Commit f8c1871
authored
chore(deps): bump trufflesecurity/trufflehog from 3.97.4 to 3.97.5 in the actions group (#58)
Bumps the actions group with 1 update:
[trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog).
Updates `trufflesecurity/trufflehog` from 3.97.4 to 3.97.5
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/trufflesecurity/trufflehog/releases">trufflesecurity/trufflehog's
releases</a>.</em></p>
<blockquote>
<h2>v3.97.5</h2>
<h2>What's Changed</h2>
<ul>
<li>Update module github.com/rabbitmq/amqp091-go to v1.13.0 [SECURITY]
by <a
href="https://github.com/renovate"><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5274">trufflesecurity/trufflehog#5274</a></li>
<li>Update github-actions by <a
href="https://github.com/renovate"><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5250">trufflesecurity/trufflehog#5250</a></li>
<li>Update dependency golangci/golangci-lint to v2.13.2 by <a
href="https://github.com/renovate"><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5251">trufflesecurity/trufflehog#5251</a></li>
<li>Make GitHub App installationId optional when scanning all
installations by <a
href="https://github.com/kashifkhan0771"><code>@kashifkhan0771</code></a>
in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5275">trufflesecurity/trufflehog#5275</a></li>
<li>[INT-942] Add HumioAPIToken detector by <a
href="https://github.com/unsmith"><code>@unsmith</code></a> in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5258">trufflesecurity/trufflehog#5258</a></li>
<li>Object filtering in S3 by <a
href="https://github.com/shahzadhaider1"><code>@shahzadhaider1</code></a>
in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5286">trufflesecurity/trufflehog#5286</a></li>
<li>feat(detectors): add Resend detector by <a
href="https://github.com/mwoss"><code>@mwoss</code></a> in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5103">trufflesecurity/trufflehog#5103</a></li>
<li>Clean up use of wasilibs/go-re2 by <a
href="https://github.com/bradlarsen"><code>@bradlarsen</code></a> in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5273">trufflesecurity/trufflehog#5273</a></li>
<li>Low-memory Git Scanning by <a
href="https://github.com/mariduv"><code>@mariduv</code></a> in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5257">trufflesecurity/trufflehog#5257</a></li>
<li>Adding no-ignore flag to allow reporting of "ignored"
secrets by <a
href="https://github.com/jordanTunstill"><code>@jordanTunstill</code></a>
in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5297">trufflesecurity/trufflehog#5297</a></li>
<li>Postgres: drop non-connection URI params before verifying by <a
href="https://github.com/jordanTunstill"><code>@jordanTunstill</code></a>
in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5296">trufflesecurity/trufflehog#5296</a></li>
<li>fix(detectors/ngrok): broaden valid bearer tokens matching by <a
href="https://github.com/mattbrady-1"><code>@mattbrady-1</code></a> in
<a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5152">trufflesecurity/trufflehog#5152</a></li>
<li>ci: avoid Node 20 BuildPulse action by <a
href="https://github.com/dustin-decker"><code>@dustin-decker</code></a>
in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5266">trufflesecurity/trufflehog#5266</a></li>
<li>Introduce a new optional detector interface that will allow us to
verify credentials not in the cache by <a
href="https://github.com/kvnphvm"><code>@kvnphvm</code></a> in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5298">trufflesecurity/trufflehog#5298</a></li>
<li>perf(engine): lowercase prefilter chunks as ASCII in a pooled buffer
by <a
href="https://github.com/kashifkhan0771"><code>@kashifkhan0771</code></a>
in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5291">trufflesecurity/trufflehog#5291</a></li>
<li>Add documentation for CircleCI source by <a
href="https://github.com/kashifkhan0771"><code>@kashifkhan0771</code></a>
in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5268">trufflesecurity/trufflehog#5268</a></li>
<li>Add filesystem source documentation by <a
href="https://github.com/kashifkhan0771"><code>@kashifkhan0771</code></a>
