From 89641f1b9e1f358438ce31888cd170854ee75d7a Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Thu, 14 Dec 2023 14:20:29 +0100 Subject: [PATCH] chore(deps): update trufflesecurity/trufflehog action to v3.63.3 (#24) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit [![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [trufflesecurity/trufflehog](https://togithub.com/trufflesecurity/trufflehog) | action | patch | `v3.63.2` -> `v3.63.3` | --- ### Release Notes
trufflesecurity/trufflehog (trufflesecurity/trufflehog) ### [`v3.63.3`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.63.3) [Compare Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.63.2...v3.63.3) #### What's Changed - Use forked sevenzip by [@​bill-rich](https://togithub.com/bill-rich) in [https://github.com/trufflesecurity/trufflehog/pull/2180](https://togithub.com/trufflesecurity/trufflehog/pull/2180) - fixing how to rotate URL by [@​dylanTruffle](https://togithub.com/dylanTruffle) in [https://github.com/trufflesecurity/trufflehog/pull/2183](https://togithub.com/trufflesecurity/trufflehog/pull/2183) - \[fixup] - Skip trying to determine MIME type for directories by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2178](https://togithub.com/trufflesecurity/trufflehog/pull/2178) - \[feat] - Remove go-git dependency by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2174](https://togithub.com/trufflesecurity/trufflehog/pull/2174) - remove unnecessary Git cmd check by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2175](https://togithub.com/trufflesecurity/trufflehog/pull/2175) - \[chore] - use https for verification endpoints by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2185](https://togithub.com/trufflesecurity/trufflehog/pull/2185) - allow targets for the source manager by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2182](https://togithub.com/trufflesecurity/trufflehog/pull/2182) - Deprecate some detectors by [@​dustin-decker](https://togithub.com/dustin-decker) in [https://github.com/trufflesecurity/trufflehog/pull/2186](https://togithub.com/trufflesecurity/trufflehog/pull/2186) - \[chore] - update regex by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2184](https://togithub.com/trufflesecurity/trufflehog/pull/2184) - \[chore] - Compile regex once by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2176](https://togithub.com/trufflesecurity/trufflehog/pull/2176) - Remove Java archives from ignored extensions by [@​rosecodym](https://togithub.com/rosecodym) in [https://github.com/trufflesecurity/trufflehog/pull/2188](https://togithub.com/trufflesecurity/trufflehog/pull/2188) - \[chore] - Refactor common code into a separate function by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2179](https://togithub.com/trufflesecurity/trufflehog/pull/2179) - \[feat] - add metrics for gitlab by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2190](https://togithub.com/trufflesecurity/trufflehog/pull/2190) - \[bug] - move logic to main Chunks method by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2194](https://togithub.com/trufflesecurity/trufflehog/pull/2194) - \[fixup] - skip files in the archive handler by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2195](https://togithub.com/trufflesecurity/trufflehog/pull/2195) - Check private keys concurrently by [@​rgmz](https://togithub.com/rgmz) in [https://github.com/trufflesecurity/trufflehog/pull/2139](https://togithub.com/trufflesecurity/trufflehog/pull/2139) - Propagate TruffleHog context to handlers by [@​rgmz](https://togithub.com/rgmz) in [https://github.com/trufflesecurity/trufflehog/pull/2191](https://togithub.com/trufflesecurity/trufflehog/pull/2191) - \[bug] - close file after reading by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2203](https://togithub.com/trufflesecurity/trufflehog/pull/2203) - Use bad json in slackwebhooks by [@​rosecodym](https://togithub.com/rosecodym) in [https://github.com/trufflesecurity/trufflehog/pull/2193](https://togithub.com/trufflesecurity/trufflehog/pull/2193) - Add disk buffer tempfile cleanup by [@​codevbus](https://togithub.com/codevbus) in [https://github.com/trufflesecurity/trufflehog/pull/2130](https://togithub.com/trufflesecurity/trufflehog/pull/2130) - \[chore] Remove omitempty tags on JobProgressMetrics and UnitMetrics by [@​mcastorina](https://togithub.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/2204](https://togithub.com/trufflesecurity/trufflehog/pull/2204) - Fix azurestorage detector by [@​0x1](https://togithub.com/0x1) in [https://github.com/trufflesecurity/trufflehog/pull/2207](https://togithub.com/trufflesecurity/trufflehog/pull/2207) - fix and refactor browserstack detector by [@​0x1](https://togithub.com/0x1) in [https://github.com/trufflesecurity/trufflehog/pull/2208](https://togithub.com/trufflesecurity/trufflehog/pull/2208) - \[chore] Remove unnecessary string conversion in tefter detector by [@​mcastorina](https://togithub.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/2209](https://togithub.com/trufflesecurity/trufflehog/pull/2209) - Update metabase verification to check for a valid JSON response by [@​mcastorina](https://togithub.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/2210](https://togithub.com/trufflesecurity/trufflehog/pull/2210) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.63.2...v3.63.3
--- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/matter-labs/vault-auth-tee). Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- .github/workflows/secrets_scanner.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/secrets_scanner.yaml b/.github/workflows/secrets_scanner.yaml index 16ed6e5..c326ae8 100644 --- a/.github/workflows/secrets_scanner.yaml +++ b/.github/workflows/secrets_scanner.yaml @@ -9,7 +9,7 @@ jobs: with: fetch-depth: 0 - name: TruffleHog OSS - uses: trufflesecurity/trufflehog@11394ea318a12a5bf99c1b0cb7ba5e44b3c7a79c # v3.63.2 + uses: trufflesecurity/trufflehog@4db20e29f8568502b8d69ca2be6ce47a533925d3 # v3.63.3 with: path: ./ base: ${{ github.event.repository.default_branch }}