Skip to content

Commit ec19fcf

Browse files
renovate[bot]renovate[bot]
authored
chore(deps): update trufflesecurity/trufflehog action to v3.81.9 (#308)
[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [trufflesecurity/trufflehog](https://togithub.com/trufflesecurity/trufflehog) | action | patch | `v3.81.5` -> `v3.81.9` | --- ### Release Notes <details> <summary>trufflesecurity/trufflehog (trufflesecurity/trufflehog)</summary> ### [`v3.81.9`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.81.9) [Compare Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.81.8...v3.81.9) #### What's Changed - Capture decoding time metric by [@&#8203;rosecodym](https://togithub.com/rosecodym) in [https://github.com/trufflesecurity/trufflehog/pull/3209](https://togithub.com/trufflesecurity/trufflehog/pull/3209) - fix(deps): update module cloud.google.com/go/secretmanager to v1.13.6 by [@&#8203;renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3208](https://togithub.com/trufflesecurity/trufflehog/pull/3208) - remove two letter keyword by [@&#8203;0x1](https://togithub.com/0x1) in [https://github.com/trufflesecurity/trufflehog/pull/3210](https://togithub.com/trufflesecurity/trufflehog/pull/3210) - Add metrics for command invocation by [@&#8203;mcastorina](https://togithub.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3185](https://togithub.com/trufflesecurity/trufflehog/pull/3185) - chore(deps): update sigstore/cosign-installer action to v3.6.0 by [@&#8203;renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3211](https://togithub.com/trufflesecurity/trufflehog/pull/3211) - \[analyze] Capture the hierarchy of GitHub permissions by [@&#8203;mcastorina](https://togithub.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3127](https://togithub.com/trufflesecurity/trufflehog/pull/3127) - \[analyze] Fix GitHub token expiration parsing by [@&#8203;mcastorina](https://togithub.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3205](https://togithub.com/trufflesecurity/trufflehog/pull/3205) - \[chore] Fix lint errors by [@&#8203;mcastorina](https://togithub.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3218](https://togithub.com/trufflesecurity/trufflehog/pull/3218) - \[chore] Ignore analyzer implementation tests in test-community by [@&#8203;mcastorina](https://togithub.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3219](https://togithub.com/trufflesecurity/trufflehog/pull/3219) - Support for kebab case and dot notation in permission generation tool by [@&#8203;abmussani](https://togithub.com/abmussani) in [https://github.com/trufflesecurity/trufflehog/pull/3222](https://togithub.com/trufflesecurity/trufflehog/pull/3222) - Improve domain / url handling in detectors by [@&#8203;dustin-decker](https://togithub.com/dustin-decker) in [https://github.com/trufflesecurity/trufflehog/pull/3221](https://togithub.com/trufflesecurity/trufflehog/pull/3221) **Full Changelog**: trufflesecurity/trufflehog@v3.81.8...v3.81.9 ### [`v3.81.8`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.81.8) [Compare Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.81.7...v3.81.8) #### What's Changed - \[analyze] Deduplicate finegrained GitHub permissions by [@&#8203;mcastorina](https://togithub.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3196](https://togithub.com/trufflesecurity/trufflehog/pull/3196) - fix(deps): update module golang.org/x/net to v0.28.0 by [@&#8203;renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3187](https://togithub.com/trufflesecurity/trufflehog/pull/3187) - \[analyze] Fix double-print in postgres analyzer by [@&#8203;mcastorina](https://togithub.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3199](https://togithub.com/trufflesecurity/trufflehog/pull/3199) - fix(deps): update module go.mongodb.org/mongo-driver to v1.16.1 by [@&#8203;renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3197](https://togithub.com/trufflesecurity/trufflehog/pull/3197) - Log when a detector ignores the timeout by [@&#8203;rosecodym](https://togithub.com/rosecodym) in [https://github.com/trufflesecurity/trufflehog/pull/3201](https://togithub.com/trufflesecurity/trufflehog/pull/3201) - \[bug] - Correctly Handle Large Files in BufferedReadSeeker by [@&#8203;ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/3203](https://togithub.com/trufflesecurity/trufflehog/pull/3203) - fix(deps): update