Commit graph

25 commits

Author SHA1 Message Date
renovate[bot]
70ccadba0d
fix(deps): update module github.com/hashicorp/vault/api to v1.12.0 2024-02-13 12:04:10 +00:00
Harald Hoyer
b315f69d24
fix(deps): update module golang.org/x/crypto to v0.19.0 (#30)
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| golang.org/x/crypto | `v0.18.0` -> `v0.19.0` |
[![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2fcrypto/v0.19.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/go/golang.org%2fx%2fcrypto/v0.19.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/go/golang.org%2fx%2fcrypto/v0.18.0/v0.19.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2fcrypto/v0.18.0/v0.19.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/matter-labs/vault-auth-tee).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xMjEuMCIsInVwZGF0ZWRJblZlciI6IjM3LjE3My4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->
2024-02-13 13:01:57 +01:00
renovate[bot]
4f2a43c429
fix(deps): update module golang.org/x/crypto to v0.19.0 2024-02-13 10:03:04 +00:00
Harald Hoyer
ba015d1a16
chore(deps): update trufflesecurity/trufflehog action to v3.67.5 (#29)
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[trufflesecurity/trufflehog](https://togithub.com/trufflesecurity/trufflehog)
| action | minor | `v3.63.5` -> `v3.67.5` |

---

### Release Notes

<details>
<summary>trufflesecurity/trufflehog
(trufflesecurity/trufflehog)</summary>

###
[`v3.67.5`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.67.5)

[Compare
Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.67.4...v3.67.5)

#### What's Changed

- Fix handling of GitHub ratelimit information by
[@&#8203;rgmz](https://togithub.com/rgmz) in
[https://github.com/trufflesecurity/trufflehog/pull/2041](https://togithub.com/trufflesecurity/trufflehog/pull/2041)
- Set GHA workdir by
[@&#8203;zricethezav](https://togithub.com/zricethezav) in
[https://github.com/trufflesecurity/trufflehog/pull/2393](https://togithub.com/trufflesecurity/trufflehog/pull/2393)
- Allow CLI version pinning in GHA
([#&#8203;2397](https://togithub.com/trufflesecurity/trufflehog/issues/2397))
by [@&#8203;skeweredlogic](https://togithub.com/skeweredlogic) in
[https://github.com/trufflesecurity/trufflehog/pull/2398](https://togithub.com/trufflesecurity/trufflehog/pull/2398)
- \[bug] - prevent concurrent map writes by
[@&#8203;ahrav](https://togithub.com/ahrav) in
[https://github.com/trufflesecurity/trufflehog/pull/2399](https://togithub.com/trufflesecurity/trufflehog/pull/2399)
- Allow multiple domains for Forager by
[@&#8203;dustin-decker](https://togithub.com/dustin-decker) in
[https://github.com/trufflesecurity/trufflehog/pull/2400](https://togithub.com/trufflesecurity/trufflehog/pull/2400)
- Update GitParse to handle quoted binary filenames by
[@&#8203;rgmz](https://togithub.com/rgmz) in
[https://github.com/trufflesecurity/trufflehog/pull/2391](https://togithub.com/trufflesecurity/trufflehog/pull/2391)
- \[feat] - buffered file writer metrics by
[@&#8203;ahrav](https://togithub.com/ahrav) in
[https://github.com/trufflesecurity/trufflehog/pull/2395](https://togithub.com/trufflesecurity/trufflehog/pull/2395)

#### New Contributors

- [@&#8203;skeweredlogic](https://togithub.com/skeweredlogic) made their
first contribution in
[https://github.com/trufflesecurity/trufflehog/pull/2398](https://togithub.com/trufflesecurity/trufflehog/pull/2398)

**Full Changelog**:
https://github.com/trufflesecurity/trufflehog/compare/v3.67.4...v3.67.5

###
[`v3.67.4`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.67.4)

[Compare
Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.67.3...v3.67.4)

#### What's Changed

- \[feat] - use diff chan by [@&#8203;ahrav](https://togithub.com/ahrav)
in
[https://github.com/trufflesecurity/trufflehog/pull/2387](https://togithub.com/trufflesecurity/trufflehog/pull/2387)

**Full Changelog**:
https://github.com/trufflesecurity/trufflehog/compare/v3.67.3...v3.67.4

###
[`v3.67.3`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.67.3)

[Compare
Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.67.2...v3.67.3)

#### What's Changed

- Disable GitHub wiki scanning by default by
[@&#8203;rosecodym](https://togithub.com/rosecodym) in
[https://github.com/trufflesecurity/trufflehog/pull/2386](https://togithub.com/trufflesecurity/trufflehog/pull/2386)
- Fix binary file hanging bug in git sources by
[@&#8203;mcastorina](https://togithub.com/mcastorina) in
[https://github.com/trufflesecurity/trufflehog/pull/2388](https://togithub.com/trufflesecurity/trufflehog/pull/2388)
- tightening opsgenie detection and verification by
[@&#8203;dylanTruffle](https://togithub.com/dylanTruffle) in
[https://github.com/trufflesecurity/trufflehog/pull/2389](https://togithub.com/trufflesecurity/trufflehog/pull/2389)
- Make `SkipFile` case-insensitive by
[@&#8203;rgmz](https://togithub.com/rgmz) in
[https://github.com/trufflesecurity/trufflehog/pull/2383](https://togithub.com/trufflesecurity/trufflehog/pull/2383)
- \[not-fixup] - Reduce memory consumption for Buffered File Writer by
[@&#8203;ahrav](https://togithub.com/ahrav) in
[https://github.com/trufflesecurity/trufflehog/pull/2377](https://togithub.com/trufflesecurity/trufflehog/pull/2377)

**Full Changelog**:
https://github.com/trufflesecurity/trufflehog/compare/v3.67.2...v3.67.3

###
[`v3.67.2`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.67.2)

[Compare
Source](https://togithub.com/trufflesecurity/trufflehog/compare/3.67.1...v3.67.2)

#### What's Changed

- \[bug] - unhashable map key by
[@&#8203;ahrav](https://togithub.com/ahrav) in
[https://github.com/trufflesecurity/trufflehog/pull/2374](https://togithub.com/trufflesecurity/trufflehog/pull/2374)
- custom detector docs improvement by
[@&#8203;dxa4481](https://togithub.com/dxa4481) in
[https://github.com/trufflesecurity/trufflehog/pull/2376](https://togithub.com/trufflesecurity/trufflehog/pull/2376)
- \[fixup] - correctly use the buffered file writer by
[@&#8203;ahrav](https://togithub.com/ahrav) in
[https://github.com/trufflesecurity/trufflehog/pull/2373](https://togithub.com/trufflesecurity/trufflehog/pull/2373)

**Full Changelog**:
https://github.com/trufflesecurity/trufflehog/compare/v3.67.1...v3.67.2

###
[`v3.67.1`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.67.1)

[Compare
Source](https://togithub.com/trufflesecurity/trufflehog/compare/3.67.1...3.67.1)

#### What's Changed

- \[chore] Cleanup GitLab source errors by
[@&#8203;mcastorina](https://togithub.com/mcastorina) in
[https://github.com/trufflesecurity/trufflehog/pull/2345](https://togithub.com/trufflesecurity/trufflehog/pull/2345)
- \[feat] - concurently scan the filesystem source by
[@&#8203;ahrav](https://togithub.com/ahrav) in
[https://github.com/trufflesecurity/trufflehog/pull/2364](https://togithub.com/trufflesecurity/trufflehog/pull/2364)

**Full Changelog**:
https://github.com/trufflesecurity/trufflehog/compare/3.67.1...v3.67.1

###
[`v3.67.1`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.67.1)

[Compare
Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.67.0...3.67.1)

##### What's Changed

- \[chore] Cleanup GitLab source errors by
[@&#8203;mcastorina](https://togithub.com/mcastorina) in
[https://github.com/trufflesecurity/trufflehog/pull/2345](https://togithub.com/trufflesecurity/trufflehog/pull/2345)
- \[feat] - concurently scan the filesystem source by
[@&#8203;ahrav](https://togithub.com/ahrav) in
[https://github.com/trufflesecurity/trufflehog/pull/2364](https://togithub.com/trufflesecurity/trufflehog/pull/2364)

**Full Changelog**:
https://github.com/trufflesecurity/trufflehog/compare/3.67.1...v3.67.1

###
[`v3.67.0`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.67.0)

[Compare
Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.66.3...v3.67.0)

#### What's Changed

- Make AzureDevopsPersonalAccessToken verification more robust by
[@&#8203;dustin-decker](https://togithub.com/dustin-decker) in
[https://github.com/trufflesecurity/trufflehog/pull/2359](https://togithub.com/trufflesecurity/trufflehog/pull/2359)
- Polite Verification by [@&#8203;ahrav](https://togithub.com/ahrav) in
[https://github.com/trufflesecurity/trufflehog/pull/2356](https://togithub.com/trufflesecurity/trufflehog/pull/2356)

**Full Changelog**:
https://github.com/trufflesecurity/trufflehog/compare/v3.66.3...v3.67.0

###
[`v3.66.3`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.66.3)

[Compare
Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.66.2...v3.66.3)

#### What's Changed

- Allow for configuring the buffered file writer by
[@&#8203;ahrav](https://togithub.com/ahrav) in
[https://github.com/trufflesecurity/trufflehog/pull/2319](https://togithub.com/trufflesecurity/trufflehog/pull/2319)
- added flyio protos by
[@&#8203;lonmarsDev](https://togithub.com/lonmarsDev) in
[https://github.com/trufflesecurity/trufflehog/pull/2357](https://togithub.com/trufflesecurity/trufflehog/pull/2357)
- Scan GitHub wikis by [@&#8203;rgmz](https://togithub.com/rgmz) in
[https://github.com/trufflesecurity/trufflehog/pull/2233](https://togithub.com/trufflesecurity/trufflehog/pull/2233)
- \[chore] Add filesystem integration test by
[@&#8203;mcastorina](https://togithub.com/mcastorina) in
[https://github.com/trufflesecurity/trufflehog/pull/2358](https://togithub.com/trufflesecurity/trufflehog/pull/2358)
- update azure test files to check rawV2 by
[@&#8203;roxanne-tampus](https://togithub.com/roxanne-tampus) in
[https://github.com/trufflesecurity/trufflehog/pull/2353](https://togithub.com/trufflesecurity/trufflehog/pull/2353)
- \[bug] fix script change by
[@&#8203;ahrav](https://togithub.com/ahrav) in
[https://github.com/trufflesecurity/trufflehog/pull/2360](https://togithub.com/trufflesecurity/trufflehog/pull/2360)

