only run trufflehog on diff (#604)

Signed-off-by: Peter St. John <[email protected]>

Author: pstjohn

.github/workflows/unit-tests.yml

@@ -32,6 +32,9 @@ jobs:
       - run: ./ci/scripts/static_checks.sh
       - uses: trufflesecurity/trufflehog@main
         with:
+          path: ./
+          base: ${{ github.event.repository.default_branch }}
+          head: HEAD
           extra_args: --only-verified
 
   build-bionemo-image: