Update .github/workflows/reusable-trufflehog.yml

Co-authored-by: James C <87319125+jamesc-grafana@users.noreply.github.com>

Author: isaiah-grafana

.github/workflows/reusable-trufflehog.yml

@@ -91,7 +91,7 @@ jobs:
           if [[ "${{ github.event_name }}" == "pull_request" ]]; then
             # PR: Scan only changed files (using three-dot diff to show only PR changes)
             echo "Scanning changed files in PR..."
-            git diff --name-only origin/${{ github.event.pull_request.base.ref }}...${{ github.sha }} > changed-files.txt
+            git diff --name-only origin/${BASE_REF}...${SHA} > changed-files.txt
 
             if [[ -s changed-files.txt ]]; then
               while IFS= read -r file; do