**Full Changelog**:
https://github.com/trufflesecurity/trufflehog/compare/v3.66.2...v3.66.3

###
[`v3.66.2`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.66.2)

[Compare
Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.66.1...v3.66.2)

#### What's Changed

- Update the template detector by
[@&#8203;rgmz](https://togithub.com/rgmz) in
[https://github.com/trufflesecurity/trufflehog/pull/2342](https://togithub.com/trufflesecurity/trufflehog/pull/2342)
- Detectors Updates 1 for Tristate Verification by
[@&#8203;0x1](https://togithub.com/0x1) in
[https://github.com/trufflesecurity/trufflehog/pull/2187](https://togithub.com/trufflesecurity/trufflehog/pull/2187)
- Fix filesystem enumeration ignore paths bug by
[@&#8203;mcastorina](https://togithub.com/mcastorina) in
[https://github.com/trufflesecurity/trufflehog/pull/2355](https://togithub.com/trufflesecurity/trufflehog/pull/2355)
- \[feat] - tmp file diffs by
[@&#8203;ahrav](https://togithub.com/ahrav) in
[https://github.com/trufflesecurity/trufflehog/pull/2306](https://togithub.com/trufflesecurity/trufflehog/pull/2306)

**Full Changelog**:
https://github.com/trufflesecurity/trufflehog/compare/v3.66.1...v3.66.2

###
[`v3.66.1`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.66.1)

[Compare
Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.66.0...v3.66.1)

#### What's Changed

- Azure function key is throwing FPs by
[@&#8203;dustin-decker](https://togithub.com/dustin-decker) in
[https://github.com/trufflesecurity/trufflehog/pull/2352](https://togithub.com/trufflesecurity/trufflehog/pull/2352)

**Full Changelog**:
https://github.com/trufflesecurity/trufflehog/compare/v3.66.0...v3.66.1

###
[`v3.66.0`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.66.0)

[Compare
Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.65.0...v3.66.0)

#### What's Changed

- \[chore] - make sure to close connections after testing by
[@&#8203;ahrav](https://togithub.com/ahrav) in
[https://github.com/trufflesecurity/trufflehog/pull/2343](https://togithub.com/trufflesecurity/trufflehog/pull/2343)
- Prevent print or logging in detectors by
[@&#8203;dustin-decker](https://togithub.com/dustin-decker) in
[https://github.com/trufflesecurity/trufflehog/pull/2341](https://togithub.com/trufflesecurity/trufflehog/pull/2341)
- Add the new MaxMind license key format by
[@&#8203;faktas2](https://togithub.com/faktas2) in
[https://github.com/trufflesecurity/trufflehog/pull/2181](https://togithub.com/trufflesecurity/trufflehog/pull/2181)
- updates to plain and json printing to include verification error by
[@&#8203;0x1](https://togithub.com/0x1) in
[https://github.com/trufflesecurity/trufflehog/pull/2335](https://togithub.com/trufflesecurity/trufflehog/pull/2335)
- added azurefunctionkey detector by
[@&#8203;roxanne-tampus](https://togithub.com/roxanne-tampus) in
[https://github.com/trufflesecurity/trufflehog/pull/2337](https://togithub.com/trufflesecurity/trufflehog/pull/2337)
- added azuresearchadminkey detector by
[@&#8203;roxanne-tampus](https://togithub.com/roxanne-tampus) in
[https://github.com/trufflesecurity/trufflehog/pull/2348](https://togithub.com/trufflesecurity/trufflehog/pull/2348)
- added azuresearchquerykey detector by
[@&#8203;roxanne-tampus](https://togithub.com/roxanne-tampus) in
[https://github.com/trufflesecurity/trufflehog/pull/2349](https://togithub.com/trufflesecurity/trufflehog/pull/2349)
- Improve fp ignore logic by
[@&#8203;dustin-decker](https://togithub.com/dustin-decker) in
[https://github.com/trufflesecurity/trufflehog/pull/2351](https://togithub.com/trufflesecurity/trufflehog/pull/2351)

#### New Contributors

- [@&#8203;faktas2](https://togithub.com/faktas2) made their first
contribution in
[https://github.com/trufflesecurity/trufflehog/pull/2181](https://togithub.com/trufflesecurity/trufflehog/pull/2181)

**Full Changelog**:
https://github.com/trufflesecurity/trufflehog/compare/v3.65.0...v3.66.0

###
[`v3.65.0`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.65.0)

[Compare
Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.64.0...v3.65.0)

#### What's Changed

- Walk directories in filesystem source enumeration by
[@&#8203;mcastorina](https://togithub.com/mcastorina) in
[https://github.com/trufflesecurity/trufflehog/pull/2313](https://togithub.com/trufflesecurity/trufflehog/pull/2313)
- added azuredevopspersonalaccesstoken detector by
[@&#8203;roxanne-tampus](https://togithub.com/roxanne-tampus) in
[https://github.com/trufflesecurity/trufflehog/pull/2315](https://togithub.com/trufflesecurity/trufflehog/pull/2315)
- updating doppler logic by
[@&#8203;joeleonjr](https://togithub.com/joeleonjr) in
[https://github.com/trufflesecurity/trufflehog/pull/2329](https://togithub.com/trufflesecurity/trufflehog/pull/2329)
- add priority semaphore to source manager by
[@&#8203;ahrav](https://togithub.com/ahrav) in
[https://github.com/trufflesecurity/trufflehog/pull/2336](https://togithub.com/trufflesecurity/trufflehog/pull/2336)
- Add Google oauth2 token detector by
[@&#8203;rgmz](https://togithub.com/rgmz) in
[https://github.com/trufflesecurity/trufflehog/pull/2274](https://togithub.com/trufflesecurity/trufflehog/pull/2274)
- Update DockerHub detector logic by
[@&#8203;rgmz](https://togithub.com/rgmz) in
[https://github.com/trufflesecurity/trufflehog/pull/2266](https://togithub.com/trufflesecurity/trufflehog/pull/2266)
- Improve GitHub scan logging by
[@&#8203;rgmz](https://togithub.com/rgmz) in
[https://github.com/trufflesecurity/trufflehog/pull/2220](https://togithub.com/trufflesecurity/trufflehog/pull/2220)
- add tri-state verification to yelp by
[@&#8203;zubairk14](https://togithub.com/zubairk14) in
[https://github.com/trufflesecurity/trufflehog/pull/1736](https://togithub.com/trufflesecurity/trufflehog/pull/1736)
- Fix broken test by
[@&#8203;dustin-decker](https://togithub.com/dustin-decker) in
[https://github.com/trufflesecurity/trufflehog/pull/2339](https://togithub.com/trufflesecurity/trufflehog/pull/2339)

**Full Changelog**:
https://github.com/trufflesecurity/trufflehog/compare/v3.64.0...v3.65.0

###
[`v3.64.0`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.64.0)

[Compare
Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.63.11...v3.64.0)

#### What's Changed

- Add prometheus metrics to measure hook execution time by
[@&#8203;mcastorina](https://togithub.com/mcastorina) in
[https://github.com/trufflesecurity/trufflehog/pull/2312](https://togithub.com/trufflesecurity/trufflehog/pull/2312)
- updating detector logic for zenscrape by
[@&#8203;joeleonjr](https://togithub.com/joeleonjr) in
[https://github.com/trufflesecurity/trufflehog/pull/2316](https://togithub.com/trufflesecurity/trufflehog/pull/2316)
- fix for incorrect AWS account number identification by
[@&#8203;joeleonjr](https://togithub.com/joeleonjr) in
[https://github.com/trufflesecurity/trufflehog/pull/2332](https://togithub.com/trufflesecurity/trufflehog/pull/2332)
- Narrow Postgres detector to only look for URIs by
[@&#8203;rosecodym](https://togithub.com/rosecodym) in
[https://github.com/trufflesecurity/trufflehog/pull/2314](https://togithub.com/trufflesecurity/trufflehog/pull/2314)
- Update Gitlab repo count in tests by
[@&#8203;rosecodym](https://togithub.com/rosecodym) in
[https://github.com/trufflesecurity/trufflehog/pull/2333](https://togithub.com/trufflesecurity/trufflehog/pull/2333)
- \[feat] - Replace regexp pkg w/ go-re2 in detectors by
[@&#8203;ahrav](https://togithub.com/ahrav) in
[https://github.com/trufflesecurity/trufflehog/pull/2324](https://togithub.com/trufflesecurity/trufflehog/pull/2324)

**Full Changelog**:
https://github.com/trufflesecurity/trufflehog/compare/v3.63.11...v3.64.0

###
[`v3.63.11`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.63.11)

[Compare
Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.63.10...v3.63.11)

#### What's Changed

- \[fixup] - save 8 bytes per chunk by
[@&#8203;ahrav](https://togithub.com/ahrav) in
[https://github.com/trufflesecurity/trufflehog/pull/2310](https://togithub.com/trufflesecurity/trufflehog/pull/2310)
- fix(deps): update module github.com/hashicorp/golang-lru to v2 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/trufflesecurity/trufflehog/pull/2054](https://togithub.com/trufflesecurity/trufflehog/pull/2054)
- \[chore] - Update Chunk struct comment by
[@&#8203;ahrav](https://togithub.com/ahrav) in
[https://github.com/trufflesecurity/trufflehog/pull/2317](https://togithub.com/trufflesecurity/trufflehog/pull/2317)
- fix(deps): update golang.org/x/exp digest to
[`1b97071`](1b97071)
by [@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/trufflesecurity/trufflehog/pull/2318](https://togithub.com/trufflesecurity/trufflehog/pull/2318)
- fix(deps): update module github.com/couchbase/gocb/v2 to v2.7.1 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/trufflesecurity/trufflehog/pull/2320](https://togithub.com/trufflesecurity/trufflehog/pull/2320)
- fix(deps): update module github.com/envoyproxy/protoc-gen-validate to
v1.0.4 by [@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/trufflesecurity/trufflehog/pull/2322](https://togithub.com/trufflesecurity/trufflehog/pull/2322)
- fix(deps): update module github.com/aws/aws-sdk-go to v1.50.0 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/trufflesecurity/trufflehog/pull/2325](https://togithub.com/trufflesecurity/trufflehog/pull/2325)
- \[chore] - reduce test time by
[@&#8203;ahrav](https://togithub.com/ahrav) in
[https://github.com/trufflesecurity/trufflehog/pull/2321](https://togithub.com/trufflesecurity/trufflehog/pull/2321)

