TruffleHog Versions Save

Find and verify secrets

v3.69.0

2 months ago

What's Changed

add version to extra data + moving existing versioned detectors into subdirectory format by @0x1 in https://github.com/trufflesecurity/trufflehog/pull/2471
fix(deps): update module github.com/launchdarkly/go-server-sdk/v6 to v7 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2499
fix(deps): update module github.com/golang-jwt/jwt/v4 to v5 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2535
fix(deps): update module github.com/charmbracelet/lipgloss to v0.10.0 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2542
fix(deps): update module github.com/aws/aws-sdk-go to v1.50.34 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2541
fix(deps): update module golang.org/x/crypto to v0.21.0 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2544
fix(deps): update module github.com/xanzy/go-gitlab to v0.99.0 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2543
fix(deps): update module golang.org/x/oauth2 to v0.18.0 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2546
fix(deps): update module google.golang.org/api to v0.169.0 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2547
Canary verification by @joeleonjr in https://github.com/trufflesecurity/trufflehog/pull/2531
fix(deps): update testcontainers-go monorepo to v0.29.1 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2549
fix(deps): update module google.golang.org/protobuf to v1.33.0 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2548

Full Changelog: https://github.com/trufflesecurity/trufflehog/compare/v3.68.5...v3.69.0

v3.68.5

2 months ago

What's Changed

Create basic escaped unicode decoder by @rgmz in https://github.com/trufflesecurity/trufflehog/pull/2456
fix(deps): update module github.com/aws/aws-sdk-go to v1.50.30 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2529
fix(deps): update module github.com/felixge/fgprof to v0.9.4 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2532
fix(deps): update module cloud.google.com/go/storage to v1.39.0 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2533
fix(deps): update module github.com/stretchr/testify to v1.9.0 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2534
Add naive S3 ignorelist by @rosecodym in https://github.com/trufflesecurity/trufflehog/pull/2536
Redact secret in git command output by @rosecodym in https://github.com/trufflesecurity/trufflehog/pull/2539
Fix timeout param, DB is not needed for ping command by @dustin-decker in https://github.com/trufflesecurity/trufflehog/pull/2540

Full Changelog: https://github.com/trufflesecurity/trufflehog/compare/v3.68.4...v3.68.5

v3.68.4

2 months ago

What's Changed

Improve Gitlab default URL handling by @trufflesteeeve in https://github.com/trufflesecurity/trufflehog/pull/2491
fix(deps): update module github.com/golang-jwt/jwt/v4 to v5 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2513
fix(deps): update module github.com/aws/aws-sdk-go to v1.50.28 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2520
fix(deps): update module github.com/googleapis/gax-go/v2 to v2.12.2 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2521
fix(deps): update module github.com/prometheus/client_golang to v1.19.0 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2522
fix(deps): update module golang.org/x/crypto to v0.20.0 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2523
Remove one filter word by @dustin-decker in https://github.com/trufflesecurity/trufflehog/pull/2525
Fix minor typo by @jamesgol in https://github.com/trufflesecurity/trufflehog/pull/2527
Ignore canary IDs in notifications by @dxa4481 in https://github.com/trufflesecurity/trufflehog/pull/2526
[feat] - Make the client configurable by @ahrav in https://github.com/trufflesecurity/trufflehog/pull/2528

New Contributors

@jamesgol made their first contribution in https://github.com/trufflesecurity/trufflehog/pull/2527

Full Changelog: https://github.com/trufflesecurity/trufflehog/compare/v3.68.3...v3.68.4

v3.68.3

2 months ago

What's Changed

fix(deps): update module github.com/google/go-github/v57 to v59 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2464
fix(deps): update module github.com/golang-jwt/jwt/v4 to v5 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2455
fix(deps): update golang.org/x/exp digest to 814bf88 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2508
fix(deps): update module github.com/aws/aws-sdk-go to v1.50.25 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2509
fix(deps): update module github.com/xanzy/go-gitlab to v0.98.0 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2511
fix(deps): update module google.golang.org/api to v0.167.0 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2512
Improve monogo and snowflake detectors by @dustin-decker in https://github.com/trufflesecurity/trufflehog/pull/2518
JDBC test and parsing improvements by @dustin-decker in https://github.com/trufflesecurity/trufflehog/pull/2516

Full Changelog: https://github.com/trufflesecurity/trufflehog/compare/v3.68.2...v3.68.3

v3.68.2

2 months ago

What's Changed

fix prefix check when returning early by @dustin-decker in https://github.com/trufflesecurity/trufflehog/pull/2503

Full Changelog: https://github.com/trufflesecurity/trufflehog/compare/v3.68.1...v3.68.2

v3.68.1

2 months ago

What's Changed

Tell git to ignore directory ownership (fixes #2495) by @marksteward in https://github.com/trufflesecurity/trufflehog/pull/2496
Gitlab scan targets by @ahrav in https://github.com/trufflesecurity/trufflehog/pull/2470
Clean up some detectors by @dustin-decker in https://github.com/trufflesecurity/trufflehog/pull/2501

