Skip to content

Commit be4b1b6

Browse files
chore(deps): bump trufflesecurity/trufflehog from 3.92.3 to 3.93.4 (#26)
Bumps [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) from 3.92.3 to 3.93.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/trufflesecurity/trufflehog/releases">trufflesecurity/trufflehog's releases</a>.</em></p> <blockquote> <h2>v3.93.4</h2> <h2>What's Changed</h2> <ul> <li>Add a new NDJSON / JSONL input source by <a href="https://github.com/bradlarsen"><code>@​bradlarsen</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4721">trufflesecurity/trufflehog#4721</a></li> <li>Fix typo in CODEOWNERS for pkg/analyzer by <a href="https://github.com/shahzadhaider1"><code>@​shahzadhaider1</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4748">trufflesecurity/trufflehog#4748</a></li> <li>Pre-allocate anthropic analyzer bindings slice capacity with zero length by <a href="https://github.com/kashifkhan0771"><code>@​kashifkhan0771</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4746">trufflesecurity/trufflehog#4746</a></li> <li>Made indeterminate error for JWT detector determinate by <a href="https://github.com/jordanTunstill"><code>@​jordanTunstill</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4745">trufflesecurity/trufflehog#4745</a></li> <li>Optimize the regex pattern in the artifactory access token detector by <a href="https://github.com/shahzadhaider1"><code>@​shahzadhaider1</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4685">trufflesecurity/trufflehog#4685</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/trufflesecurity/trufflehog/compare/v3.93.3...v3.93.4">https://github.com/trufflesecurity/trufflehog/compare/v3.93.3...v3.93.4</a></p> <h2>v3.93.3</h2> <h2>What's Changed</h2> <ul> <li>OpenAI Admin Key Detector by <a href="https://github.com/amanfcp"><code>@​amanfcp</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4689">trufflesecurity/trufflehog#4689</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/trufflesecurity/trufflehog/compare/v3.93.2...v3.93.3">https://github.com/trufflesecurity/trufflehog/compare/v3.93.2...v3.93.3</a></p> <h2>v3.93.2</h2> <h2>What's Changed</h2> <ul> <li>Fix pre-receive hook hangs and missing logs by flushing logs on signal and using CommandContext for git commands by <a href="https://github.com/jordanTunstill"><code>@​jordanTunstill</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4714">trufflesecurity/trufflehog#4714</a></li> <li>[INS-285] Fix custom detectors line number reporting to match the full regex instead of capture group by <a href="https://github.com/mustansir14"><code>@​mustansir14</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4697">trufflesecurity/trufflehog#4697</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/trufflesecurity/trufflehog/compare/v3.93.1...v3.93.2">https://github.com/trufflesecurity/trufflehog/compare/v3.93.1...v3.93.2</a></p> <h2>v3.93.1</h2> <h2>What's Changed</h2> <ul> <li>Enhance security reporting guidelines in SECURITY.md by <a href="https://github.com/joeleonjr"><code>@​joeleonjr</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4725">trufflesecurity/trufflehog#4725</a></li> <li>Allow logging of caller info by <a href="https://github.com/rosecodym"><code>@​rosecodym</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4731">trufflesecurity/trufflehog#4731</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/trufflesecurity/trufflehog/compare/v3.93.0...v3.93.1">https://github.com/trufflesecurity/trufflehog/compare/v3.93.0...v3.93.1</a></p> <h2>v3.93.0</h2> <h2>What's Changed</h2> <ul> <li>Remove ResultWithMetadata.Data by <a href="https://github.com/rosecodym"><code>@​rosecodym</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4659">trufflesecurity/trufflehog#4659</a></li> <li>Add tests for processResult by <a href="https://github.com/rosecodym"><code>@​rosecodym</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4674">trufflesecurity/trufflehog#4674</a></li> <li>Switch out default HTTP client use in detectors by <a href="https://github.com/bradlarsen"><code>@​bradlarsen</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4670">trufflesecurity/trufflehog#4670</a></li> <li>[INS-202] Add rate limiting to the Github Analyzer by <a href="https://github.com/mustansir14"><code>@​mustansir14</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4617">trufflesecurity/trufflehog#4617</a></li> <li>Fix/issue 4578 path normalization for unix and windows by <a href="https://github.com/Rusted2361"><code>@​Rusted2361</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4614">trufflesecurity/trufflehog#4614</a></li> <li>Auto-configure TruffleHog for Pre-commit Hooks by <a href="https://github.com/kashifkhan0771"><code>@​kashifkhan0771</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4666">trufflesecurity/trufflehog#4666</a></li> <li>Include key info for analyze by <a href="https://github.com/bill-rich"><code>@​bill-rich</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4686">trufflesecurity/trufflehog#4686</a></li> <li>fix: typos in comments by <a