module github.com/google/go-containerregistry to v0.20.2 by [@&#8203;renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3184](https://togithub.com/trufflesecurity/trufflehog/pull/3184) **Full Changelog**: trufflesecurity/trufflehog@v3.81.7...v3.81.8 ### [`v3.81.7`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.81.7) [Compare Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.81.6...v3.81.7) #### What's Changed - fix(deps): update module golang.org/x/crypto to v0.26.0 by [@&#8203;renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3182](https://togithub.com/trufflesecurity/trufflehog/pull/3182) - fix(deps): update module golang.org/x/text to v0.17.0 - autoclosed by [@&#8203;renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3183](https://togithub.com/trufflesecurity/trufflehog/pull/3183) - \[analyze] Add analyze option to main TUI and unhide subcommand by [@&#8203;mcastorina](https://togithub.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3186](https://togithub.com/trufflesecurity/trufflehog/pull/3186) - Analyzer capitalization by [@&#8203;hxnyk](https://togithub.com/hxnyk) in [https://github.com/trufflesecurity/trufflehog/pull/3188](https://togithub.com/trufflesecurity/trufflehog/pull/3188) - \[analyze] Bandaid solution for occasional slow startups by [@&#8203;mcastorina](https://togithub.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3191](https://togithub.com/trufflesecurity/trufflehog/pull/3191) - \[analyze] Add basic section to README by [@&#8203;mcastorina](https://togithub.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3190](https://togithub.com/trufflesecurity/trufflehog/pull/3190) - Fixes for a few finegrained token issues by [@&#8203;dustin-decker](https://togithub.com/dustin-decker) in [https://github.com/trufflesecurity/trufflehog/pull/3194](https://togithub.com/trufflesecurity/trufflehog/pull/3194) **Full Changelog**: trufflesecurity/trufflehog@v3.81.6...v3.81.7 ### [`v3.81.6`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.81.6) [Compare Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.81.5...v3.81.6) #### What's Changed - Auth GitHub in Init by [@&#8203;rosecodym](https://togithub.com/rosecodym) in [https://github.com/trufflesecurity/trufflehog/pull/3131](https://togithub.com/trufflesecurity/trufflehog/pull/3131) - fix(deps): update module github.com/envoyproxy/protoc-gen-validate to v1.1.0 by [@&#8203;renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3176](https://togithub.com/trufflesecurity/trufflehog/pull/3176) - Analyze TUI by [@&#8203;mcastorina](https://togithub.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3172](https://togithub.com/trufflesecurity/trufflehog/pull/3172) - \[analyze] Separate SID from token in twilio analyzer by [@&#8203;mcastorina](https://togithub.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3177](https://togithub.com/trufflesecurity/trufflehog/pull/3177) - \[chore] Use custom HTTP client in sendgrid analyzer by [@&#8203;mcastorina](https://togithub.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3178](https://togithub.com/trufflesecurity/trufflehog/pull/3178) - Improve finegrained token support by [@&#8203;dustin-decker](https://togithub.com/dustin-decker) in [https://github.com/trufflesecurity/trufflehog/pull/3179](https://togithub.com/trufflesecurity/trufflehog/pull/3179) **Full Changelog**: trufflesecurity/trufflehog@v3.81.5...v3.81.6 </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View the [repository job log](https://developer.mend.io/github/splunk/addonfactory-workflow-addon-release). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4yMC4xIiwidXBkYXRlZEluVmVyIjoiMzguMjYuMSIsInRhcmdldEJyYW5jaCI6ImRldmVsb3AiLCJsYWJlbHMiOltdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
1 parent e3a7bc1 commit ec19fcf

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

‎.github/workflows/reusable-build-test-release.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -265,7 +265,7 @@ jobs:
265265
fetch-depth: "0"
266266
ref: ${{ github.head_ref }}
267267
- name: Secret Scanning Trufflehog
268-
uses: trufflesecurity/trufflehog@v3.81.5
268+
uses: trufflesecurity/trufflehog@v3.81.9
269269
with:
270270
extra_args: -x .github/workflows/exclude-patterns.txt --json --only-verified
271271
version: 3.77.0

0 commit comments

Comments
 (0)