Skip to content

Commit 6024129

Browse files
Bump trufflesecurity/trufflehog from 3.92.3 to 3.92.4 (#11)
Bumps [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) from 3.92.3 to 3.92.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/trufflesecurity/trufflehog/releases">trufflesecurity/trufflehog's releases</a>.</em></p> <blockquote> <h2>v3.92.4</h2> <h2>What's Changed</h2> <ul> <li>[INS-170] Unify JDBC URL parsing across detectors and analyzers by <a href="https://github.com/mustansir14"><code>@​mustansir14</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4574">trufflesecurity/trufflehog#4574</a></li> <li>Pagination and Rate-Limit Handling In Docker Registry Namespace API Calls by <a href="https://github.com/nabeelalam"><code>@​nabeelalam</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4557">trufflesecurity/trufflehog#4557</a></li> <li>[INS-226] Use pinned image for Quay registry Integration test by <a href="https://github.com/mustansir14"><code>@​mustansir14</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4602">trufflesecurity/trufflehog#4602</a></li> <li>Update module golang.org/x/crypto to v0.45.0 [SECURITY] by <a href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4562">trufflesecurity/trufflehog#4562</a></li> <li>[INS-207] Add Role-Aware Resumption Support for Legacy S3 Scan by <a href="https://github.com/MuneebUllahKhan222"><code>@​MuneebUllahKhan222</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4600">trufflesecurity/trufflehog#4600</a></li> <li>Enable line numbers for GitHub Real-time by <a href="https://github.com/rosecodym"><code>@​rosecodym</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4611">trufflesecurity/trufflehog#4611</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/trufflesecurity/trufflehog/compare/v3.92.3...v3.92.4">https://github.com/trufflesecurity/trufflehog/compare/v3.92.3...v3.92.4</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/ef6e76c3c4023279497fab4721ffa071a722fd05"><code>ef6e76c</code></a> enable line numbers for ghr (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4611">#4611</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/8c1219a4f0f586f3e730fbd3ae0ddc68fcab3636"><code>8c1219a</code></a> [INS-207] Add Role-Aware Resumption Support for Legacy S3 Scan (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4600">#4600</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/606a7edfe3573e675e4f0bc9f0e8d076e42fa981"><code>606a7ed</code></a> Update module golang.org/x/crypto to v0.45.0 [SECURITY] (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4562">#4562</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/8aea6cd9da5084851b3b18a5a4708ed7dbffc1a2"><code>8aea6cd</code></a> [INS-226] use pinned image for quay registry test (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4602">#4602</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/3cb2166dddc6788ba677e2cc1210067c4567d8fb"><code>3cb2166</code></a> Pagination and Rate-Limit Handling In Docker Registry Namespace API Calls (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4">#4</a>...</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/0fab92f434fcce5f8180716c5c6aeb0371929bf9"><code>0fab92f</code></a> [INS-170] Unify JDBC URL parsing across detectors and analyzers (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4574">#4574</a>)</li> <li>See full diff in <a href="https://github.com/trufflesecurity/trufflehog/compare/v3.92.3...ef6e76c3c4023279497fab4721ffa071a722fd05">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=trufflesecurity/trufflehog&package-manager=github_actions&previous-version=3.92.3&new-version=3.92.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent 0976662 commit 6024129

File tree

2 files changed

+2
-2
lines changed

2 files changed

+2
-2
lines changed

.github/workflows/quality.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ jobs:
1818
find . -type f -perm /111 -name "*.sh" | head -10 || true
1919
2020
- name: Check for secrets
21-
uses: trufflesecurity/trufflehog@05cccb53bc9e13bc6d17997db5a6bcc3df44bf2f # v3.92.3
21+
uses: trufflesecurity/trufflehog@ef6e76c3c4023279497fab4721ffa071a722fd05 # v3.92.4
2222
with:
2323
path: ./
2424
base: ${{ github.event.pull_request.base.sha || github.event.before }}

.github/workflows/secret-scanner.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ jobs:
1818
fetch-depth: 0 # Full history for scanning
1919

2020
- name: TruffleHog Secret Scan
21-
uses: trufflesecurity/trufflehog@8a8ef8526528d8a4ff3e2c90be08e25ef8efbd9b # v3
21+
uses: trufflesecurity/trufflehog@ef6e76c3c4023279497fab4721ffa071a722fd05 # v3
2222
with:
2323
extra_args: --only-verified --fail
2424

0 commit comments

Comments
 (0)