wip

* Update github action to support generic cli command input

* revert removal of inputs

* echo in entrypoint

* test custom docker image

* revert docker image reference

.github/workflows/secrets.yml

@@ -1,12 +1,7 @@
 
 name: Scan for secrets
 
-on:
-  push:
-    tags:
-      - v*
-    branches:
-      - main
+on: push
 
 jobs:
   test:
@@ -22,9 +17,9 @@ jobs:
         fetch-depth: 0
         ref: ${{ github.head_ref }}
     - name: Dogfood
-      uses: ./
+      uses: onethree111/trufflehog@latest
       id: dogfood
       with:
         path: ./
         base: ${{ github.event.repository.default_branch }}
-        head: HEAD
+        head: HEAD

Dockerfile

@@ -12,5 +12,6 @@ FROM alpine:3.15
 RUN apk add --no-cache git
 COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
 COPY --from=builder /build/trufflehog /usr/bin/trufflehog
-ENTRYPOINT ["/usr/bin/trufflehog"]
-
+COPY entrypoint.sh /etc/entrypoint.sh
+RUN chmod +x /etc/entrypoint.sh
+ENTRYPOINT ["/etc/entrypoint.sh"]

action.yml

@@ -12,6 +12,10 @@ inputs:
   head:
     description: Scan commits until here (usually dev branch).
     required: false
+  extra_args:
+    default: ''
+    description: Extra args to be passed to the trufflehog cli.
+    required: false
 branding:
   icon: "shield"
   color: "green"
@@ -26,3 +30,4 @@ runs:
     - --branch
     - ${{ inputs.head }}
     - --fail
+    - ${{ inputs.extra_args }}

entrypoint.sh

@@ -1,4 +1,5 @@
-#! /usr/bin/env bash
+#!/usr/bin/env ash
 
-args=("$@")
-/usr/bin/trufflehog ${args[@]}
+# `$*` expands the `args` supplied in an `array` individually
+# or splits `args` in a string separated by whitespace.
+/usr/bin/trufflehog $*