in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5285">trufflesecurity/trufflehog#5285</a></li>
<li>Add elasticsearch source documentation by <a
href="https://github.com/kashifkhan0771"><code>@kashifkhan0771</code></a>
in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5284">trufflesecurity/trufflehog#5284</a></li>
<li>[SCAN-177] Purge secret parts from verification cache by <a
href="https://github.com/casey-tran"><code>@casey-tran</code></a> in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5318">trufflesecurity/trufflehog#5318</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/mwoss"><code>@mwoss</code></a> made
their first contribution in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5103">trufflesecurity/trufflehog#5103</a></li>
<li><a href="https://github.com/kvnphvm"><code>@kvnphvm</code></a> made
their first contribution in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5298">trufflesecurity/trufflehog#5298</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/trufflesecurity/trufflehog/compare/v3.97.4...v3.97.5">https://github.com/trufflesecurity/trufflehog/compare/v3.97.4...v3.97.5</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/trufflesecurity/trufflehog/commit/f714bf454f350590f4a24c3ddb1aef02c35bf5b6"><code>f714bf4</code></a>
[SCAN-177] Purge secret parts from verification cache (<a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/5318">#5318</a>)</li>
<li><a
href="https://github.com/trufflesecurity/trufflehog/commit/4ecb5c6edf1756d55afe6da63049bfc71a5375b1"><code>4ecb5c6</code></a>
Add elasticsearch source documentation (<a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/5284">#5284</a>)</li>
<li><a
href="https://github.com/trufflesecurity/trufflehog/commit/8d77a9dfc0770e40beb4911f5607ba43573b78a3"><code>8d77a9d</code></a>
Add filesystem source documentation (<a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/5285">#5285</a>)</li>
<li><a
href="https://github.com/trufflesecurity/trufflehog/commit/b8a71ee3febda04b6cec1f78ca4ace98b5c2df4e"><code>b8a71ee</code></a>
Add documentation for CircleCI source (<a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/5268">#5268</a>)</li>
<li><a
href="https://github.com/trufflesecurity/trufflehog/commit/b1d7dae8dbe40201b8c692f8b4075ecd02d7d733"><code>b1d7dae</code></a>
perf(engine): lowercase prefilter chunks as ASCII in a pooled buffer (<a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/5291">#5291</a>)</li>
<li><a
href="https://github.com/trufflesecurity/trufflehog/commit/07e3ac7171c3a1fef72bcfc9aa4a425185466853"><code>07e3ac7</code></a>
Introduce a new optional detector interface that will allow us to verify
cred...</li>
<li><a
href="https://github.com/trufflesecurity/trufflehog/commit/5a6944e878348ba138c91a3715477d85341e206d"><code>5a6944e</code></a>
ci: avoid Node 20 BuildPulse action (<a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/5266">#5266</a>)</li>
<li><a
href="https://github.com/trufflesecurity/trufflehog/commit/ce7b2b838ceb4a90930c15cddd3848731604f5df"><code>ce7b2b8</code></a>
fix(detectors/ngrok): broaden valid bearer tokens matching (<a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/5152">#5152</a>)</li>
<li><a
href="https://github.com/trufflesecurity/trufflehog/commit/58bf4810c86119653dc4d562a410381df90c9bce"><code>58bf481</code></a>
Postgres: drop non-connection URI params before verifying (<a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/5296">#5296</a>)</li>
<li><a
href="https://github.com/trufflesecurity/trufflehog/commit/82fd19ca3dbde334b44b84b748ca847b8b914262"><code>82fd19c</code></a>
Adding no-ignore flag to allow reporting of "ignored" secrets
(<a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/5297">#5297</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/trufflesecurity/trufflehog/compare/363923b901c911a9164f50b6c423f47c15372b1c...f714bf454f350590f4a24c3ddb1aef02c35bf5b6">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>1 parent fb1e25e commit f8c1871
1 file changed
Lines changed: 1 addition & 1 deletion
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
28 | 28 | | |
29 | 29 | | |
30 | 30 | | |
31 | | - | |
| 31 | + | |
32 | 32 | | |
33 | 33 | | |
34 | 34 | | |
| |||
0 commit comments