chore(deps): update trufflesecurity/trufflehog action to v3.93.7

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
trufflesecurity/trufflehog	action	minor	v3.88.32 → v3.93.7

---

Release Notes

trufflesecurity/trufflehog (trufflesecurity/trufflehog)

v3.93.7

Compare Source

What's Changed

• [INS-331] Fix the issue causing the tests file system soruce tests to fail on windows by @​MuneebUllahKhan222 in #​4743
• Thread original chunk data through engine pipeline by @​dustin-decker in #​4780
• Added detector for JFrog Artifactory Reference Tokens by @​shahzadhaider1 in #​4684
• Fix JDBC detector regex truncating trailing non-alphanumeric password characters by @​amanfcp in #​4755

Full Changelog: trufflesecurity/trufflehog@v3.93.6...v3.93.7

v3.93.6

Compare Source

What's Changed

• GH_TOKEN needed for gh by @​bill-rich in #​4772
• Move verify flag into detectableChunk by @​rosecodym in #​4558

Full Changelog: trufflesecurity/trufflehog@v3.93.5...v3.93.6

v3.93.5

Compare Source

What's Changed

• Add workspace_id to Slack Continuous metadata by @​mariduv in #​4749
• fix(release): Disable docker provenance feature by @​mariduv in #​4752
• Base64 decoding depth assessment by @​dxa4481 in #​4744
• [INS-246] Add Google Gemini API key detector by @​mustansir14 in #​4649
• Refactor log package by @​mcastorina in #​4734
• [INS-309]updated google api version to v0.259.0 by @​MuneebUllahKhan222 in #​4736
• fix(ftp): set read deadline on connection to prevent indefinite hang by @​dylanTruffle in #​4759
• added rotation on 403s access_refused, this detector considered them indeterminate failures by @​jordanTunstill in #​4740
• [INS-283] Support following symlinks in filesystem source by @​MuneebUllahKhan222 in #​4742
• Fix typos in comments in json-enumerator source by @​bradlarsen in #​4764
• Fix race condition in release process by @​bill-rich in #​4766

Full Changelog: trufflesecurity/trufflehog@v3.93.4...v3.93.5

v3.93.4

Compare Source

What's Changed

• Add a new NDJSON / JSONL input source by @​bradlarsen in #​4721
• Fix typo in CODEOWNERS for pkg/analyzer by @​shahzadhaider1 in #​4748
• Pre-allocate anthropic analyzer bindings slice capacity with zero length by @​kashifkhan0771 in #​4746
• Made indeterminate error for JWT detector determinate by @​jordanTunstill in #​4745
• Optimize the regex pattern in the artifactory access token detector by @​shahzadhaider1 in #​4685

Full Changelog: trufflesecurity/trufflehog@v3.93.3...v3.93.4

v3.93.3

Compare Source

What's Changed

• OpenAI Admin Key Detector by @​amanfcp in #​4689

Full Changelog: trufflesecurity/trufflehog@v3.93.2...v3.93.3

v3.93.2

Compare Source

What's Changed

• Fix pre-receive hook hangs and missing logs by flushing logs on signal and using CommandContext for git commands by @​jordanTunstill in #​4714
• [INS-285] Fix custom detectors line number reporting to match the full regex instead of capture group by @​mustansir14 in #​4697

Full Changelog: trufflesecurity/trufflehog@v3.93.1...v3.93.2

v3.93.1

Compare Source

What's Changed

• Enhance security reporting guidelines in SECURITY.md by @​joeleonjr in #​4725
• Allow logging of caller info by @​rosecodym in #​4731

