vault-auth-tee/.github/workflows/secrets_scanner.yaml
renovate[bot] 72e1787855
chore(deps): update trufflesecurity/trufflehog action to v3.63.4 (#25)
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[trufflesecurity/trufflehog](https://togithub.com/trufflesecurity/trufflehog)
| action | patch | `v3.63.3` -> `v3.63.4` |

---

### Release Notes

<details>
<summary>trufflesecurity/trufflehog
(trufflesecurity/trufflehog)</summary>

###
[`v3.63.4`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.63.4)

[Compare
Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.63.3...v3.63.4)

#### What's Changed

- Bump github.com/docker/docker from 24.0.0+incompatible to
24.0.7+incompatible by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/trufflesecurity/trufflehog/pull/2213](https://togithub.com/trufflesecurity/trufflehog/pull/2213)
- Fix emoji in README by [@&#8203;rgmz](https://togithub.com/rgmz) in
[https://github.com/trufflesecurity/trufflehog/pull/2217](https://togithub.com/trufflesecurity/trufflehog/pull/2217)
- Upgrade sevenzip to v1.4.5 by
[@&#8203;rgmz](https://togithub.com/rgmz) in
[https://github.com/trufflesecurity/trufflehog/pull/2215](https://togithub.com/trufflesecurity/trufflehog/pull/2215)
- Encode '%' when generating Git URLs by
[@&#8203;rgmz](https://togithub.com/rgmz) in
[https://github.com/trufflesecurity/trufflehog/pull/2214](https://togithub.com/trufflesecurity/trufflehog/pull/2214)
- Fix GitParse trimming whitespace from filename by
[@&#8203;rgmz](https://togithub.com/rgmz) in
[https://github.com/trufflesecurity/trufflehog/pull/2201](https://togithub.com/trufflesecurity/trufflehog/pull/2201)
- \[fixup] - Avoid reading decompressed data into memory by
[@&#8203;ahrav](https://togithub.com/ahrav) in
[https://github.com/trufflesecurity/trufflehog/pull/2196](https://togithub.com/trufflesecurity/trufflehog/pull/2196)
- Update GitLab v1 verification to check for valid JSON response by
[@&#8203;rgmz](https://togithub.com/rgmz) in
[https://github.com/trufflesecurity/trufflehog/pull/2218](https://togithub.com/trufflesecurity/trufflehog/pull/2218)
- Check for SourceUnit support dynamically in the SourceManager by
[@&#8203;mcastorina](https://togithub.com/mcastorina) in
[https://github.com/trufflesecurity/trufflehog/pull/2205](https://togithub.com/trufflesecurity/trufflehog/pull/2205)
- Fix GitHub source showing 0 members by
[@&#8203;rgmz](https://togithub.com/rgmz) in
[https://github.com/trufflesecurity/trufflehog/pull/2202](https://togithub.com/trufflesecurity/trufflehog/pull/2202)
- Don't run 'test' workflow in forks by
[@&#8203;rgmz](https://togithub.com/rgmz) in
[https://github.com/trufflesecurity/trufflehog/pull/2221](https://togithub.com/trufflesecurity/trufflehog/pull/2221)

**Full Changelog**:
https://github.com/trufflesecurity/trufflehog/compare/v3.63.3...v3.63.4

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/matter-labs/vault-auth-tee).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy45My4xIiwidXBkYXRlZEluVmVyIjoiMzcuOTMuMSIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-12-15 19:18:34 +01:00

18 lines
531 B
YAML

name: Leaked Secrets Scan
on: [pull_request]
jobs:
TruffleHog:
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
with:
fetch-depth: 0
- name: TruffleHog OSS
uses: trufflesecurity/trufflehog@b0fab16ad4b5cc42c38ee4e2ee362aa3c47dea24 # v3.63.4
with:
path: ./
base: ${{ github.event.repository.default_branch }}
head: HEAD
extra_args: --debug --only-verified