Merge pull request #81 from grafana/fix/update-runner-to-x64-large

Fix architecture detection for cross-platform TruffleHog support

Author: isaiah-grafana

.github/workflows/org-required-trufflehog.yml

@@ -24,4 +24,4 @@ jobs:
       fail-on-verified: "false"      # Don't block on verified secrets (monitoring only)
       fail-on-unverified: "false"    # Don't block on unverified secrets
       runs-on: ${{ !github.event.repository.private && 'ubuntu-latest' || 'ubuntu-arm64-small' }}    # Use same runner pattern as zizmor
-    secrets: inherit
+    secrets: inherit

.github/workflows/reusable-trufflehog.yml

@@ -42,7 +42,12 @@ jobs:
         run: |
           # Download binary directly from GitHub releases for supply chain security
           VERSION="v${{ env.TRUFFLEHOG_VERSION }}"
-          ARCH="linux_amd64"
+          # Auto-detect architecture for cross-platform support
+          if [[ "$(uname -m)" == "aarch64" ]]; then
+            ARCH="linux_arm64"
+          else
+            ARCH="linux_amd64"
+          fi
           BINARY_URL="https://github.com/trufflesecurity/trufflehog/releases/download/${VERSION}/trufflehog_${VERSION#v}_${ARCH}.tar.gz"
 
           curl -sSfL "${BINARY_URL}" | tar -xz -C /tmp