Full Changelog: trufflesecurity/trufflehog@v3.93.0...v3.93.1

v3.93.0

Compare Source

What's Changed

• Remove ResultWithMetadata.Data by @​rosecodym in #​4659
• Add tests for processResult by @​rosecodym in #​4674
• Switch out default HTTP client use in detectors by @​bradlarsen in #​4670
• [INS-202] Add rate limiting to the Github Analyzer by @​mustansir14 in #​4617
• Fix/issue 4578 path normalization for unix and windows by @​Rusted2361 in #​4614
• Auto-configure TruffleHog for Pre-commit Hooks by @​kashifkhan0771 in #​4666
• Include key info for analyze by @​bill-rich in #​4686
• fix: typos in comments by @​NAM-MAN in #​4676
• Stop using detectableChunk in processResult by @​rosecodym in #​4691
• fix(github): preserve trailing hyphens in repository names by @​PascalThuet in #​4695
• Skip failing Git Engine test by @​mustansir14 in #​4701
• [INS-281] Github Bug fix: UnitErr and UnitOK called for the same repo by @​mustansir14 in #​4681
• [INS-258] Revert includeRepos removal from GitHub source by @​mustansir14 in #​4673
• Re-enable Git Engine Test by @​shahzadhaider1 in #​4715
• Add some false positive tests by @​rosecodym in #​4703
• Unify false positive/overlap tests by @​rosecodym in #​4699
• Unify some false positive logic by @​rosecodym in #​4720
• [INS-249] Updated Gitlab client from v0.129.0 to v1.12.0(latest) by @​MuneebUllahKhan222 in #​4655
• [INS-307] Added unspecified(0.0.0.0) check to DetectorHttpClientWithNoLocalAddresses by @​MuneebUllahKhan222 in #​4726
• Added Analysis info to tableau detector by @​MuneebUllahKhan222 in #​4717
• Remove first-class verification overlap tracker by @​rosecodym in #​4723
• [INS-280] Fix Github "repostories" filter does not respect GHES endpoint by @​mustansir14 in #​4677
• [INS-228] Add ignorePattern configuration support to Postgres and Sqlserver detectors by @​mustansir14 in #​4612

New Contributors

• @​Rusted2361 made their first contribution in #​4614
• @​NAM-MAN made their first contribution in #​4676
• @​PascalThuet made their first contribution in #​4695

Full Changelog: trufflesecurity/trufflehog@v3.92.5...v3.93.0

v3.92.5

Compare Source

What's Changed

• [INS-206] Store Gitlab Project ID in secret location metadata by @​mustansir14 in #​4601
• [INS-242] Add more validations to Custom Detector config by @​mustansir14 in #​4642
• Fix syslog test failing due to hardcoded timestamp by @​MuneebUllahKhan222 in #​4646
• [INS-120] Increase code coverage for Postman's source scanItem function by @​MuneebUllahKhan222 in #​4648
• [INS-232] Fix S3 Source "panic: runtime error: index out of range" bug by @​mustansir14 in #​4610
• [INS-170] Unify JDBC URL Parsing Across Detector and Analyzer (Continued) by @​mustansir14 in #​4606
• Add exponential backoff retry logic in Twilio detector by @​shahzadhaider1 in #​4652
• Fix typo in help description for Postman API metric by @​shahzadhaider1 in #​4656
• Rework JWT detector to better block local IPs by @​bradlarsen in #​4607
• Gitlab Source: Backoff from Scan2 which is experimental to legacy pagination API call by @​kashifkhan0771 in #​4608
• fix: git commit date parsing for non-English locales by @​GLEF1X in #​4653
• fix: report accurate line numbers for chunked file scanning (#​1876) by @​GLEF1X in #​4615
• Add Postman API monthly request limit metric by @​shahzadhaider1 in #​4667
• [INS-243] Fix jdbc detector detecting incomplete connection string and fixed invalid… by @​MuneebUllahKhan222 in #​4636

New Contributors

• @​GLEF1X made their first contribution in #​4653

Full Changelog: trufflesecurity/trufflehog@v3.92.4...v3.92.5

v3.92.4

Compare Source

What's Changed

• [INS-170] Unify JDBC URL parsing across detectors and analyzers by @​mustansir14 in #​4574
• Pagination and Rate-Limit Handling In Docker Registry Namespace API Calls by @​nabeelalam in #​4557
• [INS-226] Use pinned image for Quay registry Integration test by @​mustansir14 in #​4602
• Update module golang.org/x/crypto to v0.45.0 [SECURITY] by @​renovate[bot] in #​4562
• [INS-207] Add Role-Aware Resumption Support for Legacy S3 Scan by @​MuneebUllahKhan222 in #​4600
• Enable line numbers for GitHub Real-time by @​rosecodym in #​4611