**Full Changelog**:
https://github.com/trufflesecurity/trufflehog/compare/v3.63.10...v3.63.11

###
[`v3.63.10`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.63.10)

[Compare
Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.63.9...v3.63.10)

#### What's Changed

- added azure protos by
[@&#8203;roxanne-tampus](https://togithub.com/roxanne-tampus) in
[https://github.com/trufflesecurity/trufflehog/pull/2304](https://togithub.com/trufflesecurity/trufflehog/pull/2304)
- \[fixup ] - Allow ssh cloning with AWS Code Commit by
[@&#8203;ahrav](https://togithub.com/ahrav) in
[https://github.com/trufflesecurity/trufflehog/pull/2307](https://togithub.com/trufflesecurity/trufflehog/pull/2307)
- Assume unauthenticated github scans have public visibility by
[@&#8203;mcastorina](https://togithub.com/mcastorina) in
[https://github.com/trufflesecurity/trufflehog/pull/2308](https://togithub.com/trufflesecurity/trufflehog/pull/2308)
- \[chore] - Add regex and keyword for api_org tokens by
[@&#8203;ahrav](https://togithub.com/ahrav) in
[https://github.com/trufflesecurity/trufflehog/pull/2240](https://togithub.com/trufflesecurity/trufflehog/pull/2240)

**Full Changelog**:
https://github.com/trufflesecurity/trufflehog/compare/v3.63.9...v3.63.10

###
[`v3.63.9`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.63.9)

[Compare
Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.63.8...v3.63.9)

#### What's Changed

- \[chore] - update docs for pre-commit by
[@&#8203;ahrav](https://togithub.com/ahrav) in
[https://github.com/trufflesecurity/trufflehog/pull/2280](https://togithub.com/trufflesecurity/trufflehog/pull/2280)
- Ignore common false positives for Parseur Detector by
[@&#8203;rgmz](https://togithub.com/rgmz) in
[https://github.com/trufflesecurity/trufflehog/pull/2229](https://togithub.com/trufflesecurity/trufflehog/pull/2229)
- Ignore common Signable false positives by
[@&#8203;rgmz](https://togithub.com/rgmz) in
[https://github.com/trufflesecurity/trufflehog/pull/2230](https://togithub.com/trufflesecurity/trufflehog/pull/2230)
- fix(deps): update golang.org/x/exp digest to
[`be819d1`](be819d1)
by [@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/trufflesecurity/trufflehog/pull/2281](https://togithub.com/trufflesecurity/trufflehog/pull/2281)
- \[chore] - update test by [@&#8203;ahrav](https://togithub.com/ahrav)
in
[https://github.com/trufflesecurity/trufflehog/pull/2283](https://togithub.com/trufflesecurity/trufflehog/pull/2283)
- adding postgres detector by
[@&#8203;dylanTruffle](https://togithub.com/dylanTruffle) in
[https://github.com/trufflesecurity/trufflehog/pull/2108](https://togithub.com/trufflesecurity/trufflehog/pull/2108)
- fix(deps): update module
github.com/azuread/microsoft-authentication-library-for-go to v1.2.1 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/trufflesecurity/trufflehog/pull/2282](https://togithub.com/trufflesecurity/trufflehog/pull/2282)
- fix(deps): update golang.org/x/exp digest to
[`0dcbfd6`](0dcbfd6)
by [@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/trufflesecurity/trufflehog/pull/2284](https://togithub.com/trufflesecurity/trufflehog/pull/2284)
- fix(deps): update module github.com/gabriel-vasile/mimetype to v1.4.3
by [@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/trufflesecurity/trufflehog/pull/2285](https://togithub.com/trufflesecurity/trufflehog/pull/2285)
- Extend memory cache by [@&#8203;ahrav](https://togithub.com/ahrav) in
[https://github.com/trufflesecurity/trufflehog/pull/2275](https://togithub.com/trufflesecurity/trufflehog/pull/2275)
- fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.19 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/trufflesecurity/trufflehog/pull/2286](https://togithub.com/trufflesecurity/trufflehog/pull/2286)
- chore(deps): update alpine docker tag to v3.19 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/trufflesecurity/trufflehog/pull/2287](https://togithub.com/trufflesecurity/trufflehog/pull/2287)
- chore(deps): update sigstore/cosign-installer action to v3.3.0 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/trufflesecurity/trufflehog/pull/2290](https://togithub.com/trufflesecurity/trufflehog/pull/2290)
- fix(deps): update module cloud.google.com/go/storage to v1.36.0 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/trufflesecurity/trufflehog/pull/2291](https://togithub.com/trufflesecurity/trufflehog/pull/2291)
- fix(deps): update module github.com/aws/aws-sdk-go to v1.49.18 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/trufflesecurity/trufflehog/pull/2292](https://togithub.com/trufflesecurity/trufflehog/pull/2292)
- feat(installation): Implement checksum signature verification by
[@&#8203;hibare](https://togithub.com/hibare) in
[https://github.com/trufflesecurity/trufflehog/pull/2157](https://togithub.com/trufflesecurity/trufflehog/pull/2157)
- fix(deps): update module github.com/aws/aws-sdk-go to v1.49.19 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/trufflesecurity/trufflehog/pull/2294](https://togithub.com/trufflesecurity/trufflehog/pull/2294)
- fix(deps): update module github.com/bradleyfalzon/ghinstallation/v2 to
v2.9.0 by [@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/trufflesecurity/trufflehog/pull/2295](https://togithub.com/trufflesecurity/trufflehog/pull/2295)
- \[chore] - small updates by
[@&#8203;ahrav](https://togithub.com/ahrav) in
[https://github.com/trufflesecurity/trufflehog/pull/2288](https://togithub.com/trufflesecurity/trufflehog/pull/2288)
- \[feat] - Allow for the use of include/exclude path files for
filesystem scans by [@&#8203;ahrav](https://togithub.com/ahrav) in
[https://github.com/trufflesecurity/trufflehog/pull/2297](https://togithub.com/trufflesecurity/trufflehog/pull/2297)
- Individuate archive tests by
[@&#8203;rosecodym](https://togithub.com/rosecodym) in
[https://github.com/trufflesecurity/trufflehog/pull/2293](https://togithub.com/trufflesecurity/trufflehog/pull/2293)
- \[feat] - Provide CLI flag to only use custom verifiers by
[@&#8203;ahrav](https://togithub.com/ahrav) in
[https://github.com/trufflesecurity/trufflehog/pull/2299](https://togithub.com/trufflesecurity/trufflehog/pull/2299)
- Disable postgres detector because it it too sensitive by
[@&#8203;dustin-decker](https://togithub.com/dustin-decker) in
[https://github.com/trufflesecurity/trufflehog/pull/2303](https://togithub.com/trufflesecurity/trufflehog/pull/2303)

**Full Changelog**:
https://github.com/trufflesecurity/trufflehog/compare/v3.63.8...v3.63.9

###
[`v3.63.8`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.63.8)

[Compare
Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.63.7...v3.63.8)

#### What's Changed

- Fix commit message single quote escaping on GitHub Action by
[@&#8203;0x2b3bfa0](https://togithub.com/0x2b3bfa0) in
[https://github.com/trufflesecurity/trufflehog/pull/2259](https://togithub.com/trufflesecurity/trufflehog/pull/2259)
- fix(deps): update module github.com/go-git/go-git/v5 to v5.11.0
\[security] by [@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/trufflesecurity/trufflehog/pull/2263](https://togithub.com/trufflesecurity/trufflehog/pull/2263)
- Fix non-ASCII whitespace on GitHub Action by
[@&#8203;0x2b3bfa0](https://togithub.com/0x2b3bfa0) in
[https://github.com/trufflesecurity/trufflehog/pull/2270](https://togithub.com/trufflesecurity/trufflehog/pull/2270)
- Update GitParse logic to handle edge case. by
[@&#8203;rgmz](https://togithub.com/rgmz) in
[https://github.com/trufflesecurity/trufflehog/pull/2206](https://togithub.com/trufflesecurity/trufflehog/pull/2206)
- \[chore] Add test to check all versioned detectors are non-zero by
[@&#8203;mcastorina](https://togithub.com/mcastorina) in
[https://github.com/trufflesecurity/trufflehog/pull/2272](https://togithub.com/trufflesecurity/trufflehog/pull/2272)
- Update stripe detector regex by
[@&#8203;NikhilPanwar](https://togithub.com/NikhilPanwar) in
[https://github.com/trufflesecurity/trufflehog/pull/2261](https://togithub.com/trufflesecurity/trufflehog/pull/2261)
- Update to Sourcegraph Access token format by
[@&#8203;shivasurya](https://togithub.com/shivasurya) in
[https://github.com/trufflesecurity/trufflehog/pull/2254](https://togithub.com/trufflesecurity/trufflehog/pull/2254)
- Bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/trufflesecurity/trufflehog/pull/2278](https://togithub.com/trufflesecurity/trufflehog/pull/2278)
- Bump github.com/dvsekhvalnov/jose2go from 1.5.0 to 1.6.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/trufflesecurity/trufflehog/pull/2279](https://togithub.com/trufflesecurity/trufflehog/pull/2279)
- Wrap temp deletion err by
[@&#8203;rosecodym](https://togithub.com/rosecodym) in
[https://github.com/trufflesecurity/trufflehog/pull/2277](https://togithub.com/trufflesecurity/trufflehog/pull/2277)
- 1833 Fix syslog udp by [@&#8203;df3rry](https://togithub.com/df3rry)
in
[https://github.com/trufflesecurity/trufflehog/pull/1835](https://togithub.com/trufflesecurity/trufflehog/pull/1835)

#### New Contributors

- [@&#8203;0x2b3bfa0](https://togithub.com/0x2b3bfa0) made their first
contribution in
[https://github.com/trufflesecurity/trufflehog/pull/2259](https://togithub.com/trufflesecurity/trufflehog/pull/2259)
- [@&#8203;NikhilPanwar](https://togithub.com/NikhilPanwar) made their
first contribution in
[https://github.com/trufflesecurity/trufflehog/pull/2261](https://togithub.com/trufflesecurity/trufflehog/pull/2261)
- [@&#8203;df3rry](https://togithub.com/df3rry) made their first
contribution in
[https://github.com/trufflesecurity/trufflehog/pull/1835](https://togithub.com/trufflesecurity/trufflehog/pull/1835)

