mirror of
https://github.com/pezkuwichain/pezkuwi-telegram-miniapp.git
synced 2026-11-01 16:31:09 +00:00
Pinning trufflehog to a commit made dependency review list it as a changed dependency, and its AGPL-3.0 licence is on the deny list. It is the scanner this workflow runs, executed in CI and never shipped or served, so it is allowed by name; the deny list still applies to everything else.