Full Changelog: trufflesecurity/trufflehog@v3.92.3...v3.92.4

v3.92.3

Compare Source

What's Changed

• Add proto definitions for Google Drive Domain-Wide Delegation (DWD) by @​shahzadhaider1 in #​4596
• Fix git clone timeout typo by @​rosecodym in #​4599
• Update Azure Repos link format by @​amanfcp in #​4598

Full Changelog: trufflesecurity/trufflehog@v3.92.2...v3.92.3

v3.92.2

Compare Source

What's Changed

• [INS-37] Fixed the issue of ftp connection ignoring the detector's co… by @​MuneebUllahKhan222 in #​4590
• Add optional git clone timeout by @​rosecodym in #​4597

New Contributors

• @​MuneebUllahKhan222 made their first contribution in #​4590

Full Changelog: trufflesecurity/trufflehog@v3.92.1...v3.92.2

v3.92.1

Compare Source

What's Changed

• Improve Copper Detector verification with stricter status code and email matching by @​amanfcp in #​4594

Full Changelog: trufflesecurity/trufflehog@v3.92.0...v3.92.1

v3.92.0

Compare Source

What's Changed

• Added API Call Metrics to Docker Source by @​nabeelalam in #​4552
• Added Additional Metrics and Job ID in the Docker Source by @​nabeelalam in #​4547
• [Fix] Updated the failing Docker Source Quay Registry Test by @​nabeelalam in #​4580
• Add Gitlab V3 Detector by @​mustansir14 in #​4563
• Add Metrics to RetryableHTTPClient by @​mustansir14 in #​4545
• [INS-104] Support units in S3 source by @​mustansir14 in #​4560
• [INS-204] Abort Postman scan if monthly API request limit crosses 80% by @​mustansir14 in #​4586
• Create way to add key-value pairs to new sinks by @​rosecodym in #​4582
• Skip flaky test by @​rosecodym in #​4595
• Add more clone logging by @​rosecodym in #​4593
• Apply configured include/ignore lists to GitLab unit scans by @​rosecodym in #​4592

Full Changelog: trufflesecurity/trufflehog@v3.91.2...v3.92.0

v3.91.2

Compare Source

What's Changed

• Make Integrations team codeown source integrations by @​rosecodym in #​4561
• Fix custom regex link in readme.md by @​jmcshannon in #​4568
• Add some engine tests around the Verify flag by @​rosecodym in #​4566
• Addition of Installation Type field in Jira Source Proto [INS-79] by @​shahzadhaider1 in #​4564
• [INS-131] Add response id and response name to Postman metadata by @​mustansir14 in #​4555
• Make Integrations (shared) codeowners of proto/ by @​rosecodym in #​4576

New Contributors

• @​jmcshannon made their first contribution in #​4568

Full Changelog: trufflesecurity/trufflehog@v3.91.1...v3.91.2

v3.91.1

Compare Source

v3.91.0

Compare Source

What's Changed

• Remove gh-actions approval workflows in favor of new repo setting by @​j2fw in #​4525
• Scan all images under a namespace for Docker remote registries by @​kashifkhan0771 in #​4514
• Added .msg and .doc to skipArchiverMimeTypes by @​jordanTunstill in #​4544
• Fix Github Wiki Page Links by @​mustansir14 in #​4538
• Added tests for new .msg and .doc file types to skipArchiverMimeTypes by @​jordanTunstill in #​4546
• Shadow context when enumerating GitHub by @​rosecodym in #​4549

Full Changelog: trufflesecurity/trufflehog@v3.90.13...v3.91.0

v3.90.13

Compare Source

What's Changed

• Require product eng approval for PRs by @​dustin-decker in #​4478
• pr approval workflow: use pull_request_target by @​j2fw in #​4522
• Switch to an outside action for pr approval by @​j2fw in #​4523
• pr-approval-check: use separate workflow to check approvals by @​j2fw in #​4530
• test multi-workflow pr approval check by @​j2fw in #​4531
• Implemented Graphql requests for Github PR's, Issues and comments scanning by @​kashifkhan0771 in #​4431
• chore: fix feature support to append user agent suffix by @​dmdhrumilmistry in #​4520
• Updated GDrive proto to support On-Prem Scanning by @​kashifkhan0771 in #​4539
• Track chunk size by source type by @​rosecodym in #​4543