New Contributors

@marksteward made their first contribution in https://github.com/trufflesecurity/trufflehog/pull/2496

Full Changelog: https://github.com/trufflesecurity/trufflehog/compare/v3.68.0...v3.68.1

v3.68.0

2 months ago

What's Changed

fix(deps): update module github.com/hashicorp/golang-lru to v2 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2486
fix(deps): update module github.com/aws/aws-sdk-go to v1.50.21 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2489
Add Display method to SourceUnit and Kind member to the CommonSourceUnit by @mcastorina in https://github.com/trufflesecurity/trufflehog/pull/2450
fix(deps): update module github.com/launchdarkly/go-server-sdk/v6 to v7 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2490
fix(deps): update module github.com/aws/aws-sdk-go to v1.50.22 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2492
fix(deps): update module github.com/couchbase/gocb/v2 to v2.7.2 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2493
fix(deps): update module github.com/snowflakedb/gosnowflake to v1.8.0 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2497
fix(deps): update module go.uber.org/zap to v1.27.0 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2498
Identify some canary tokens without detonation by @dustin-decker in https://github.com/trufflesecurity/trufflehog/pull/2500

Full Changelog: https://github.com/trufflesecurity/trufflehog/compare/v3.67.7...v3.68.0

v3.67.7

2 months ago

What's Changed

[chore] Add some doc comments to source manager by @mcastorina in https://github.com/trufflesecurity/trufflehog/pull/2434
fix(deps): update module github.com/golang-jwt/jwt/v4 to v5 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2448
fix(deps): update golang.org/x/exp digest to ec58324 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2452
fix(deps): update module github.com/aws/aws-sdk-go to v1.50.17 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2453
fix(deps): update module github.com/googleapis/gax-go/v2 to v2.12.1 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2454
fix(deps): update module github.com/aymanbagabas/go-osc52 to v2 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2447
fix(deps): update module github.com/aymanbagabas/go-osc52 to v1.2.2 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2457
fix(deps): update module go.mongodb.org/mongo-driver to v1.13.2 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2458
fix(deps): update module github.com/aymanbagabas/go-osc52 to v2 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2459
fix(deps): update module github.com/aymanbagabas/go-osc52 to v1.2.2 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2460
fix(deps): update module github.com/google/go-github/v57 to v59 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2449
fix(deps): update module github.com/aws/aws-sdk-go to v1.50.18 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2463
Remove some noisy / less useful detectors by @dustin-decker in https://github.com/trufflesecurity/trufflehog/pull/2467
add missing prefixregex to GuardianAPI by @zricethezav in https://github.com/trufflesecurity/trufflehog/pull/2468
update gitlab proto by @ahrav in https://github.com/trufflesecurity/trufflehog/pull/2469
[cleanup] - Extract buffer logic by @ahrav in https://github.com/trufflesecurity/trufflehog/pull/2409
add lazy quantifier to prefixregex by @zricethezav in https://github.com/trufflesecurity/trufflehog/pull/2466
[chore] Increase TestMaxDiffSize timeout by @mcastorina in https://github.com/trufflesecurity/trufflehog/pull/2472
[chore] - tighten keyword match by @ahrav in https://github.com/trufflesecurity/trufflehog/pull/2473
move clenaup outside the engine by @ahrav in https://github.com/trufflesecurity/trufflehog/pull/2475
fix(deps): update module github.com/hashicorp/golang-lru to v2 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2462
fix(deps): update module github.com/aws/aws-sdk-go to v1.50.20 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2477
fix(deps): update module github.com/hashicorp/golang-lru to v0.6.0 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2478
fix(deps): update module go.mongodb.org/mongo-driver to v1.14.0 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2479
fix(deps): update module google.golang.org/api to v0.165.0 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2480
fix(deps): update module github.com/hashicorp/golang-lru to v2 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2481
fix(deps): update module github.com/hashicorp/golang-lru to v0.6.0 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2482
fix(deps): update module github.com/hashicorp/golang-lru to v2 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2483
fix(deps): update module github.com/azuread/microsoft-authentication-library-for-go to v1.2.2 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2484
[chore] - upgrade lru cache version by @ahrav in https://github.com/trufflesecurity/trufflehog/pull/2487
[chore] - use read full by @ahrav in https://github.com/trufflesecurity/trufflehog/pull/2474
concurrency uint8 to int by @zricethezav in https://github.com/trufflesecurity/trufflehog/pull/2488

