Update dependency trufflesecurity/trufflehog to v3.54.0
This MR contains the following updates:
Package | Type | Update | Change |
---|---|---|---|
trufflesecurity/trufflehog | ironbank-github | minor |
v3.46.1 -> v3.54.0
|
⚠ Dependency Lookup Warnings ⚠
Warnings were logged while processing this repo. Please check the logs for more information.
Release Notes
trufflesecurity/trufflehog
v3.54.0
What's Changed
- [chore] - update comments and logs. by @ahrav in https://github.com/trufflesecurity/trufflehog/pull/1654
- [chore] - update benchmarks. by @ahrav in https://github.com/trufflesecurity/trufflehog/pull/1641
- Update launchdarkly regex, support sdk keys, add tri-state verification by @trufflesteeeve in https://github.com/trufflesecurity/trufflehog/pull/1645
- add snowflake detector by @zubairk14 in https://github.com/trufflesecurity/trufflehog/pull/1653
- Add ElapsedTime method to JobProgressMetrics by @mcastorina in https://github.com/trufflesecurity/trufflehog/pull/1660
- Capture source-reported progress in JobProgress snapshot by @mcastorina in https://github.com/trufflesecurity/trufflehog/pull/1661
- Support azure git links by @ahrav in https://github.com/trufflesecurity/trufflehog/pull/1662
- Add SourceName to JobProgressRef by @mcastorina in https://github.com/trufflesecurity/trufflehog/pull/1664
- Test S3 role assumption by @rosecodym in https://github.com/trufflesecurity/trufflehog/pull/1655
- Support cancelling a run from a JobProgressRef by @mcastorina in https://github.com/trufflesecurity/trufflehog/pull/1663
- [chore] - Prevent nil deref panic by @ahrav in https://github.com/trufflesecurity/trufflehog/pull/1709
- Expired invite link fix by @zricethezav in https://github.com/trufflesecurity/trufflehog/pull/1713
Full Changelog: https://github.com/trufflesecurity/trufflehog/compare/v3.53.0...v3.54.0
v3.53.0
What's Changed
- [bug] - handle IOOR panic by @ahrav in https://github.com/trufflesecurity/trufflehog/pull/1639
- add role assumption for s3 source by @codevbus in https://github.com/trufflesecurity/trufflehog/pull/1477
- [bug] - Only scan gist comments or repo comments by @ahrav in https://github.com/trufflesecurity/trufflehog/pull/1646
- Add tri-state verification to sqlserver detector by @rosecodym in https://github.com/trufflesecurity/trufflehog/pull/1624
- Wait before finishing S3 test by @rosecodym in https://github.com/trufflesecurity/trufflehog/pull/1647
- add thog CLI support for GitHub config validate by @zubairk14 in https://github.com/trufflesecurity/trufflehog/pull/1626
- Fix reversed ordering of arguments by @mcastorina in https://github.com/trufflesecurity/trufflehog/pull/1648
- Update S3 test bucket by @rosecodym in https://github.com/trufflesecurity/trufflehog/pull/1649
- add rate limit and consumption metrics for GitHub by @zubairk14 in https://github.com/trufflesecurity/trufflehog/pull/1651
- Include the job ID in a chunk by @ahrav in https://github.com/trufflesecurity/trufflehog/pull/1652
Full Changelog: https://github.com/trufflesecurity/trufflehog/compare/v3.52.1...v3.53.0
v3.52.1
What's Changed
- update test file by @ahrav in https://github.com/trufflesecurity/trufflehog/pull/1637
Full Changelog: https://github.com/trufflesecurity/trufflehog/compare/v3.52.0...v3.52.1
v3.52.0
What's Changed
- [bug] - Correctly reset reader before handling archive chunk data by @ahrav in https://github.com/trufflesecurity/trufflehog/pull/1636
Full Changelog: https://github.com/trufflesecurity/trufflehog/compare/v3.51.0...v3.52.0
v3.51.0
What's Changed
- correct logging output for github comments and add oss flags by @zubairk14 in https://github.com/trufflesecurity/trufflehog/pull/1632
- Add ScanChunk to allow injecting Chunks into the SourceManager's channel by @mcastorina in https://github.com/trufflesecurity/trufflehog/pull/1634
- [bug] - copy chunk before sending on chunksChan by @ahrav in https://github.com/trufflesecurity/trufflehog/pull/1633
Full Changelog: https://github.com/trufflesecurity/trufflehog/compare/v3.50.0...v3.51.0
v3.50.0
What's Changed
- add salesforce detector by @zubairk14 in https://github.com/trufflesecurity/trufflehog/pull/1608
- [chore] - Use custom context for archive handler of specialized archives by @ahrav in https://github.com/trufflesecurity/trufflehog/pull/1629
Full Changelog: https://github.com/trufflesecurity/trufflehog/compare/v3.49.0...v3.50.0
v3.49.0
What's Changed
- Docker scanning by digest by @joeleonjr in https://github.com/trufflesecurity/trufflehog/pull/1615
- fix detector template test failure message by @rosecodym in https://github.com/trufflesecurity/trufflehog/pull/1622
- Refactor FragmentLineOffset to match multiline secrets by @mcastorina in https://github.com/trufflesecurity/trufflehog/pull/1612
- add huggingface detector by @zubairk14 in https://github.com/trufflesecurity/trufflehog/pull/1621
