Releases: trufflesecurity/trufflehog
Releases · trufflesecurity/trufflehog
v3.93.8
What's Changed
- fix: make LDAP verification context-aware by @mariduv in #4768
- Stop growing filesystem resume data by @rosecodym in #4797
Full Changelog: v3.93.7...v3.93.8
v3.93.7
What's Changed
- [INS-331] Fix the issue causing the tests file system soruce tests to fail on windows by @MuneebUllahKhan222 in #4743
- Thread original chunk data through engine pipeline by @dustin-decker in #4780
- Added detector for JFrog Artifactory Reference Tokens by @shahzadhaider1 in #4684
- Fix JDBC detector regex truncating trailing non-alphanumeric password characters by @amanfcp in #4755
Full Changelog: v3.93.6...v3.93.7
v3.93.6
What's Changed
- GH_TOKEN needed for gh by @bill-rich in #4772
- Move verify flag into
detectableChunkby @rosecodym in #4558
Full Changelog: v3.93.5...v3.93.6
v3.93.5
What's Changed
- Add workspace_id to Slack Continuous metadata by @mariduv in #4749
- fix(release): Disable docker provenance feature by @mariduv in #4752
- Base64 decoding depth assessment by @dxa4481 in #4744
- [INS-246] Add Google Gemini API key detector by @mustansir14 in #4649
- Refactor log package by @mcastorina in #4734
- [INS-309]updated google api version to v0.259.0 by @MuneebUllahKhan222 in #4736
- fix(ftp): set read deadline on connection to prevent indefinite hang by @dylanTruffle in #4759
- added rotation on 403s access_refused, this detector considered them indeterminate failures by @jordanTunstill in #4740
- [INS-283] Support following symlinks in filesystem source by @MuneebUllahKhan222 in #4742
- Fix typos in comments in json-enumerator source by @bradlarsen in #4764
- Fix race condition in release process by @bill-rich in #4766
Full Changelog: v3.93.4...v3.93.5
v3.93.4
What's Changed
- Add a new NDJSON / JSONL input source by @bradlarsen in #4721
- Fix typo in CODEOWNERS for pkg/analyzer by @shahzadhaider1 in #4748
- Pre-allocate anthropic analyzer bindings slice capacity with zero length by @kashifkhan0771 in #4746
- Made indeterminate error for JWT detector determinate by @jordanTunstill in #4745
- Optimize the regex pattern in the artifactory access token detector by @shahzadhaider1 in #4685
Full Changelog: v3.93.3...v3.93.4
v3.93.3
v3.93.2
What's Changed
- Fix pre-receive hook hangs and missing logs by flushing logs on signal and using CommandContext for git commands by @jordanTunstill in #4714
- [INS-285] Fix custom detectors line number reporting to match the full regex instead of capture group by @mustansir14 in #4697
Full Changelog: v3.93.1...v3.93.2
v3.93.1
What's Changed
- Enhance security reporting guidelines in SECURITY.md by @joeleonjr in #4725
- Allow logging of caller info by @rosecodym in #4731
Full Changelog: v3.93.0...v3.93.1
v3.93.0
What's Changed
- Remove ResultWithMetadata.Data by @rosecodym in #4659
- Add tests for processResult by @rosecodym in #4674
- Switch out default HTTP client use in detectors by @bradlarsen in #4670
- [INS-202] Add rate limiting to the Github Analyzer by @mustansir14 in #4617
- Fix/issue 4578 path normalization for unix and windows by @Rusted2361 in #4614
- Auto-configure TruffleHog for Pre-commit Hooks by @kashifkhan0771 in #4666
- Include key info for analyze by @bill-rich in #4686
- fix: typos in comments by @NAM-MAN in #4676
- Stop using detectableChunk in processResult by @rosecodym in #4691
- fix(github): preserve trailing hyphens in repository names by @PascalThuet in #4695
- Skip failing Git Engine test by @mustansir14 in #4701
- [INS-281] Github Bug fix: UnitErr and UnitOK called for the same repo by @mustansir14 in #4681
- [INS-258] Revert includeRepos removal from GitHub source by @mustansir14 in #4673
- Re-enable Git Engine Test by @shahzadhaider1 in #4715
- Add some false positive tests by @rosecodym in #4703
- Unify false positive/overlap tests by @rosecodym in #4699
- Unify some false positive logic by @rosecodym in #4720
- [INS-249] Updated Gitlab client from v0.129.0 to v1.12.0(latest) by @MuneebUllahKhan222 in #4655
- [INS-307] Added unspecified(0.0.0.0) check to DetectorHttpClientWithNoLocalAddresses by @MuneebUllahKhan222 in #4726
- Added Analysis info to tableau detector by @MuneebUllahKhan222 in #4717
- Remove first-class verification overlap tracker by @rosecodym in #4723
- [INS-280] Fix Github "repostories" filter does not respect GHES endpoint by @mustansir14 in #4677
- [INS-228] Add ignorePattern configuration support to Postgres and Sqlserver detectors by @mustansir14 in #4612
New Contributors
- @Rusted2361 made their first contribution in #4614
- @NAM-MAN made their first contribution in #4676
- @PascalThuet made their first contribution in #4695
Full Changelog: v3.92.5...v3.93.0
v3.92.5
What's Changed
- [INS-206] Store Gitlab Project ID in secret location metadata by @mustansir14 in #4601
- [INS-242] Add more validations to Custom Detector config by @mustansir14 in #4642
- Fix syslog test failing due to hardcoded timestamp by @MuneebUllahKhan222 in #4646
- [INS-120] Increase code coverage for Postman's source scanItem function by @MuneebUllahKhan222 in #4648
- [INS-232] Fix S3 Source "panic: runtime error: index out of range" bug by @mustansir14 in #4610
- [INS-170] Unify JDBC URL Parsing Across Detector and Analyzer (Continued) by @mustansir14 in #4606
- Add exponential backoff retry logic in Twilio detector by @shahzadhaider1 in #4652
- Fix typo in help description for Postman API metric by @shahzadhaider1 in #4656
- Rework JWT detector to better block local IPs by @bradlarsen in #4607
- Gitlab Source: Backoff from Scan2 which is experimental to legacy pagination API call by @kashifkhan0771 in #4608
- fix: git commit date parsing for non-English locales by @GLEF1X in #4653
- fix: report accurate line numbers for chunked file scanning (#1876) by @GLEF1X in #4615
- Add Postman API monthly request limit metric by @shahzadhaider1 in #4667
- [INS-243] Fix jdbc detector detecting incomplete connection string and fixed invalid… by @MuneebUllahKhan222 in #4636
New Contributors
Full Changelog: v3.92.4...v3.92.5