**Full Changelog**:
https://github.com/trufflesecurity/trufflehog/compare/v3.63.7...v3.63.8

###
[`v3.63.7`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.63.7)

[Compare
Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.63.6...v3.63.7)

#### What's Changed

- Add skip archive support by
[@&#8203;dustin-decker](https://togithub.com/dustin-decker) in
[https://github.com/trufflesecurity/trufflehog/pull/2257](https://togithub.com/trufflesecurity/trufflehog/pull/2257)
- Skip all binaries by
[@&#8203;bill-rich](https://togithub.com/bill-rich) in
[https://github.com/trufflesecurity/trufflehog/pull/2256](https://togithub.com/trufflesecurity/trufflehog/pull/2256)
- Add handlerOpts back by
[@&#8203;bill-rich](https://togithub.com/bill-rich) in
[https://github.com/trufflesecurity/trufflehog/pull/2258](https://togithub.com/trufflesecurity/trufflehog/pull/2258)
- Use directory iterator instead of walkdir by
[@&#8203;dustin-decker](https://togithub.com/dustin-decker) in
[https://github.com/trufflesecurity/trufflehog/pull/2260](https://togithub.com/trufflesecurity/trufflehog/pull/2260)

**Full Changelog**:
https://github.com/trufflesecurity/trufflehog/compare/v3.63.6...v3.63.7

###
[`v3.63.6`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.63.6)

[Compare
Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.63.5...v3.63.6)

#### What's Changed

- Adds basic if/else check if pid slice is empty by
[@&#8203;codevbus](https://togithub.com/codevbus) in
[https://github.com/trufflesecurity/trufflehog/pull/2244](https://togithub.com/trufflesecurity/trufflehog/pull/2244)
- \[fixup] - move cleanup to run by
[@&#8203;ahrav](https://togithub.com/ahrav) in
[https://github.com/trufflesecurity/trufflehog/pull/2245](https://togithub.com/trufflesecurity/trufflehog/pull/2245)
- shallow cloning + GitHub Action by
[@&#8203;joeleonjr](https://togithub.com/joeleonjr) in
[https://github.com/trufflesecurity/trufflehog/pull/2138](https://togithub.com/trufflesecurity/trufflehog/pull/2138)
- Update GitHub extradata by [@&#8203;rgmz](https://togithub.com/rgmz)
in
[https://github.com/trufflesecurity/trufflehog/pull/2219](https://togithub.com/trufflesecurity/trufflehog/pull/2219)
- Avoid extraneous authentication attempts when verifying Snowflake by
[@&#8203;rgmz](https://togithub.com/rgmz) in
[https://github.com/trufflesecurity/trufflehog/pull/2057](https://togithub.com/trufflesecurity/trufflehog/pull/2057)
- Add missing import by
[@&#8203;dustin-decker](https://togithub.com/dustin-decker) in
[https://github.com/trufflesecurity/trufflehog/pull/2246](https://togithub.com/trufflesecurity/trufflehog/pull/2246)
- \[bug] - Bug archive handler memory leak by
[@&#8203;ahrav](https://togithub.com/ahrav) in
[https://github.com/trufflesecurity/trufflehog/pull/2247](https://togithub.com/trufflesecurity/trufflehog/pull/2247)
- \[chore] - use snake_case for naming by
[@&#8203;ahrav](https://togithub.com/ahrav) in
[https://github.com/trufflesecurity/trufflehog/pull/2238](https://togithub.com/trufflesecurity/trufflehog/pull/2238)
- \[chore] - add additional binary extensions to skip by
[@&#8203;ahrav](https://togithub.com/ahrav) in
[https://github.com/trufflesecurity/trufflehog/pull/2235](https://togithub.com/trufflesecurity/trufflehog/pull/2235)
- \[chore] - lower logging level by
[@&#8203;ahrav](https://togithub.com/ahrav) in
[https://github.com/trufflesecurity/trufflehog/pull/2249](https://togithub.com/trufflesecurity/trufflehog/pull/2249)
- \[bug] - Fix Context Timeout-Induced Goroutine Leak in readInChunks by
[@&#8203;ahrav](https://togithub.com/ahrav) in
[https://github.com/trufflesecurity/trufflehog/pull/2251](https://togithub.com/trufflesecurity/trufflehog/pull/2251)
- Dedupe some source log keys by
[@&#8203;rosecodym](https://togithub.com/rosecodym) in
[https://github.com/trufflesecurity/trufflehog/pull/2250](https://togithub.com/trufflesecurity/trufflehog/pull/2250)
- \[fixup] - Refactor to Pass Reader for Binary Diffs and Archived Data;
Optimize /tmp Directory Cleanup by
[@&#8203;ahrav](https://togithub.com/ahrav) in
[https://github.com/trufflesecurity/trufflehog/pull/2253](https://togithub.com/trufflesecurity/trufflehog/pull/2253)
- Use walkdir for tmp cleanup by
[@&#8203;dustin-decker](https://togithub.com/dustin-decker) in
[https://github.com/trufflesecurity/trufflehog/pull/2255](https://togithub.com/trufflesecurity/trufflehog/pull/2255)

**Full Changelog**:
https://github.com/trufflesecurity/trufflehog/compare/v3.63.5...v3.63.6

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/matter-labs/vault-auth-tee).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xMDMuMSIsInVwZGF0ZWRJblZlciI6IjM3LjE3My4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->
2024-02-13 11:01:28 +01:00
renovate[bot]
ebd82588eb
chore(deps): update trufflesecurity/trufflehog action to v3.67.5 2024-02-13 09:58:14 +00:00
Harald Hoyer
1123c5a32a
feat: get current unix time for verification with NTS (#35)
otherwise it could have been faked from the host.
2024-02-13 10:57:47 +01:00
Harald Hoyer
f9409fa871
feat: get current unix time for verification with NTS
otherwise it could have been faked from the host.

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-02-13 10:26:45 +01:00
Harald Hoyer
049add9d2c
feat: restructure project and fix vault/sdk version (#33) 2024-02-13 09:32:24 +01:00
Harald Hoyer
5ff9123086
chore: flake update
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-02-12 17:12:27 +01:00
renovate[bot]
d55f035d34
feat: restructure project and fix vault/sdk version
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-02-12 17:12:24 +01:00
renovate[bot]
518b1bc8d4
chore(deps): update trufflesecurity/trufflehog action to v3.63.5 (#28)
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[trufflesecurity/trufflehog](https://togithub.com/trufflesecurity/trufflehog)
| action | patch | `v3.63.4` -> `v3.63.5` |

---

### Release Notes

<details>
<summary>trufflesecurity/trufflehog
(trufflesecurity/trufflehog)</summary>

###
[`v3.63.5`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.63.5)

[Compare
Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.63.4...v3.63.5)

#### What's Changed

- \[chore] Prevent panic when ChunkError has a nil Unit by
[@&#8203;mcastorina](https://togithub.com/mcastorina) in
[https://github.com/trufflesecurity/trufflehog/pull/2227](https://togithub.com/trufflesecurity/trufflehog/pull/2227)
- \[feat] - Make skipping binaries configurable by
[@&#8203;ahrav](https://togithub.com/ahrav) in
[https://github.com/trufflesecurity/trufflehog/pull/2226](https://togithub.com/trufflesecurity/trufflehog/pull/2226)
- \[chore] Add skip_binaries field to AzureRepos proto message by
[@&#8203;mcastorina](https://togithub.com/mcastorina) in
[https://github.com/trufflesecurity/trufflehog/pull/2232](https://togithub.com/trufflesecurity/trufflehog/pull/2232)
- Don't run detector tests on forks by
[@&#8203;rgmz](https://togithub.com/rgmz) in
[https://github.com/trufflesecurity/trufflehog/pull/2234](https://togithub.com/trufflesecurity/trufflehog/pull/2234)
- Update Freshworks verification to check for valid JSON response by
[@&#8203;rgmz](https://togithub.com/rgmz) in
[https://github.com/trufflesecurity/trufflehog/pull/2212](https://togithub.com/trufflesecurity/trufflehog/pull/2212)
- Enhance HuggingFace extra data by
[@&#8203;rgmz](https://togithub.com/rgmz) in
[https://github.com/trufflesecurity/trufflehog/pull/2222](https://togithub.com/trufflesecurity/trufflehog/pull/2222)
- Convert Shortcut detector to tri-state verification by
[@&#8203;rgmz](https://togithub.com/rgmz) in
[https://github.com/trufflesecurity/trufflehog/pull/2211](https://togithub.com/trufflesecurity/trufflehog/pull/2211)
- add secretID to chunk by [@&#8203;ahrav](https://togithub.com/ahrav)
in
[https://github.com/trufflesecurity/trufflehog/pull/2242](https://togithub.com/trufflesecurity/trufflehog/pull/2242)
- fix(deps): update module golang.org/x/crypto to v0.17.0 \[security] by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/trufflesecurity/trufflehog/pull/2243](https://togithub.com/trufflesecurity/trufflehog/pull/2243)

**Full Changelog**:
https://github.com/trufflesecurity/trufflehog/compare/v3.63.4...v3.63.5

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/matter-labs/vault-auth-tee).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy45My4xIiwidXBkYXRlZEluVmVyIjoiMzcuOTMuMSIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-12-21 20:10:50 +01:00
renovate[bot]
6ac992c8a4
fix(deps): update module golang.org/x/crypto to v0.17.0 [security] (#27)
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| golang.org/x/crypto | `v0.16.0` -> `v0.17.0` |
[![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2fcrypto/v0.17.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/go/golang.org%2fx%2fcrypto/v0.17.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/go/golang.org%2fx%2fcrypto/v0.16.0/v0.17.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2fcrypto/v0.16.0/v0.17.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

### GitHub Vulnerability Alerts

####
[CVE-2023-48795](https://togithub.com/warp-tech/russh/security/advisories/GHSA-45x7-px36-x8w8)

### Summary

Terrapin is a prefix truncation attack targeting the SSH protocol. More
precisely, Terrapin breaks the integrity of SSH's secure channel. By
carefully adjusting the sequence numbers during the handshake, an
attacker can remove an arbitrary amount of messages sent by the client
or server at the beginning of the secure channel without the client or
server noticing it.

### Mitigations

To mitigate this protocol vulnerability, OpenSSH suggested a so-called
"strict kex" which alters the SSH handshake to ensure a
Man-in-the-Middle attacker cannot introduce unauthenticated messages as
well as convey sequence number manipulation across handshakes.