New Contributors

• @​dmdhrumilmistry made their first contribution in #​4520

Full Changelog: trufflesecurity/trufflehog@v3.90.12...v3.90.13

v3.90.12

Compare Source

What's Changed

• Updated Docker source with new test cases and README by @​kashifkhan0771 in #​4481
• Comment out broken CircleCI integration test by @​trufflesteeeve in #​4505
• Fix "skipping binary file" logging to show actual file name by @​mariduv in #​4509
• Refactored circleci source test cases by @​kashifkhan0771 in #​4506
• added ability to run github-experimental against private repos by @​joeleonjr in #​4508
• explicit repositories now bypass wantRepo() filtering entirely. added ctx to newConnector by @​jordanTunstill in #​4507
• Remove include repos by @​jordanTunstill in #​4469
• Remove depaware by @​rosecodym in #​4515

Full Changelog: trufflesecurity/trufflehog@v3.90.11...v3.90.12

v3.90.11

Compare Source

What's Changed

• bump rardecode by @​rosecodym in #​4503

Full Changelog: trufflesecurity/trufflehog@v3.90.10...v3.90.11

v3.90.10

Compare Source

What's Changed

• Local Git Config Sanitization by @​joeleonjr in #​4502

Full Changelog: trufflesecurity/trufflehog@v3.90.9...v3.90.10

v3.90.9

Compare Source

What's Changed

• Return non-zero exit code if an error occurs during a scan. by @​mplzik in #​4476
• Fix: SonarCloud Verification Logic by @​shahzadhaider1 in #​4482
• Clarify what 'unknown' means by @​dustin-decker in #​4477
• Proto update to support scanning confluence comments by @​mustansir14 in #​4484
• Fix SSH schema error executing git clone by @​shahzadhaider1 in #​4488
• Detect Organization ID to pass into AnalysisInfo for Atlassian Detector by @​mustansir14 in #​4480
• Add support for Account API Token verification in Postmark Detector by @​mustansir14 in #​4495
• refactor: use b.Loop() to simplify the code and improve performance by @​dulanting in #​4497
• Fix wrong line number in private key detector (#​4485) by @​kmgv in #​4486
• Reduce GitHub V1 Detector False Positives by @​shahzadhaider1 in #​4494
• Bump github.com/nwaples/rardecode/v2 from 2.0.0-beta.4.0.20241112120701-034e449c6e78 to 2.2.0 by @​dependabot[bot] in #​4501

New Contributors

• @​mplzik made their first contribution in #​4476
• @​mustansir14 made their first contribution in #​4484
• @​dulanting made their first contribution in #​4497
• @​kmgv made their first contribution in #​4486

Full Changelog: trufflesecurity/trufflehog@v3.90.8...v3.90.9

v3.90.8

Compare Source

What's Changed

• Pre-filter GitHub v1 findings to prevent large numbers of validation requests by @​trufflesteeeve in #​4468

Full Changelog: trufflesecurity/trufflehog@v3.90.7...v3.90.8

v3.90.7

Compare Source

What's Changed

• Fix nondeterminism in custom detectors by @​bradlarsen in #​4446
• fix(deps): update aws-sdk-go-v2 monorepo by @​renovate[bot] in #​4433
• fix(deps): update module github.com/couchbase/gocb/v2 to v2.11.0 by @​renovate[bot] in #​4455
• fix(deps): update module google.golang.org/protobuf to v1.36.9 by @​renovate[bot] in #​4456
• fix(deps): update module github.com/brianvoe/gofakeit/v7 to v7.6.0 by @​renovate[bot] in #​4457
• [Feature] Fixed And Updated FlightLabs API Detector by @​nabeelalam in #​4393
• Revert "Improved and fixed copper detector (#​4394)" by @​camgunz in #​4470
• Add metrics to SaneHTTPClient by @​amanfcp in #​4471

