refactor: preventing the need for some dependencies updates approvals (…

…#335)

* refactor: preventing the need for some dependencies updates approvals

As we use this dependency only within our GitHub Action but not within any JavaScript, it's easy not to pin it to a minor or even patch version, but only major.

* fix: this approach doesn't work

.github/workflows/00-scan-secrets.yml

@@ -17,7 +17,7 @@ jobs:
         id: extract_branch
 
       - name: 🐷 TruffleHog OSS
-        uses: trufflesecurity/trufflehog@v3.39.0
+        uses: trufflesecurity/trufflehog@main
         with:
           path: ./
           base: ${{ steps.extract_branch.outputs.branch-name }}