**Warning: To take effect, both the client and server must support this
countermeasure.**

As a stop-gap measure, peers may also (temporarily) disable the affected
algorithms and use unaffected alternatives like AES-GCM instead until
patches are available.

### Details

The SSH specifications of ChaCha20-Poly1305
(chacha20-poly1305@&#8203;openssh.com) and Encrypt-then-MAC
(*-etm@openssh.com MACs) are vulnerable against an arbitrary prefix
truncation attack (a.k.a. Terrapin attack). This allows for an extension
negotiation downgrade by stripping the SSH_MSG_EXT_INFO sent after the
first message after SSH_MSG_NEWKEYS, downgrading security, and disabling
attack countermeasures in some versions of OpenSSH. When targeting
Encrypt-then-MAC, this attack requires the use of a CBC cipher to be
practically exploitable due to the internal workings of the cipher mode.
Additionally, this novel attack technique can be used to exploit
previously unexploitable implementation flaws in a Man-in-the-Middle
scenario.

The attack works by an attacker injecting an arbitrary number of
SSH_MSG_IGNORE messages during the initial key exchange and consequently
removing the same number of messages just after the initial key exchange
has concluded. This is possible due to missing authentication of the
excess SSH_MSG_IGNORE messages and the fact that the implicit sequence
numbers used within the SSH protocol are only checked after the initial
key exchange.

In the case of ChaCha20-Poly1305, the attack is guaranteed to work on
every connection as this cipher does not maintain an internal state
other than the message's sequence number. In the case of
Encrypt-Then-MAC, practical exploitation requires the use of a CBC
cipher; while theoretical integrity is broken for all ciphers when using
this mode, message processing will fail at the application layer for CTR
and stream ciphers.

For more details see
[https://terrapin-attack.com](https://terrapin-attack.com).

### Impact

This attack targets the specification of ChaCha20-Poly1305
(chacha20-poly1305@&#8203;openssh.com) and Encrypt-then-MAC
(*-etm@openssh.com), which are widely adopted by well-known SSH
implementations and can be considered de-facto standard. These
algorithms can be practically exploited; however, in the case of
Encrypt-Then-MAC, we additionally require the use of a CBC cipher. As a
consequence, this attack works against all well-behaving SSH
implementations supporting either of those algorithms and can be used to
downgrade (but not fully strip) connection security in case SSH
extension negotiation (RFC8308) is supported. The attack may also enable
attackers to exploit certain implementation flaws in a man-in-the-middle
(MitM) scenario.

---

### Configuration

📅 **Schedule**: Branch creation - "" (UTC), Automerge - At any time (no
schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/matter-labs/vault-auth-tee).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy45My4xIiwidXBkYXRlZEluVmVyIjoiMzcuMTAzLjEiLCJ0YXJnZXRCcmFuY2giOiJtYWluIn0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-12-21 19:59:18 +01:00
renovate[bot]
744fe75acd
chore(deps): update actions/setup-go action to v5 (#23)
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/setup-go](https://togithub.com/actions/setup-go) | action |
major | `v4` -> `v5` |

---

### Release Notes

<details>
<summary>actions/setup-go (actions/setup-go)</summary>

### [`v5`](https://togithub.com/actions/setup-go/compare/v4...v5)

[Compare Source](https://togithub.com/actions/setup-go/compare/v4...v5)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/matter-labs/vault-auth-tee).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy44Ny4yIiwidXBkYXRlZEluVmVyIjoiMzcuODcuMiIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-12-21 19:54:09 +01:00
renovate[bot]
6e86de1fcb
fix(deps): update module github.com/hashicorp/go-hclog to v1.6.2 (#21)
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/hashicorp/go-hclog](https://togithub.com/hashicorp/go-hclog)
| require | minor | `v1.5.0` -> `v1.6.2` |

---

### Release Notes

<details>
<summary>hashicorp/go-hclog (github.com/hashicorp/go-hclog)</summary>

###
[`v1.6.2`](https://togithub.com/hashicorp/go-hclog/releases/tag/v1.6.2):
Fix level syncing

[Compare
Source](https://togithub.com/hashicorp/go-hclog/compare/v1.6.1...v1.6.2)

#### What's Changed

- Conside if the level is to be used separately from if the levels
should be calculated by [@&#8203;evanphx](https://togithub.com/evanphx)
in
[https://github.com/hashicorp/go-hclog/pull/137](https://togithub.com/hashicorp/go-hclog/pull/137)

**Full Changelog**:
https://github.com/hashicorp/go-hclog/compare/v1.6.1...v1.6.2

###
[`v1.6.1`](https://togithub.com/hashicorp/go-hclog/releases/tag/v1.6.1):
Fix forcing color

[Compare
Source](https://togithub.com/hashicorp/go-hclog/compare/v1.6.0...v1.6.1)

#### What's Changed

- Fix colors not being forced on correctly. by
[@&#8203;evanphx](https://togithub.com/evanphx) in
[https://github.com/hashicorp/go-hclog/pull/136](https://togithub.com/hashicorp/go-hclog/pull/136)

**Full Changelog**:
https://github.com/hashicorp/go-hclog/compare/v1.6.0...v1.6.1

###
[`v1.6.0`](https://togithub.com/hashicorp/go-hclog/releases/tag/v1.6.0):
New level inheritance mode

[Compare
Source](https://togithub.com/hashicorp/go-hclog/compare/v1.5.0...v1.6.0)

This release adds the ability to have sub-loggers arrange themselves
into a tree and sync the level changes downward in the tree.

#### What's Changed

- SEC-090: Automated trusted workflow pinning (2023-04-03) by
[@&#8203;hashicorp-tsccr](https://togithub.com/hashicorp-tsccr) in
[https://github.com/hashicorp/go-hclog/pull/128](https://togithub.com/hashicorp/go-hclog/pull/128)
- Docs: InferLevelsWithTimestamp relies on InferLevels being true by
[@&#8203;peteski22](https://togithub.com/peteski22) in
[https://github.com/hashicorp/go-hclog/pull/135](https://togithub.com/hashicorp/go-hclog/pull/135)
- Implement the ability to more logically share level hierarchies by
[@&#8203;evanphx](https://togithub.com/evanphx) in
[https://github.com/hashicorp/go-hclog/pull/134](https://togithub.com/hashicorp/go-hclog/pull/134)

#### New Contributors

- [@&#8203;hashicorp-tsccr](https://togithub.com/hashicorp-tsccr) made
their first contribution in
[https://github.com/hashicorp/go-hclog/pull/128](https://togithub.com/hashicorp/go-hclog/pull/128)
- [@&#8203;peteski22](https://togithub.com/peteski22) made their first
contribution in
[https://github.com/hashicorp/go-hclog/pull/135](https://togithub.com/hashicorp/go-hclog/pull/135)

**Full Changelog**:
https://github.com/hashicorp/go-hclog/compare/v1.5.0...v1.6.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/matter-labs/vault-auth-tee).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy44MS4zIiwidXBkYXRlZEluVmVyIjoiMzcuODcuMiIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-12-21 16:33:18 +01:00
renovate[bot]
72e1787855
chore(deps): update trufflesecurity/trufflehog action to v3.63.4 (#25)
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[trufflesecurity/trufflehog](https://togithub.com/trufflesecurity/trufflehog)
| action | patch | `v3.63.3` -> `v3.63.4` |

---

### Release Notes

<details>
<summary>trufflesecurity/trufflehog
(trufflesecurity/trufflehog)</summary>

###
[`v3.63.4`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.63.4)

[Compare
Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.63.3...v3.63.4)

#### What's Changed

- Bump github.com/docker/docker from 24.0.0+incompatible to
24.0.7+incompatible by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/trufflesecurity/trufflehog/pull/2213](https://togithub.com/trufflesecurity/trufflehog/pull/2213)
- Fix emoji in README by [@&#8203;rgmz](https://togithub.com/rgmz) in
[https://github.com/trufflesecurity/trufflehog/pull/2217](https://togithub.com/trufflesecurity/trufflehog/pull/2217)
- Upgrade sevenzip to v1.4.5 by
[@&#8203;rgmz](https://togithub.com/rgmz) in
[https://github.com/trufflesecurity/trufflehog/pull/2215](https://togithub.com/trufflesecurity/trufflehog/pull/2215)
- Encode '%' when generating Git URLs by
[@&#8203;rgmz](https://togithub.com/rgmz) in
[https://github.com/trufflesecurity/trufflehog/pull/2214](https://togithub.com/trufflesecurity/trufflehog/pull/2214)
- Fix GitParse trimming whitespace from filename by
[@&#8203;rgmz](https://togithub.com/rgmz) in
[https://github.com/trufflesecurity/trufflehog/pull/2201](https://togithub.com/trufflesecurity/trufflehog/pull/2201)
- \[fixup] - Avoid reading decompressed data into memory by
[@&#8203;ahrav](https://togithub.com/ahrav) in
[https://github.com/trufflesecurity/trufflehog/pull/2196](https://togithub.com/trufflesecurity/trufflehog/pull/2196)
- Update GitLab v1 verification to check for valid JSON response by
[@&#8203;rgmz](https://togithub.com/rgmz) in
[https://github.com/trufflesecurity/trufflehog/pull/2218](https://togithub.com/trufflesecurity/trufflehog/pull/2218)
- Check for SourceUnit support dynamically in the SourceManager by
[@&#8203;mcastorina](https://togithub.com/mcastorina) in
[https://github.com/trufflesecurity/trufflehog/pull/2205](https://togithub.com/trufflesecurity/trufflehog/pull/2205)
- Fix GitHub source showing 0 members by
[@&#8203;rgmz](https://togithub.com/rgmz) in
[https://github.com/trufflesecurity/trufflehog/pull/2202](https://togithub.com/trufflesecurity/trufflehog/pull/2202)
- Don't run 'test' workflow in forks by
[@&#8203;rgmz](https://togithub.com/rgmz) in
[https://github.com/trufflesecurity/trufflehog/pull/2221](https://togithub.com/trufflesecurity/trufflehog/pull/2221)

**Full Changelog**:
https://github.com/trufflesecurity/trufflehog/compare/v3.63.3...v3.63.4

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/matter-labs/vault-auth-tee).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy45My4xIiwidXBkYXRlZEluVmVyIjoiMzcuOTMuMSIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-12-15 19:18:34 +01:00
renovate[bot]
89641f1b9e
chore(deps): update trufflesecurity/trufflehog action to v3.63.3 (#24)
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[trufflesecurity/trufflehog](https://togithub.com/trufflesecurity/trufflehog)
| action | patch | `v3.63.2` -> `v3.63.3` |

