Add extra arg to see if non-empty value fixes arg

* Update github action to support generic cli command input

* revert removal of inputs

* echo in entrypoint

* test custom docker image

* revert docker image reference

.github/workflows/secrets.yml

@@ -27,4 +27,5 @@ jobs:
       with:
         path: ./
         base: ${{ github.event.repository.default_branch }}
-        head: HEAD
+        head: HEAD
+        extra_args: --only-verified

Dockerfile

@@ -12,5 +12,6 @@ FROM alpine:3.15
 RUN apk add --no-cache git
 COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
 COPY --from=builder /build/trufflehog /usr/bin/trufflehog
-ENTRYPOINT ["/usr/bin/trufflehog"]
-
+COPY entrypoint.sh /etc/entrypoint.sh
+RUN chmod +x /etc/entrypoint.sh
+ENTRYPOINT ["/etc/entrypoint.sh"]

action.yml

@@ -12,6 +12,10 @@ inputs:
   head:
     description: Scan commits until here (usually dev branch).
     required: false
+  extra_args:
+    default: ''
+    description: Extra args to be passed to the trufflehog cli.
+    required: false
 branding:
   icon: "shield"
   color: "green"
@@ -26,3 +30,4 @@ runs:
     - --branch
     - ${{ inputs.head }}
     - --fail
+    - ${{ inputs.extra_args }}

entrypoint.sh

@@ -1,4 +1,5 @@
-#! /usr/bin/env bash
+#!/usr/bin/env ash
 
-args=("$@")
-/usr/bin/trufflehog ${args[@]}
+# `$*` expands the `args` supplied in an `array` individually
+# or splits `args` in a string separated by whitespace.
+/usr/bin/trufflehog $*