href="https://github.com/NAM-MAN"><code>@​NAM-MAN</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4676">trufflesecurity/trufflehog#4676</a></li> <li>Stop using detectableChunk in processResult by <a href="https://github.com/rosecodym"><code>@​rosecodym</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4691">trufflesecurity/trufflehog#4691</a></li> <li>fix(github): preserve trailing hyphens in repository names by <a href="https://github.com/PascalThuet"><code>@​PascalThuet</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4695">trufflesecurity/trufflehog#4695</a></li> <li>Skip failing Git Engine test by <a href="https://github.com/mustansir14"><code>@​mustansir14</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4701">trufflesecurity/trufflehog#4701</a></li> <li>[INS-281] Github Bug fix: UnitErr and UnitOK called for the same repo by <a href="https://github.com/mustansir14"><code>@​mustansir14</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4681">trufflesecurity/trufflehog#4681</a></li> <li>[INS-258] Revert includeRepos removal from GitHub source by <a href="https://github.com/mustansir14"><code>@​mustansir14</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4673">trufflesecurity/trufflehog#4673</a></li> <li>Re-enable Git Engine Test by <a href="https://github.com/shahzadhaider1"><code>@​shahzadhaider1</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4715">trufflesecurity/trufflehog#4715</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/7c0734f987ad0bb30ee8da210773b800ee2016d3"><code>7c0734f</code></a> optimize the regex pattern in the artifactory access token detector (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4685">#4685</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/cbdff3fa9cf5e46d9a78c0d3ab6374f7f5e89334"><code>cbdff3f</code></a> Changed matchingKey, found := keySet.LookupKeyID(kid) to be determinate if no...</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/1306f38c20bb065952cff015b7fb71374d1a0b93"><code>1306f38</code></a> Pre-allocate anthropic analyzer bindings slice capacity with zero length (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4746">#4746</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/c84a42ac1cbe546ad7ef47d560b779c4f4dbc868"><code>c84a42a</code></a> Fix typo in CODEOWNERS for pkg/analyzer (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4748">#4748</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/c563a0692fa2017ff949d219cc9f586293d41e66"><code>c563a06</code></a> Add a new NDJSON / JSONL input source (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4721">#4721</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/6961f2bace57ab32b23b3ba40f8f420f6bc7e004"><code>6961f2b</code></a> OpenAI Admin Key Detector (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4689">#4689</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/4158734f234bd8770128deae2e2975cfab4b66a6"><code>4158734</code></a> [INS-285] Fix custom detectors line number reporting to match the full regex ...</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/e9734c1ff25106f68d4266f0b09c1fcfc915dad1"><code>e9734c1</code></a> Fix pre-receive hook hangs and missing logs by flushing logs on signal and us...</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/7635b24fd512a2e817dd3e9dd661caaf035a079d"><code>7635b24</code></a> Allow logging of caller info (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4731">#4731</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/b78fbfd8eb982f4802e09a265fb2bc37b3040975"><code>b78fbfd</code></a> Enhance security reporting guidelines in SECURITY.md (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4725">#4725</a>)</li> <li>Additional commits viewable in <a href="https://github.com/trufflesecurity/trufflehog/compare/v3.92.3...7c0734f987ad0bb30ee8da210773b800ee2016d3">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=trufflesecurity/trufflehog&package-manager=github_actions&previous-version=3.92.3&new-version=3.93.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Jonathan D.A. Jewell <6759885+hyperpolymath@users.noreply.github.com>
1 parent c4cd086 commit be4b1b6

File tree

2 files changed

+2
-2
lines changed

2 files changed

+2
-2
lines changed

.github/workflows/quality.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ jobs:
1818
find . -type f -perm /111 -name "*.sh" | head -10 || true
1919
2020
- name: Check for secrets
21-
uses: trufflesecurity/trufflehog@05cccb53bc9e13bc6d17997db5a6bcc3df44bf2f # v3.92.3
21+
uses: trufflesecurity/trufflehog@7c0734f987ad0bb30ee8da210773b800ee2016d3 # v3.93.4
2222
with:
2323
path: ./
2424
base: ${{ github.event.pull_request.base.sha || github.event.before }}

.github/workflows/secret-scanner.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ jobs:
1818
fetch-depth: 0 # Full history for scanning
1919

2020
- name: TruffleHog Secret Scan
21-
uses: trufflesecurity/trufflehog@8a8ef8526528d8a4ff3e2c90be08e25ef8efbd9b # v3
21+
uses: trufflesecurity/trufflehog@7c0734f987ad0bb30ee8da210773b800ee2016d3 # v3
2222
with:
2323
extra_args: --only-verified --fail
2424

0 commit comments

Comments
 (0)