---

### Release Notes

<details>
<summary>trufflesecurity/trufflehog
(trufflesecurity/trufflehog)</summary>

###
[`v3.63.3`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.63.3)

[Compare
Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.63.2...v3.63.3)

#### What's Changed

- Use forked sevenzip by
[@&#8203;bill-rich](https://togithub.com/bill-rich) in
[https://github.com/trufflesecurity/trufflehog/pull/2180](https://togithub.com/trufflesecurity/trufflehog/pull/2180)
- fixing how to rotate URL by
[@&#8203;dylanTruffle](https://togithub.com/dylanTruffle) in
[https://github.com/trufflesecurity/trufflehog/pull/2183](https://togithub.com/trufflesecurity/trufflehog/pull/2183)
- \[fixup] - Skip trying to determine MIME type for directories by
[@&#8203;ahrav](https://togithub.com/ahrav) in
[https://github.com/trufflesecurity/trufflehog/pull/2178](https://togithub.com/trufflesecurity/trufflehog/pull/2178)
- \[feat] - Remove go-git dependency by
[@&#8203;ahrav](https://togithub.com/ahrav) in
[https://github.com/trufflesecurity/trufflehog/pull/2174](https://togithub.com/trufflesecurity/trufflehog/pull/2174)
- remove unnecessary Git cmd check by
[@&#8203;ahrav](https://togithub.com/ahrav) in
[https://github.com/trufflesecurity/trufflehog/pull/2175](https://togithub.com/trufflesecurity/trufflehog/pull/2175)
- \[chore] - use https for verification endpoints by
[@&#8203;ahrav](https://togithub.com/ahrav) in
[https://github.com/trufflesecurity/trufflehog/pull/2185](https://togithub.com/trufflesecurity/trufflehog/pull/2185)
- allow targets for the source manager by
[@&#8203;ahrav](https://togithub.com/ahrav) in
[https://github.com/trufflesecurity/trufflehog/pull/2182](https://togithub.com/trufflesecurity/trufflehog/pull/2182)
- Deprecate some detectors by
[@&#8203;dustin-decker](https://togithub.com/dustin-decker) in
[https://github.com/trufflesecurity/trufflehog/pull/2186](https://togithub.com/trufflesecurity/trufflehog/pull/2186)
- \[chore] - update regex by [@&#8203;ahrav](https://togithub.com/ahrav)
in
[https://github.com/trufflesecurity/trufflehog/pull/2184](https://togithub.com/trufflesecurity/trufflehog/pull/2184)
- \[chore] - Compile regex once by
[@&#8203;ahrav](https://togithub.com/ahrav) in
[https://github.com/trufflesecurity/trufflehog/pull/2176](https://togithub.com/trufflesecurity/trufflehog/pull/2176)
- Remove Java archives from ignored extensions by
[@&#8203;rosecodym](https://togithub.com/rosecodym) in
[https://github.com/trufflesecurity/trufflehog/pull/2188](https://togithub.com/trufflesecurity/trufflehog/pull/2188)
- \[chore] - Refactor common code into a separate function by
[@&#8203;ahrav](https://togithub.com/ahrav) in
[https://github.com/trufflesecurity/trufflehog/pull/2179](https://togithub.com/trufflesecurity/trufflehog/pull/2179)
- \[feat] - add metrics for gitlab by
[@&#8203;ahrav](https://togithub.com/ahrav) in
[https://github.com/trufflesecurity/trufflehog/pull/2190](https://togithub.com/trufflesecurity/trufflehog/pull/2190)
- \[bug] - move logic to main Chunks method by
[@&#8203;ahrav](https://togithub.com/ahrav) in
[https://github.com/trufflesecurity/trufflehog/pull/2194](https://togithub.com/trufflesecurity/trufflehog/pull/2194)
- \[fixup] - skip files in the archive handler by
[@&#8203;ahrav](https://togithub.com/ahrav) in
[https://github.com/trufflesecurity/trufflehog/pull/2195](https://togithub.com/trufflesecurity/trufflehog/pull/2195)
- Check private keys concurrently by
[@&#8203;rgmz](https://togithub.com/rgmz) in
[https://github.com/trufflesecurity/trufflehog/pull/2139](https://togithub.com/trufflesecurity/trufflehog/pull/2139)
- Propagate TruffleHog context to handlers by
[@&#8203;rgmz](https://togithub.com/rgmz) in
[https://github.com/trufflesecurity/trufflehog/pull/2191](https://togithub.com/trufflesecurity/trufflehog/pull/2191)
- \[bug] - close file after reading by
[@&#8203;ahrav](https://togithub.com/ahrav) in
[https://github.com/trufflesecurity/trufflehog/pull/2203](https://togithub.com/trufflesecurity/trufflehog/pull/2203)
- Use bad json in slackwebhooks by
[@&#8203;rosecodym](https://togithub.com/rosecodym) in
[https://github.com/trufflesecurity/trufflehog/pull/2193](https://togithub.com/trufflesecurity/trufflehog/pull/2193)
- Add disk buffer tempfile cleanup by
[@&#8203;codevbus](https://togithub.com/codevbus) in
[https://github.com/trufflesecurity/trufflehog/pull/2130](https://togithub.com/trufflesecurity/trufflehog/pull/2130)
- \[chore] Remove omitempty tags on JobProgressMetrics and UnitMetrics
by [@&#8203;mcastorina](https://togithub.com/mcastorina) in
[https://github.com/trufflesecurity/trufflehog/pull/2204](https://togithub.com/trufflesecurity/trufflehog/pull/2204)
- Fix azurestorage detector by [@&#8203;0x1](https://togithub.com/0x1)
in
[https://github.com/trufflesecurity/trufflehog/pull/2207](https://togithub.com/trufflesecurity/trufflehog/pull/2207)
- fix and refactor browserstack detector by
[@&#8203;0x1](https://togithub.com/0x1) in
[https://github.com/trufflesecurity/trufflehog/pull/2208](https://togithub.com/trufflesecurity/trufflehog/pull/2208)
- \[chore] Remove unnecessary string conversion in tefter detector by
[@&#8203;mcastorina](https://togithub.com/mcastorina) in
[https://github.com/trufflesecurity/trufflehog/pull/2209](https://togithub.com/trufflesecurity/trufflehog/pull/2209)
- Update metabase verification to check for a valid JSON response by
[@&#8203;mcastorina](https://togithub.com/mcastorina) in
[https://github.com/trufflesecurity/trufflehog/pull/2210](https://togithub.com/trufflesecurity/trufflehog/pull/2210)

**Full Changelog**:
https://github.com/trufflesecurity/trufflehog/compare/v3.63.2...v3.63.3

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/matter-labs/vault-auth-tee).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy44Ny4yIiwidXBkYXRlZEluVmVyIjoiMzcuODcuMiIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-12-14 14:20:29 +01:00
renovate[bot]
83b9ee1ca5
chore(deps): update trufflesecurity/trufflehog action to v3.63.2 (#22)
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[trufflesecurity/trufflehog](https://togithub.com/trufflesecurity/trufflehog)
| action | patch | `v3.63.1` -> `v3.63.2` |

---

### Release Notes

<details>
<summary>trufflesecurity/trufflehog
(trufflesecurity/trufflehog)</summary>

###
[`v3.63.2`](https://togithub.com/trufflesecurity/trufflehog/compare/v3.63.1...v3.63.2)

[Compare
Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.63.1...v3.63.2)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/matter-labs/vault-auth-tee).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy44MS4zIiwidXBkYXRlZEluVmVyIjoiMzcuODEuMyIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-12-06 15:05:22 +01:00
renovate[bot]
955ae2a72a
fix(deps): update module golang.org/x/crypto to v0.16.0 (#19)
[![Mend Renovate logo
banner](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| golang.org/x/crypto | require | minor | `v0.15.0` -> `v0.16.0` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/matter-labs/vault-auth-tee).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy41OS44IiwidXBkYXRlZEluVmVyIjoiMzcuNTkuOCIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-11-28 04:44:33 +01:00
renovate[bot]
133ba8bd0a
chore(deps): update trufflesecurity/trufflehog action to v3.63.1 (#18)
[![Mend Renovate logo
banner](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[trufflesecurity/trufflehog](https://togithub.com/trufflesecurity/trufflehog)
| action | patch | `v3.63.0` -> `v3.63.1` |

---

### Release Notes

<details>
<summary>trufflesecurity/trufflehog
(trufflesecurity/trufflehog)</summary>

###
[`v3.63.1`](https://togithub.com/trufflesecurity/trufflehog/compare/v3.63.0...v3.63.1)

[Compare
Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.63.0...v3.63.1)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/matter-labs/vault-auth-tee).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy41OS44IiwidXBkYXRlZEluVmVyIjoiMzcuNTkuOCIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-11-20 20:44:50 +01:00
renovate[bot]
c89d9d1e03
chore(deps): update trufflesecurity/trufflehog action to v3.63.0 (#17)
[![Mend Renovate logo
banner](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[trufflesecurity/trufflehog](https://togithub.com/trufflesecurity/trufflehog)
| action | minor | `v3.62.1` -> `v3.63.0` |

---

### Release Notes

<details>
<summary>trufflesecurity/trufflehog
(trufflesecurity/trufflehog)</summary>

###
[`v3.63.0`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.63.0)

[Compare
Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.62.1...v3.63.0)

