Skip to content

Commit f8c1871

Browse files
chore(deps): bump trufflesecurity/trufflehog from 3.97.4 to 3.97.5 in the actions group (#58)
Bumps the actions group with 1 update: [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog). Updates `trufflesecurity/trufflehog` from 3.97.4 to 3.97.5 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/trufflesecurity/trufflehog/releases">trufflesecurity/trufflehog's releases</a>.</em></p> <blockquote> <h2>v3.97.5</h2> <h2>What's Changed</h2> <ul> <li>Update module github.com/rabbitmq/amqp091-go to v1.13.0 [SECURITY] by <a href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5274">trufflesecurity/trufflehog#5274</a></li> <li>Update github-actions by <a href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5250">trufflesecurity/trufflehog#5250</a></li> <li>Update dependency golangci/golangci-lint to v2.13.2 by <a href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5251">trufflesecurity/trufflehog#5251</a></li> <li>Make GitHub App installationId optional when scanning all installations by <a href="https://github.com/kashifkhan0771"><code>@​kashifkhan0771</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5275">trufflesecurity/trufflehog#5275</a></li> <li>[INT-942] Add HumioAPIToken detector by <a href="https://github.com/unsmith"><code>@​unsmith</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5258">trufflesecurity/trufflehog#5258</a></li> <li>Object filtering in S3 by <a href="https://github.com/shahzadhaider1"><code>@​shahzadhaider1</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5286">trufflesecurity/trufflehog#5286</a></li> <li>feat(detectors): add Resend detector by <a href="https://github.com/mwoss"><code>@​mwoss</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5103">trufflesecurity/trufflehog#5103</a></li> <li>Clean up use of wasilibs/go-re2 by <a href="https://github.com/bradlarsen"><code>@​bradlarsen</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5273">trufflesecurity/trufflehog#5273</a></li> <li>Low-memory Git Scanning by <a href="https://github.com/mariduv"><code>@​mariduv</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5257">trufflesecurity/trufflehog#5257</a></li> <li>Adding no-ignore flag to allow reporting of &quot;ignored&quot; secrets by <a href="https://github.com/jordanTunstill"><code>@​jordanTunstill</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5297">trufflesecurity/trufflehog#5297</a></li> <li>Postgres: drop non-connection URI params before verifying by <a href="https://github.com/jordanTunstill"><code>@​jordanTunstill</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5296">trufflesecurity/trufflehog#5296</a></li> <li>fix(detectors/ngrok): broaden valid bearer tokens matching by <a href="https://github.com/mattbrady-1"><code>@​mattbrady-1</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5152">trufflesecurity/trufflehog#5152</a></li> <li>ci: avoid Node 20 BuildPulse action by <a href="https://github.com/dustin-decker"><code>@​dustin-decker</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5266">trufflesecurity/trufflehog#5266</a></li> <li>Introduce a new optional detector interface that will allow us to verify credentials not in the cache by <a href="https://github.com/kvnphvm"><code>@​kvnphvm</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5298">trufflesecurity/trufflehog#5298</a></li> <li>perf(engine): lowercase prefilter chunks as ASCII in a pooled buffer by <a href="https://github.com/kashifkhan0771"><code>@​kashifkhan0771</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5291">trufflesecurity/trufflehog#5291</a></li> <li>Add documentation for CircleCI source by <a href="https://github.com/kashifkhan0771"><code>@​kashifkhan0771</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5268">trufflesecurity/trufflehog#5268</a></li> <li>Add filesystem source documentation by <a href="https://github.com/kashifkhan0771"><code>@​kashifkhan0771</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5285">trufflesecurity/trufflehog#5285</a></li> <li>Add elasticsearch source documentation by <a href="https://github.com/kashifkhan0771"><code>@​kashifkhan0771</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5284">trufflesecurity/trufflehog#5284</a></li> <li>[SCAN-177] Purge secret parts from verification cache by <a href="https://github.com/casey-tran"><code>@​casey-tran</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5318">trufflesecurity/trufflehog#5318</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/mwoss"><code>@​mwoss</code></a> made their first contribution in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5103">trufflesecurity/trufflehog#5103</a></li> <li><a href="https://github.com/kvnphvm"><code>@​kvnphvm</code></a> made their first contribution in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5298">trufflesecurity/trufflehog#5298</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/trufflesecurity/trufflehog/compare/v3.97.4...v3.97.5">https://github.com/trufflesecurity/trufflehog/compare/v3.97.4...v3.97.5</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/f714bf454f350590f4a24c3ddb1aef02c35bf5b6"><code>f714bf4</code></a> [SCAN-177] Purge secret parts from verification cache (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/5318">#5318</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/4ecb5c6edf1756d55afe6da63049bfc71a5375b1"><code>4ecb5c6</code></a> Add elasticsearch source documentation (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/5284">#5284</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/8d77a9dfc0770e40beb4911f5607ba43573b78a3"><code>8d77a9d</code></a> Add filesystem source documentation (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/5285">#5285</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/b8a71ee3febda04b6cec1f78ca4ace98b5c2df4e"><code>b8a71ee</code></a> Add documentation for CircleCI source (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/5268">#5268</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/b1d7dae8dbe40201b8c692f8b4075ecd02d7d733"><code>b1d7dae</code></a> perf(engine): lowercase prefilter chunks as ASCII in a pooled buffer (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/5291">#5291</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/07e3ac7171c3a1fef72bcfc9aa4a425185466853"><code>07e3ac7</code></a> Introduce a new optional detector interface that will allow us to verify cred...</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/5a6944e878348ba138c91a3715477d85341e206d"><code>5a6944e</code></a> ci: avoid Node 20 BuildPulse action (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/5266">#5266</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/ce7b2b838ceb4a90930c15cddd3848731604f5df"><code>ce7b2b8</code></a> fix(detectors/ngrok): broaden valid bearer tokens matching (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/5152">#5152</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/58bf4810c86119653dc4d562a410381df90c9bce"><code>58bf481</code></a> Postgres: drop non-connection URI params before verifying (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/5296">#5296</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/82fd19ca3dbde334b44b84b748ca847b8b914262"><code>82fd19c</code></a> Adding no-ignore flag to allow reporting of &quot;ignored&quot; secrets (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/5297">#5297</a>)</li> <li>Additional commits viewable in <a href="https://github.com/trufflesecurity/trufflehog/compare/363923b901c911a9164f50b6c423f47c15372b1c...f714bf454f350590f4a24c3ddb1aef02c35bf5b6">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=trufflesecurity/trufflehog&package-manager=github_actions&previous-version=3.97.4&new-version=3.97.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent fb1e25e commit f8c1871

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

‎.github/workflows/secret-scanner.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ jobs:
2828
fetch-depth: 0 # Full history for scanning
2929

3030
- name: TruffleHog Secret Scan
31-
uses: trufflesecurity/trufflehog@363923b901c911a9164f50b6c423f47c15372b1c # v3
31+
uses: trufflesecurity/trufflehog@f714bf454f350590f4a24c3ddb1aef02c35bf5b6 # v3
3232
with:
3333
# The v3 action injects --fail automatically on pull_request events.
3434
# Passing --fail here triggers "flag 'fail' cannot be repeated".

0 commit comments

Comments
 (0)