n "${TRUFFLEHOG_TOKEN:-}" ]; do sleep 2; done
      container:
        image: alpine:3.20
        command:
          - sh
          - -c
        args:
          - mkdir -p /workspace/reports && echo "stub: trufflehog" > /workspace/reports/trufflehog.json
      volumeMounts:
        - name: workspace
          mountPath: /workspace
 {{- end }}