From d42df26cf56696e864df12e39ec7840a95e90250 Mon Sep 17 00:00:00 2001
From: "repo-improver[bot]" <repo-improver-bot@users.noreply.github.com>
Date: Mon, 29 Jun 2026 08:42:14 +0000
Subject: [PATCH] fix(ci): repin trufflehog to v3.95.6 (valid SHA)

The security job referenced trufflesecurity/trufflehog@34ed34b8... which
no longer resolves ('unable to find version'), failing CI. Repin to the
v3.95.6 release commit 30d5bb9.
---
 .github/workflows/ci.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 801c0fc..63381a6 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -67,7 +67,7 @@ jobs:
         run: pip-audit -r requirements.txt || pip-audit --desc
 
       - name: Check for secrets
-        uses: trufflesecurity/trufflehog@34ed34b8e678b826e3e4a3d28426ac8bdfc4e1f2
+        uses: trufflesecurity/trufflehog@30d5bb91af1a771378349dbbb0c82129392acf70 # v3.95.6
         with:
           path: ./
           base: ""