Add secrets scanning in CI #9

	name: CI
	on:
	push:
	branches:
	- main
	paths-ignore:
	- '**.md'
	pull_request:
	branches:
	- main
	paths-ignore:
	- '**.md'
	permissions:
	id-token: write
	contents: write

	jobs:
	dockerfile-linter:
	runs-on: ubuntu-latest
	env:
	HADOLINT_RECURSIVE: "true"
	steps:
	- uses: actions/checkout@v3
	- uses: hadolint/[email protected]
	with:
	dockerfile: Dockerfile.neuron
	recursive: true
	failure-threshold: error # TODO: enable more linter rules other than error.
	- uses: hadolint/[email protected]
	with:
	dockerfile: Dockerfile.neuronx
	recursive: true
	failure-threshold: error
	secrets-scanning:
	runs-on: ubuntu-latest
	steps:
	- name: Checkout code
	uses: actions/checkout@v4
	with:
	fetch-depth: 0
	- uses: trufflesecurity/trufflehog@main
	with:
	extra_args: --only-verified

Provide feedback