From 2c2a9dd5549bdd91e699ccde6f0d648ceeddb263 Mon Sep 17 00:00:00 2001
From: Nathan Sportsman <nathan.sportsman@praetorian.com>
Date: Tue, 2 Jun 2026 17:21:11 -0500
Subject: [PATCH] fix(secrets-scan): fail-closed on public repo
 (fail-on-findings: true)

---
 .github/workflows/secrets-scan.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/secrets-scan.yml b/.github/workflows/secrets-scan.yml
index da080f8..f266fca 100644
--- a/.github/workflows/secrets-scan.yml
+++ b/.github/workflows/secrets-scan.yml
@@ -24,5 +24,7 @@ jobs:
       security-events: write
       actions: read
       pull-requests: read
+    with:
+      fail-on-findings: true
     secrets: inherit