Important

Update trufflehog.yml to enhance PR scanning by making checkout fork-safe, fetching base commit, and using extra_args for TruffleHog.

• Workflow Changes:
  • Updates trufflehog.yml to make the checkout process fork-safe by using actions/checkout@v4 with persist-credentials: false and fetch-depth: 0.
  • Adds a step to fetch the base commit locally for diffing using git fetch.
  • Modifies TruffleHog execution to use extra_args for flags --fail, --redact, and --results=verified,unknown.

^{This description was created by for 346da7b. You can customize this summary. It will automatically update as commits are pushed.}