Full Changelog: trufflesecurity/trufflehog@v3.90.6...v3.90.7

v3.90.6

Compare Source

What's Changed

• Added support for indeterminate verification for letter Q detectors by @​patidartanay in #​4398
• [Detector] rippling detector for phrase api tokens by @​SyedAliHamad in #​4348
• Added explicit secrets manager write flag to Bitbucket source proto and generate new files by @​casey-tran in #​4403
• [Feature] Updated Dotmailer Detector To Dotdigital by @​nabeelalam in #​4331
• Add support for AWS account allow and deny lists by @​dustin-decker in #​4407
• Enable cloning repository to a specified location with retention option by @​kashifkhan0771 in #​4408
• fix(deps): update module google.golang.org/protobuf to v1.36.8 by @​renovate[bot] in #​4397
• fix(deps): update module cloud.google.com/go/storage to v1.56.1 by @​renovate[bot] in #​4412
• added flyio detector by @​lonmarsDev in #​2381
• Added a dedicated optional flag to ignore gists during scan by @​kashifkhan0771 in #​4423
• Fix git tests if run with global commit.gpgsign=true by @​mariduv in #​4415
• Recover logger if wrapped by a non-logging context implementation by @​mcastorina in #​4406
• fix(deps): update aws-sdk-go-v2 monorepo by @​renovate[bot] in #​4422
• fix(deps): update module github.com/gabriel-vasile/mimetype to v1.4.10 by @​renovate[bot] in #​4424
• [GitHub] Add a GraphQL client to the connector by @​rgmz in #​3837
• Added support for additional validation rules in custom detector by @​kashifkhan0771 in #​4413
• Ignore known common prefix matches for Github V1 detector by @​kashifkhan0771 in #​4379
• Fix error propagation and a typo in verification logic by @​bradlarsen in #​4427
• [Feature] Added Detector for the Photoroom API by @​nabeelalam in #​4414
• Scan Github Private Repositories With Token by @​kashifkhan0771 in #​4426
• fix(deps): update module github.com/brianvoe/gofakeit/v7 to v7.5.1 by @​renovate[bot] in #​4425
• fix(deps): update module github.com/jedib0t/go-pretty/v6 to v6.6.8 by @​renovate[bot] in #​4396
• Fix legacy json flag for Github and Gitlab private repos by @​shahzadhaider1 in #​4386
• Changes to fix Enterprise UI filtering of Github Hosted Scanner Repositories to Include by @​jordanTunstill in #​4430
• pkg: fix some typos in comment by @​vetclippy in #​4440
• Added feature flag to configure projects per page in gitlab enumeration by @​kashifkhan0771 in #​4437

New Contributors

• @​patidartanay made their first contribution in #​4398
• @​bradlarsen made their first contribution in #​4427
• @​vetclippy made their first contribution in #​4440

Full Changelog: trufflesecurity/trufflehog@v3.90.5...v3.90.6

v3.90.5

Compare Source

What's Changed

• Fixed and improved currentsapi detector by @​kashifkhan0771 in #​4391
• Improved and fixed copper detector by @​kashifkhan0771 in #​4394
• fix(deps): update module github.com/bradleyfalzon/ghinstallation/v2 to v2.16.0 by @​renovate[bot] in #​4342
• fix(deps): update module github.com/sendgrid/sendgrid-go to v3.16.1+incompatible by @​renovate[bot] in #​4232
• Utf16 bom support by @​joeleonjr in #​4326
• Add additional unicode escape support by @​jltrfl in #​4296
• Update PreCommit.md with audit mode details by @​joeleonjr in #​4280
• Update proto definitions for custom bitbucket oauth by @​casey-tran in #​4390

