unqualify push events, simplify thog config #12

	name: Scan for secrets

	on:
	push:
	pull_request:

	permissions:
	contents: read
	id-token: write
	issues: write
	pull-requests: write

	jobs:
	TruffleHog:
	runs-on: ubuntu-latest
	defaults:
	run:
	shell: bash
	steps:
	- name: Checkout code
	uses: actions/checkout@v3
	with:
	fetch-depth: 0

	- name: TruffleHog OSS
	id: trufflehog
	uses: trufflesecurity/trufflehog@main
	continue-on-error: true
	with:
	path: ./

	- name: Scan Results Status
	if: steps.trufflehog.outcome == 'failure'
	run: exit 1

Provide feedback