#### Changelog

-
[`39a603d`](39a603d2)
\[chore] Add JSON tags to job metrics
([#&#8203;2114](https://togithub.com/trufflesecurity/trufflehog/issues/2114))
-
[`d334b30`](d334b307)
move all Git setup into Init method
([#&#8203;2105](https://togithub.com/trufflesecurity/trufflehog/issues/2105))
-
[`fd33198`](fd33198a)
add proto fields for Git
([#&#8203;2104](https://togithub.com/trufflesecurity/trufflehog/issues/2104))
-
[`b2042e4`](b2042e4e)
extract AWS account number from ID without verification
([#&#8203;2091](https://togithub.com/trufflesecurity/trufflehog/issues/2091))
-
[`737d6b7`](737d6b76)
Adding Sumo Logic how to rotate
([#&#8203;2103](https://togithub.com/trufflesecurity/trufflehog/issues/2103))
-
[`76a0468`](76a04685)
update protos so we can use the git source for CI
([#&#8203;2102](https://togithub.com/trufflesecurity/trufflehog/issues/2102))
-
[`d066a3f`](d066a3fa)
Detector-Competition-Feat: Added Replicate API token detector
([#&#8203;2021](https://togithub.com/trufflesecurity/trufflehog/issues/2021))
-
[`bcde785`](bcde7856)
Detector-Competition-Feat: Added Ngrok API token detector
([#&#8203;2024](https://togithub.com/trufflesecurity/trufflehog/issues/2024))
-
[`1b93c05`](1b93c054)
Competition-Detector-New:added v2 version for fullstory
([#&#8203;2067](https://togithub.com/trufflesecurity/trufflehog/issues/2067))
-
[`8e3f6e9`](8e3f6e98)
Add support for user:pass@host to postgres JDBC detector
([#&#8203;2089](https://togithub.com/trufflesecurity/trufflehog/issues/2089))
-
[`1094190`](1094190f)
Detector-Competition-Feat: Add Overloop detector
([#&#8203;2080](https://togithub.com/trufflesecurity/trufflehog/issues/2080))
-
[`da59b72`](da59b727)
Detector-Competition-Feat: Added Request.Finance API token detector
([#&#8203;2020](https://togithub.com/trufflesecurity/trufflehog/issues/2020))
-
[`703e158`](703e1586)
Detector-Competition-New : created grafana service account detector
([#&#8203;1960](https://togithub.com/trufflesecurity/trufflehog/issues/1960))
-
[`b2d541e`](b2d541e0)
Detector-Competition-Fix: fixed zulipchat detector
([#&#8203;1990](https://togithub.com/trufflesecurity/trufflehog/issues/1990))
-
[`6259b17`](6259b179)
Grafana
([#&#8203;2096](https://togithub.com/trufflesecurity/trufflehog/issues/2096))
-
[`aabfec4`](aabfec4c)
Competition-Detector-New: added eventbrite detector
([#&#8203;2072](https://togithub.com/trufflesecurity/trufflehog/issues/2072))
-
[`1371512`](1371512f)
logz.io detector
([#&#8203;2076](https://togithub.com/trufflesecurity/trufflehog/issues/2076))
-
[`06b5fc2`](06b5fc25)
Coda Detector
([#&#8203;2075](https://togithub.com/trufflesecurity/trufflehog/issues/2075))
-
[`50a3a82`](50a3a82c)
fix
([#&#8203;2094](https://togithub.com/trufflesecurity/trufflehog/issues/2094))
-
[`de8889b`](de8889b4)
Detector-Competition-Fix: Fix LiveAgent Detector & Verifier
([#&#8203;2001](https://togithub.com/trufflesecurity/trufflehog/issues/2001))
-
[`0b90265`](0b902658)
pulling short lived AWS keys into their own thing, fixes
[#&#8203;1224](https://togithub.com/trufflesecurity/trufflehog/issues/1224)
([#&#8203;2088](https://togithub.com/trufflesecurity/trufflehog/issues/2088))
-
[`7a15633`](7a156330)
Support multiple detectors per match
([#&#8203;2065](https://togithub.com/trufflesecurity/trufflehog/issues/2065))
-
[`600903f`](600903f3)
\[chore] Speedup IsKnownFalsePositive using sets
([#&#8203;2090](https://togithub.com/trufflesecurity/trufflehog/issues/2090))
-
[`3b9ecaa`](3b9ecaa7)
Detector-Competition-Fix: Fix ScraperSite (deprecated)
([#&#8203;2074](https://togithub.com/trufflesecurity/trufflehog/issues/2074))
-
[`41e9cc5`](41e9cc59)
Detector-Competition-Fix: Fix PassBase (acquired, deprecated)
([#&#8203;2079](https://togithub.com/trufflesecurity/trufflehog/issues/2079))
-
[`b95ed3b`](b95ed3b4)
Detector-Competition-New - Created Grafana Cloud API Key detector
([#&#8203;1959](https://togithub.com/trufflesecurity/trufflehog/issues/1959))
-
[`9e52e3e`](9e52e3e8)
Detector-Competition-Fix: Fix/Deprecate Prospect.io
([#&#8203;2081](https://togithub.com/trufflesecurity/trufflehog/issues/2081))
-
[`a1d74cd`](a1d74cd8)
added resource type mapping to extraData in AWS
([#&#8203;2087](https://togithub.com/trufflesecurity/trufflehog/issues/2087))
-
[`b5cc6c1`](b5cc6c19)
Detector-Competition-Fix: Fix FakeJSON (deprecated)
([#&#8203;2073](https://togithub.com/trufflesecurity/trufflehog/issues/2073))
-
[`ab89689`](ab896890)
fixed helpscout detector regex and verifier
([#&#8203;2056](https://togithub.com/trufflesecurity/trufflehog/issues/2056))
-
[`965a274`](965a274d)
Detector-Competition-Fix: fixed regex for databricks domain and fixed
tests
([#&#8203;1965](https://togithub.com/trufflesecurity/trufflehog/issues/1965))
-
[`b6469f2`](b6469f23)
modified regex
([#&#8203;2033](https://togithub.com/trufflesecurity/trufflehog/issues/2033))
-
[`4106ce7`](4106ce7b)
Detector-Competition-Feat: Adding Azure Container Registry Password
Detector
([#&#8203;1958](https://togithub.com/trufflesecurity/trufflehog/issues/1958))
-
[`07f6c84`](07f6c84a)
Detector-Competition-Fix: Fix SentimentInvestor (deprecated)
([#&#8203;2078](https://togithub.com/trufflesecurity/trufflehog/issues/2078))
-
[`9d6bc8c`](9d6bc8c5)
Refactor git source to support scanning units
([#&#8203;2083](https://togithub.com/trufflesecurity/trufflehog/issues/2083))
-
[`52600a8`](52600a89)
\[chore] Replace chunks channel with ChunkReporter in git based sources
([#&#8203;2082](https://togithub.com/trufflesecurity/trufflehog/issues/2082))
-
[`d55cb56`](d55cb56d)
update comment
([#&#8203;2084](https://togithub.com/trufflesecurity/trufflehog/issues/2084))
-
[`7197e4b`](7197e4b3)
use rawv2 for pubnubpublish
([#&#8203;2062](https://togithub.com/trufflesecurity/trufflehog/issues/2062))
-
[`95e0090`](95e0090b)
\[chore] - correctly handle input shorter than 512 bytes
([#&#8203;2077](https://togithub.com/trufflesecurity/trufflehog/issues/2077))
-
[`89b6315`](89b6315e)
\[chore] - add binutils dep to dockerfile
([#&#8203;2061](https://togithub.com/trufflesecurity/trufflehog/issues/2061))
-
[`74a56de`](74a56de8)
update braintreepayments detector to tri-state verification
([#&#8203;1834](https://togithub.com/trufflesecurity/trufflehog/issues/1834))
-
[`8bac2b1`](8bac2b15)
Detector-Competition-Feat: Adding Azure Batch keys
([#&#8203;1956](https://togithub.com/trufflesecurity/trufflehog/issues/1956))
-
[`499cb64`](499cb645)
Detector-Competition-Fix: Fix redis to now support SSL, and look for
azure redis connection strings
([#&#8203;1957](https://togithub.com/trufflesecurity/trufflehog/issues/1957))
-
[`a4fd17c`](a4fd17c9)
Detector-Competition-Fix: Fix AppFollow Detection & Verification
([#&#8203;1933](https://togithub.com/trufflesecurity/trufflehog/issues/1933))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/matter-labs/vault-auth-tee).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy41OS44IiwidXBkYXRlZEluVmVyIjoiMzcuNTkuOCIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-11-17 19:51:13 +01:00
renovate[bot]
791f250fc0
fix(deps): update module golang.org/x/crypto to v0.15.0 (#13)
[![Mend Renovate logo
banner](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| golang.org/x/crypto | require | minor | `v0.14.0` -> `v0.15.0` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/matter-labs/vault-auth-tee).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40Ni4wIiwidXBkYXRlZEluVmVyIjoiMzcuNDYuMCIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-11-16 16:28:05 +01:00
Harald Hoyer
c4efb10c59
ci: remove nix workflow (#16)
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2023-11-16 14:58:49 +01:00
Harald Hoyer
f29a1f4831
ci: add go license checker (#15)
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2023-11-10 16:47:56 +01:00
renovate[bot]
26dfa5668f
chore(deps): update trufflesecurity/trufflehog action to v3.62.1 (#12)
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[trufflesecurity/trufflehog](https://togithub.com/trufflesecurity/trufflehog)
| action | minor | `v3.60.4` -> `v3.62.1` |

---

### Release Notes

<details>
<summary>trufflesecurity/trufflehog
(trufflesecurity/trufflehog)</summary>

###
[`v3.62.1`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.62.1)

[Compare
Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.62.0...v3.62.1)

#### What's Changed

- update kingpin import by
[@&#8203;dustin-decker](https://togithub.com/dustin-decker) in
[https://github.com/trufflesecurity/trufflehog/pull/2053](https://togithub.com/trufflesecurity/trufflehog/pull/2053)
- Re-add detector version by
[@&#8203;rosecodym](https://togithub.com/rosecodym) in
[https://github.com/trufflesecurity/trufflehog/pull/2060](https://togithub.com/trufflesecurity/trufflehog/pull/2060)
- Detector-Competition-Fix: Fix currencycloud.com API key by
[@&#8203;lc](https://togithub.com/lc) in
[https://github.com/trufflesecurity/trufflehog/pull/1917](https://togithub.com/trufflesecurity/trufflehog/pull/1917)
- Detector-Competition-Fix: Fix Bitcoin Average detector by
[@&#8203;lc](https://togithub.com/lc) in
[https://github.com/trufflesecurity/trufflehog/pull/1929](https://togithub.com/trufflesecurity/trufflehog/pull/1929)
- Detector-Competition-Fix: Update formio regex to match Jwt token by
[@&#8203;fumblehool](https://togithub.com/fumblehool) in
[https://github.com/trufflesecurity/trufflehog/pull/1935](https://togithub.com/trufflesecurity/trufflehog/pull/1935)
- Detector-Competition-Fix: Fix SalesBlink Detection & Verification by
[@&#8203;lc](https://togithub.com/lc) in
[https://github.com/trufflesecurity/trufflehog/pull/1950](https://togithub.com/trufflesecurity/trufflehog/pull/1950)
- Support multiple custom detectors by
[@&#8203;rosecodym](https://togithub.com/rosecodym) in
[https://github.com/trufflesecurity/trufflehog/pull/2064](https://togithub.com/trufflesecurity/trufflehog/pull/2064)
- \[chore] Fix SourceManager flaky test by
[@&#8203;mcastorina](https://togithub.com/mcastorina) in
[https://github.com/trufflesecurity/trufflehog/pull/2059](https://togithub.com/trufflesecurity/trufflehog/pull/2059)
- Centralize logic for checking archive extraction tools by
[@&#8203;ahrav](https://togithub.com/ahrav) in
[https://github.com/trufflesecurity/trufflehog/pull/2063](https://togithub.com/trufflesecurity/trufflehog/pull/2063)

