Add trufflehog pre-commit hook

.pre-commit-config.yaml

@@ -53,3 +53,9 @@ repos:
       entry: cargo-deny
       args: ['check']
       pass_filenames: false
+    - id: trufflehog
+      name: TruffleHog
+      description: Detect secrets in your data.
+      entry: bash -c 'podman run -v "$(pwd):/workdir" --rm docker.io/trufflesecurity/trufflehog:latest git file:///workdir'
+      language: system
+      stages: ["commit", "push"]