Full Changelog: https://github.com/trufflesecurity/trufflehog/compare/v3.67.6...v3.67.7

v3.67.6

3 months ago

What's Changed

Disable secret scans for community PRs by @zricethezav in https://github.com/trufflesecurity/trufflehog/pull/2401
Refactor UnitHook to block the scan if finished metrics aren't handled by @mcastorina in https://github.com/trufflesecurity/trufflehog/pull/2309
Update brew install instructions by @zricethezav in https://github.com/trufflesecurity/trufflehog/pull/2404
Implement SourceUnitEnumChunker for GitLab by @mcastorina in https://github.com/trufflesecurity/trufflehog/pull/2367
Add flag to write job reports to disk by @mcastorina in https://github.com/trufflesecurity/trufflehog/pull/2298
[chore] Rename file to legacy_reporters.go by @mcastorina in https://github.com/trufflesecurity/trufflehog/pull/2406
[chore] Ensure Postgres detector respects context deadline by @mcastorina in https://github.com/trufflesecurity/trufflehog/pull/2408
fix(deps): update module github.com/charmbracelet/bubbletea to v0.25.0 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2326
fix(deps): update module github.com/charmbracelet/bubbles to v0.18.0 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2296
fix(deps): update module github.com/aymanbagabas/go-osc52 to v2 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2048
fix(deps): update github.com/lrstanley/bubblezone digest to b7bafc4 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2411
fix(deps): update golang.org/x/exp digest to 2c58cdc by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2412
fix(deps): update module cloud.google.com/go/secretmanager to v1.11.5 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2414
fix(deps): update module github.com/aws/aws-sdk-go to v1.50.15 - autoclosed by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2415
fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.22 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2417
fix(deps): update module github.com/aymanbagabas/go-osc52 to v1.2.2 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2416
chore(deps): update golang docker tag to v1.22 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2420
chore(deps): update sigstore/cosign-installer action to v3.4.0 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2421
fix(deps): update module cloud.google.com/go/storage to v1.37.0 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2423
fix(deps): update module github.com/getsentry/sentry-go to v0.27.0 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2424
fix(deps): update module github.com/google/go-containerregistry to v0.19.0 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2425
[fix] Add unit information to error returned by ChunkUnit by @mcastorina in https://github.com/trufflesecurity/trufflehog/pull/2410
Ignore Kubernetes GCP test credentials by @rgmz in https://github.com/trufflesecurity/trufflehog/pull/2413
fix(deps): update module github.com/google/uuid to v1.6.0 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2427
fix(deps): update module github.com/hashicorp/golang-lru to v0.6.0 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2428
fix(deps): update module github.com/thezeroslave/zapsentry to v1.20.2 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2431
fix(deps): update module github.com/snowflakedb/gosnowflake to v1.7.2 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2430
fix(deps): update module github.com/prometheus/client_golang to v1.18.0 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2429
fix(deps): update module github.com/xanzy/go-gitlab to v0.97.0 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2432
fix(deps): update module go.mongodb.org/mongo-driver to v1.13.1 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2433
fix(deps): update module go.uber.org/mock to v0.4.0 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2437
fix(deps): update module github.com/aws/aws-sdk-go to v1.50.16 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2436
fix(deps): update module cloud.google.com/go/storage to v1.38.0 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2438
fix(deps): update module golang.org/x/crypto to v0.19.0 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2439
fix(deps): update module golang.org/x/net to v0.21.0 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2440
chore(deps): update actions/setup-go action to v5 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2443
fix(deps): update module golang.org/x/oauth2 to v0.17.0 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2441
fix(deps): update module google.golang.org/api to v0.164.0 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2442
chore(deps): update github/codeql-action action to v3 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2444
chore(deps): update golangci/golangci-lint-action action to v4 by @renovate in https://github.com/trufflesecurity/trufflehog/pull/2445
Update custom detector example by @zricethezav in https://github.com/trufflesecurity/trufflehog/pull/2435
2396 since commit stopped working by @ahrav in https://github.com/trufflesecurity/trufflehog/pull/2402

Full Changelog: https://github.com/trufflesecurity/trufflehog/compare/v3.67.5...v3.67.6

v3.67.5

3 months ago

What's Changed

Fix handling of GitHub ratelimit information by @rgmz in https://github.com/trufflesecurity/trufflehog/pull/2041
Set GHA workdir by @zricethezav in https://github.com/trufflesecurity/trufflehog/pull/2393
Allow CLI version pinning in GHA (#2397) by @skeweredlogic in https://github.com/trufflesecurity/trufflehog/pull/2398
[bug] - prevent concurrent map writes by @ahrav in https://github.com/trufflesecurity/trufflehog/pull/2399
Allow multiple domains for Forager by @dustin-decker in https://github.com/trufflesecurity/trufflehog/pull/2400
Update GitParse to handle quoted binary filenames by @rgmz in https://github.com/trufflesecurity/trufflehog/pull/2391
[feat] - buffered file writer metrics by @ahrav in https://github.com/trufflesecurity/trufflehog/pull/2395

New Contributors

@skeweredlogic made their first contribution in https://github.com/trufflesecurity/trufflehog/pull/2398

Full Changelog: https://github.com/trufflesecurity/trufflehog/compare/v3.67.4...v3.67.5