**Full Changelog**:
https://github.com/trufflesecurity/trufflehog/compare/v3.62.0...v3.62.1

###
[`v3.62.0`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.62.0)

[Compare
Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.61.0...v3.62.0)

#### What's Changed

- Update module github.com/aws/aws-sdk-go to v1.46.6 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/trufflesecurity/trufflehog/pull/2013](https://togithub.com/trufflesecurity/trufflehog/pull/2013)
- Update module github.com/bradleyfalzon/ghinstallation/v2 to v2.8.0 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/trufflesecurity/trufflehog/pull/2014](https://togithub.com/trufflesecurity/trufflehog/pull/2014)
- Update module github.com/charmbracelet/lipgloss to v0.9.1 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/trufflesecurity/trufflehog/pull/2015](https://togithub.com/trufflesecurity/trufflehog/pull/2015)
- Update module github.com/go-logr/logr to v1.3.0 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/trufflesecurity/trufflehog/pull/2025](https://togithub.com/trufflesecurity/trufflehog/pull/2025)
- Update module github.com/getsentry/sentry-go to v0.25.0 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/trufflesecurity/trufflehog/pull/2022](https://togithub.com/trufflesecurity/trufflehog/pull/2022)
- Update module github.com/google/go-containerregistry to v0.16.1 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/trufflesecurity/trufflehog/pull/2026](https://togithub.com/trufflesecurity/trufflehog/pull/2026)
- Update module github.com/google/uuid to v1.4.0 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/trufflesecurity/trufflehog/pull/2027](https://togithub.com/trufflesecurity/trufflehog/pull/2027)
- Update module github.com/hashicorp/golang-lru to v0.6.0 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/trufflesecurity/trufflehog/pull/2028](https://togithub.com/trufflesecurity/trufflehog/pull/2028)
- Update module github.com/rabbitmq/amqp091-go to v1.9.0 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/trufflesecurity/trufflehog/pull/2030](https://togithub.com/trufflesecurity/trufflehog/pull/2030)
- Detector-Competition-Feat: Added LemonSqueezy API token detector by
[@&#8203;fumblehool](https://togithub.com/fumblehool) in
[https://github.com/trufflesecurity/trufflehog/pull/2017](https://togithub.com/trufflesecurity/trufflehog/pull/2017)
- Update module github.com/prometheus/client_golang to v1.17.0 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/trufflesecurity/trufflehog/pull/2029](https://togithub.com/trufflesecurity/trufflehog/pull/2029)
- Detector-Competition-Feat: Added Budibase API token detector by
[@&#8203;fumblehool](https://togithub.com/fumblehool) in
[https://github.com/trufflesecurity/trufflehog/pull/2016](https://togithub.com/trufflesecurity/trufflehog/pull/2016)
- Update github.com/bodgit/sevenzip to v1.4.3 by
[@&#8203;rgmz](https://togithub.com/rgmz) in
[https://github.com/trufflesecurity/trufflehog/pull/2039](https://togithub.com/trufflesecurity/trufflehog/pull/2039)
- Update module go.uber.org/mock to v0.3.0 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/trufflesecurity/trufflehog/pull/2038](https://togithub.com/trufflesecurity/trufflehog/pull/2038)
- Update module github.com/xanzy/go-gitlab to v0.93.2 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/trufflesecurity/trufflehog/pull/2031](https://togithub.com/trufflesecurity/trufflehog/pull/2031)
- Update module github.com/snowflakedb/gosnowflake to v1.6.25 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/trufflesecurity/trufflehog/pull/2042](https://togithub.com/trufflesecurity/trufflehog/pull/2042)
- Update module github.com/launchdarkly/go-server-sdk/v6 to v6.1.1 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/trufflesecurity/trufflehog/pull/2043](https://togithub.com/trufflesecurity/trufflehog/pull/2043)
- Update module go.uber.org/zap to v1.26.0 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/trufflesecurity/trufflehog/pull/2044](https://togithub.com/trufflesecurity/trufflehog/pull/2044)
- Update module google.golang.org/api to v0.148.0 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/trufflesecurity/trufflehog/pull/2045](https://togithub.com/trufflesecurity/trufflehog/pull/2045)
- Developed Deno Deploy Detector by
[@&#8203;rgmz](https://togithub.com/rgmz) in
[https://github.com/trufflesecurity/trufflehog/pull/2040](https://togithub.com/trufflesecurity/trufflehog/pull/2040)
- Detector-Competition-Feat: Added Stripo API token detector by
[@&#8203;fumblehool](https://togithub.com/fumblehool) in
[https://github.com/trufflesecurity/trufflehog/pull/2018](https://togithub.com/trufflesecurity/trufflehog/pull/2018)
- fix(deps): update module sigs.k8s.io/yaml to v1.4.0 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/trufflesecurity/trufflehog/pull/2047](https://togithub.com/trufflesecurity/trufflehog/pull/2047)
- Detector-Competition-Feat: Added Reply.io API token detector by
[@&#8203;fumblehool](https://togithub.com/fumblehool) in
[https://github.com/trufflesecurity/trufflehog/pull/2019](https://togithub.com/trufflesecurity/trufflehog/pull/2019)
- fix(deps): update module github.com/go-git/go-git/v5 to v5.10.0 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/trufflesecurity/trufflehog/pull/2023](https://togithub.com/trufflesecurity/trufflehog/pull/2023)
- adding 'token' keyword to regex for github_old by
[@&#8203;ankushgoel27](https://togithub.com/ankushgoel27) in
[https://github.com/trufflesecurity/trufflehog/pull/2037](https://togithub.com/trufflesecurity/trufflehog/pull/2037)
- Remove verify flag from Aho-Corasick core by
[@&#8203;rosecodym](https://togithub.com/rosecodym) in
[https://github.com/trufflesecurity/trufflehog/pull/2010](https://togithub.com/trufflesecurity/trufflehog/pull/2010)
- Add TravisCI source by
[@&#8203;dustin-decker](https://togithub.com/dustin-decker) in
[https://github.com/trufflesecurity/trufflehog/pull/1877](https://togithub.com/trufflesecurity/trufflehog/pull/1877)

**Full Changelog**:
https://github.com/trufflesecurity/trufflehog/compare/v3.61.0...v3.62.0

###
[`v3.61.0`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.61.0)

[Compare
Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.60.4...v3.61.0)

#### What's Changed

- Detector-Competition-Fix: Fix/Remove Happi Detection & Verification by
[@&#8203;lc](https://togithub.com/lc) in
[https://github.com/trufflesecurity/trufflehog/pull/2003](https://togithub.com/trufflesecurity/trufflehog/pull/2003)
- Detector-Competition-Fix: Fix/Remove Flowdock detector by
[@&#8203;lc](https://togithub.com/lc) in
[https://github.com/trufflesecurity/trufflehog/pull/2004](https://togithub.com/trufflesecurity/trufflehog/pull/2004)
- Add temp directory management by
[@&#8203;codevbus](https://togithub.com/codevbus) in
[https://github.com/trufflesecurity/trufflehog/pull/1878](https://togithub.com/trufflesecurity/trufflehog/pull/1878)
- Fix binary handling by
[@&#8203;bill-rich](https://togithub.com/bill-rich) in
[https://github.com/trufflesecurity/trufflehog/pull/1999](https://togithub.com/trufflesecurity/trufflehog/pull/1999)
- Detector-Competition-Fix: Fix SurveyBot Verification by
[@&#8203;lc](https://togithub.com/lc) in
[https://github.com/trufflesecurity/trufflehog/pull/1948](https://togithub.com/trufflesecurity/trufflehog/pull/1948)
- Detector-Competition-Feat: Added BetterStack API token detector by
[@&#8203;fumblehool](https://togithub.com/fumblehool) in
[https://github.com/trufflesecurity/trufflehog/pull/1987](https://togithub.com/trufflesecurity/trufflehog/pull/1987)
- Detector-Competition-Feat: Added ZeroTier API token detector by
[@&#8203;fumblehool](https://togithub.com/fumblehool) in
[https://github.com/trufflesecurity/trufflehog/pull/1988](https://togithub.com/trufflesecurity/trufflehog/pull/1988)
- Detector-Competition-Feat: Added AppOptics API token detector by
[@&#8203;fumblehool](https://togithub.com/fumblehool) in
[https://github.com/trufflesecurity/trufflehog/pull/1989](https://togithub.com/trufflesecurity/trufflehog/pull/1989)
- Detector-Competition-Feat: Add Metabase Session Secret Detector by
[@&#8203;fumblehool](https://togithub.com/fumblehool) in
[https://github.com/trufflesecurity/trufflehog/pull/1902](https://togithub.com/trufflesecurity/trufflehog/pull/1902)
- Add Coinbase Wallet-as-a-Service detector by
[@&#8203;rgmz](https://togithub.com/rgmz) in
[https://github.com/trufflesecurity/trufflehog/pull/1895](https://togithub.com/trufflesecurity/trufflehog/pull/1895)
- Chore(deps): Bump google.golang.org/grpc from 1.56.2 to 1.56.3 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/trufflesecurity/trufflehog/pull/2009](https://togithub.com/trufflesecurity/trufflehog/pull/2009)
- Update module github.com/TheZeroSlave/zapsentry to v1.19.0 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/trufflesecurity/trufflehog/pull/2012](https://togithub.com/trufflesecurity/trufflehog/pull/2012)
- Update module cloud.google.com/go/secretmanager to v1.11.3 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/trufflesecurity/trufflehog/pull/2011](https://togithub.com/trufflesecurity/trufflehog/pull/2011)

**Full Changelog**:
https://github.com/trufflesecurity/trufflehog/compare/v3.60.4...v3.61.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/matter-labs/vault-auth-tee).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zMS41IiwidXBkYXRlZEluVmVyIjoiMzcuMzEuNSIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-11-03 14:24:18 +01:00
c2411a45a7
feat: initial commit
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2023-10-26 14:15:52 +02:00