New Contributors

• @​jltrfl made their first contribution in #​4296

Full Changelog: trufflesecurity/trufflehog@v3.90.4...v3.90.5

v3.90.4

Compare Source

What's Changed

• Disabled besnappy detector by @​kashifkhan0771 in #​4363
• Expanded test coverage for binary content by @​kashifkhan0771 in #​4332
• Fixed syslog source panic on invalid or chunked input by @​kashifkhan0771 in #​4366
• Improve Bitfinex Detector - Implemented API-Based Secret Validation by @​shahzadhaider1 in #​4368
• [SCAN-81] Report ChunkUnit Panics by @​mariduv in #​4367
• Oss 133 new detector vault approle auth for hashicorp by @​SyedAliHamad in #​4362
• fix(deps): update module github.com/charmbracelet/glamour to v0.10.0 by @​renovate[bot] in #​4345
• Add private key id to GCP metadata by @​dustin-decker in #​4361
• fixed minor grammatical and punctuation issues by @​shahzadhaider1 in #​4369
• Refactored caflou detector by @​kashifkhan0771 in #​4372
• Add option to skip binary files during filesystem source scanning by @​dustin-decker in #​4376
• Improved and fixed couchbase detector by @​kashifkhan0771 in #​4383
• Fixed and improved Clickhelp detector by @​kashifkhan0771 in #​4384
• Fix error-wrapping for callback in common.RecoverWithHandler by @​mariduv in #​4380
• Fixed gitlab detector by @​kashifkhan0771 in #​4371
• [Feature] Fixed And Updated Fibery Detecor by @​nabeelalam in #​4385
• added User to proto by @​jordanTunstill in #​4378

New Contributors

• @​mariduv made their first contribution in #​4367

Full Changelog: trufflesecurity/trufflehog@v3.90.3...v3.90.4

v3.90.3

Compare Source

What's Changed

• Refactored Gitlab Detectors by @​kashifkhan0771 in #​4323
• Support sub-unit resumption in filesystem scans by @​mcastorina in #​4325
• Arranged the detectors in alphabetical order by @​shahzadhaider1 in #​4335
• fix(deps): update module cloud.google.com/go/storage to v1.56.0 by @​renovate[bot] in #​4311
• (fix) Git Repo Cloning Error by @​abmussani in #​4223
• chore(deps): update sigstore/cosign-installer action to v3.9.2 by @​renovate[bot] in #​4337
• fix(deps): update module cloud.google.com/go/secretmanager to v1.15.0 by @​renovate[bot] in #​4310
• fix(deps): update aws-sdk-go-v2 monorepo by @​renovate[bot] in #​4338
• fix(deps): update module github.com/couchbase/gocb/v2 to v2.10.1 by @​renovate[bot] in #​4340
• fix(deps): update module github.com/golang-jwt/jwt/v5 to v5.2.3 by @​renovate[bot] in #​4341
• fix(deps): update module github.com/aws/smithy-go to v1.22.5 by @​renovate[bot] in #​4339
• chore: updated defaults.go references in documentation for adding new detectors by @​Jeff-Rowell in #​4344
• fix(deps): update module github.com/brianvoe/gofakeit/v7 to v7.3.0 by @​renovate[bot] in #​4343
• feat: add webexbot support by @​jonathongardner in #​4322
• Regenerate protobufs with the correct protoc (etc) version by @​camgunz in #​4349
• fix GCS test by @​dustin-decker in #​4350
• [Detector]-Detector for tableau personal access token by @​SyedAliHamad in #​4261
• Scan GitLab Groups by @​shahzadhaider1 in #​4320
• Fixed Aha detector by @​kashifkhan0771 in #​4354
• Updated Github V1 detector to ignore matches with known common prefixes by @​kashifkhan0771 in #​4329
• fix(deps): update module github.com/docker/docker to v28.3.3+incompatible [security] by @​renovate[bot] in #​4355
• removed duplicate detector entries from engine defaults by @​shahzadhaider1 in #​4357
• Missed Smartsheet Tokens by @​shahzadhaider1 in #​4358
• Do not quit TUI, if 'q' is pressed on specific pages by @​kashifkhan0771 in #​4356
• Improve LarkSuite Detector Accuracy and Error Handling by @​shahzadhaider1 in #​4334
• [detector] feat: added rootly detector by @​sahil9001 in #​3414
• Improved and fixed A&B detectors pattern test cases by @​kashifkhan0771 in #​4359
• Restore link field in Slack Continuous Source protobuf message by @​camgunz in #​4360
• fix: fixed verification endpoint and verification logic for brand fetch by @​sahil9001 in #​3470

New Contributors

• @​Jeff-Rowell made their first contribution in #​4344
• @​jonathongardner made their first contribution in #​4322

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.