- bug fix - change verification endpoint for opsgenie scanner by @brandonjyan in https://github.com/trufflesecurity/trufflehog/pull/1611
- bump go to 1.21 by @zricethezav in https://github.com/trufflesecurity/trufflehog/pull/1623
- Fix placeholder for GitHub orgs by @hxnyk in https://github.com/trufflesecurity/trufflehog/pull/1627
- Integration of SpecializedHandler for Enhanced Archive Processing by @ahrav in https://github.com/trufflesecurity/trufflehog/pull/1625
New Contributors
- @joeleonjr made their first contribution in https://github.com/trufflesecurity/trufflehog/pull/1615
Full Changelog: https://github.com/trufflesecurity/trufflehog/compare/v3.48.0...v3.49.0
v3.48.0
What's Changed
- fix error message in alchemy test by @rosecodym in https://github.com/trufflesecurity/trufflehog/pull/1617
- Add tri-state verification to pubnub publish key detector by @rosecodym in https://github.com/trufflesecurity/trufflehog/pull/1616
- stop saving Alchemy URL on error by @rosecodym in https://github.com/trufflesecurity/trufflehog/pull/1614
- Support indeterminate verification in Gitlab detector by @rosecodym in https://github.com/trufflesecurity/trufflehog/pull/1613
- Use the common chunker for scanning the filesystem source by @ahrav in https://github.com/trufflesecurity/trufflehog/pull/1619
Full Changelog: https://github.com/trufflesecurity/trufflehog/compare/v3.47.0...v3.48.0
v3.47.0
What's Changed
- Expand paypal regex by @bill-rich in https://github.com/trufflesecurity/trufflehog/pull/1599
- Github Oauth2 verification by @bill-rich in https://github.com/trufflesecurity/trufflehog/pull/1584
- synchronize print operations to stdout by @ahrav in https://github.com/trufflesecurity/trufflehog/pull/1597
- include scan duration in output log by @ahrav in https://github.com/trufflesecurity/trufflehog/pull/1598
- Add commits scanned to log by @bill-rich in https://github.com/trufflesecurity/trufflehog/pull/1600
- Common chunk reader by @ahrav in https://github.com/trufflesecurity/trufflehog/pull/1594
- initial support for bare repositories by @L11R in https://github.com/trufflesecurity/trufflehog/pull/1499
- Fix nil pointer dereference to git ScanOptions by @mcastorina in https://github.com/trufflesecurity/trufflehog/pull/1603
- implement indeterminate LDAP verification by @rosecodym in https://github.com/trufflesecurity/trufflehog/pull/1574
- Use SourceManager in engine by @mcastorina in https://github.com/trufflesecurity/trufflehog/pull/1586
- Adjust regex and add tests by @bill-rich in https://github.com/trufflesecurity/trufflehog/pull/1602
- Detect API keys without app keys by @bill-rich in https://github.com/trufflesecurity/trufflehog/pull/1605
- Tweak template detector test code by @rosecodym in https://github.com/trufflesecurity/trufflehog/pull/1609
- Use common chunk reader by @ahrav in https://github.com/trufflesecurity/trufflehog/pull/1596
- Move commits_scanned to ScanRepo by @bill-rich in https://github.com/trufflesecurity/trufflehog/pull/1610
- implement tri-state verification in FTP detector by @rosecodym in https://github.com/trufflesecurity/trufflehog/pull/1604
- Add terminal UI by @hxnyk in https://github.com/trufflesecurity/trufflehog/pull/1593
New Contributors
- @L11R made their first contribution in https://github.com/trufflesecurity/trufflehog/pull/1499
- @hxnyk made their first contribution in https://github.com/trufflesecurity/trufflehog/pull/1593
Full Changelog: https://github.com/trufflesecurity/trufflehog/compare/v3.46.3...v3.47.0
v3.46.3
What's Changed
- Remove CI Badge by @zricethezav in https://github.com/trufflesecurity/trufflehog/pull/1590
- updating github templates by @zricethezav in https://github.com/trufflesecurity/trufflehog/pull/1587
- fix broken link in issue templates by @zricethezav in https://github.com/trufflesecurity/trufflehog/pull/1592
- tighten up regex pattern for timezoneapi by @zubairk14 in https://github.com/trufflesecurity/trufflehog/pull/1591
- Remove capturing the cancel callstack in the context package by @mcastorina in https://github.com/trufflesecurity/trufflehog/pull/1595
Full Changelog: https://github.com/trufflesecurity/trufflehog/compare/v3.46.2...v3.46.3
v3.46.2
What's Changed
- add tri-state verification to mongodb detector by @rosecodym in https://github.com/trufflesecurity/trufflehog/pull/1575
- create hidden debug flag to disable overseer by @zubairk14 in https://github.com/trufflesecurity/trufflehog/pull/1582
- Fix VirusTotal deetector by @ahrav in https://github.com/trufflesecurity/trufflehog/pull/1585
- Refactor git source to allow ScanOptions and use source in engine by @mcastorina in https://github.com/trufflesecurity/trufflehog/pull/1518
- S3 panic send on closed channel by @ahrav in https://github.com/trufflesecurity/trufflehog/pull/1589
Full Changelog: https://github.com/trufflesecurity/trufflehog/compare/v3.46.1...v3.46.2
Configuration
-
If you want to rebase/retry this MR, check this box
This MR has been generated by Renovate Bot.