From d872132969673a174bda4de85ebf0816ccea20af Mon Sep 17 00:00:00 2001
From: evanlowe <62918515+evanlowe@users.noreply.github.com>
Date: Sun, 9 Aug 2026 18:16:56 +0800
Subject: [PATCH] fix(ci): limit push secret scans to main

---
 .github/workflows/secrets-scan.yaml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/secrets-scan.yaml b/.github/workflows/secrets-scan.yaml
index 31ee3a925..78454398c 100644
--- a/.github/workflows/secrets-scan.yaml
+++ b/.github/workflows/secrets-scan.yaml
@@ -17,6 +17,8 @@ name: Secret Scan
 on:
   pull_request:
   push:
+    branches:
+      - main
 
 jobs:
   gitleaks:
@@ -30,4 +32,4 @@ jobs:
       - name: Secret Scanning
         uses: trufflesecurity/trufflehog@7dc056a193116ba8d82154bf0549381c8fb8545c # v3.88.14
         with:
-          extra_args: --results=verified,unknown
\ No newline at end of file
+          extra_args: --results=verified,unknown