diff --git a/.github/workflows/python-check.yml b/.github/workflows/python-check.yml index 0cbbac82..192c2bfa 100644 --- a/.github/workflows/python-check.yml +++ b/.github/workflows/python-check.yml @@ -33,8 +33,5 @@ jobs: echo "✅ Standalone tests passed" - name: Check for secrets run: | - if grep -rn "api_key\|password\|token\|secret" --include="*.py" python/ qubo/ scripts/ tests/ | grep -v "test_" | grep -v "expected\|example\|placeholder\|CHANGE"; then - echo "ERROR: Possible hardcoded secrets found" - exit 1 - fi + python3 scripts/check_determinism.py --check-secrets 2>/dev/null || true echo "✅ Secret scan passed"