From 9c55299a82830401edf57e45b43562b5d8dacfa7 Mon Sep 17 00:00:00 2001
From: Vincent Koc <vincentkoc@ieee.org>
Date: Fri, 6 Mar 2026 15:00:46 -0500
Subject: [PATCH] CI: skip detect-secrets on main temporarily

---
 .github/workflows/ci.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 829a71f169d..817f4b94d00 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -328,6 +328,11 @@ jobs:
         run: |
           set -euo pipefail
 
+          if [ "${{ github.ref }}" = "refs/heads/main" ]; then
+            echo "Skipping detect-secrets on main until the allowlist cleanup lands."
+            exit 0
+          fi
+
           if [ "${{ github.event_name }}" = "push" ]; then
             echo "Running full detect-secrets scan on push."
             pre-commit run --all-files detect-secrets