Bump trufflesecurity/trufflehog from 3.63.7 to 3.67.6 #960

Closed dependabot[bot] closed 8 months ago

Bumps trufflesecurity/trufflehog from 3.63.7 to 3.67.6.

Release notes

Sourced from trufflesecurity/trufflehog's releases.

v3.67.6

What's Changed

Disable secret scans for community PRs by @zricethezav in trufflesecurity/trufflehog#2401

Refactor UnitHook to block the scan if finished metrics aren't handled by @mcastorina in trufflesecurity/trufflehog#2309

Update brew install instructions by @zricethezav in trufflesecurity/trufflehog#2404

Implement SourceUnitEnumChunker for GitLab by @mcastorina in trufflesecurity/trufflehog#2367

Add flag to write job reports to disk by @mcastorina in trufflesecurity/trufflehog#2298

[chore] Rename file to legacy_reporters.go by @mcastorina in trufflesecurity/trufflehog#2406

[chore] Ensure Postgres detector respects context deadline by @mcastorina in trufflesecurity/trufflehog#2408

fix(deps): update module github.com/charmbracelet/bubbletea to v0.25.0 by @renovate in trufflesecurity/trufflehog#2326

fix(deps): update module github.com/charmbracelet/bubbles to v0.18.0 by @renovate in trufflesecurity/trufflehog#2296

fix(deps): update module github.com/aymanbagabas/go-osc52 to v2 by @renovate in trufflesecurity/trufflehog#2048

fix(deps): update github.com/lrstanley/bubblezone digest to b7bafc4 by @renovate in trufflesecurity/trufflehog#2411

fix(deps): update golang.org/x/exp digest to 2c58cdc by @renovate in trufflesecurity/trufflehog#2412

fix(deps): update module cloud.google.com/go/secretmanager to v1.11.5 by @renovate in trufflesecurity/trufflehog#2414

fix(deps): update module github.com/aws/aws-sdk-go to v1.50.15 - autoclosed by @renovate in trufflesecurity/trufflehog#2415

fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.22 by @renovate in trufflesecurity/trufflehog#2417

fix(deps): update module github.com/aymanbagabas/go-osc52 to v1.2.2 by @renovate in trufflesecurity/trufflehog#2416

chore(deps): update golang docker tag to v1.22 by @renovate in trufflesecurity/trufflehog#2420

chore(deps): update sigstore/cosign-installer action to v3.4.0 by @renovate in trufflesecurity/trufflehog#2421

fix(deps): update module cloud.google.com/go/storage to v1.37.0 by @renovate in trufflesecurity/trufflehog#2423

fix(deps): update module github.com/getsentry/sentry-go to v0.27.0 by @renovate in trufflesecurity/trufflehog#2424

fix(deps): update module github.com/google/go-containerregistry to v0.19.0 by @renovate in trufflesecurity/trufflehog#2425

[fix] Add unit information to error returned by ChunkUnit by @mcastorina in trufflesecurity/trufflehog#2410

Ignore Kubernetes GCP test credentials by @rgmz in trufflesecurity/trufflehog#2413

fix(deps): update module github.com/google/uuid to v1.6.0 by @renovate in trufflesecurity/trufflehog#2427

fix(deps): update module github.com/hashicorp/golang-lru to v0.6.0 by @renovate in trufflesecurity/trufflehog#2428

fix(deps): update module github.com/thezeroslave/zapsentry to v1.20.2 by @renovate in trufflesecurity/trufflehog#2431

fix(deps): update module github.com/snowflakedb/gosnowflake to v1.7.2 by @renovate in trufflesecurity/trufflehog#2430

fix(deps): update module github.com/prometheus/client_golang to v1.18.0 by @renovate in trufflesecurity/trufflehog#2429

fix(deps): update module github.com/xanzy/go-gitlab to v0.97.0 by @renovate in trufflesecurity/trufflehog#2432

fix(deps): update module go.mongodb.org/mongo-driver to v1.13.1 by @renovate in trufflesecurity/trufflehog#2433

fix(deps): update module go.uber.org/mock to v0.4.0 by @renovate in trufflesecurity/trufflehog#2437

fix(deps): update module github.com/aws/aws-sdk-go to v1.50.16 by @renovate in trufflesecurity/trufflehog#2436

fix(deps): update module cloud.google.com/go/storage to v1.38.0 by @renovate in trufflesecurity/trufflehog#2438

fix(deps): update module golang.org/x/crypto to v0.19.0 by @renovate in trufflesecurity/trufflehog#2439

fix(deps): update module golang.org/x/net to v0.21.0 by @renovate in trufflesecurity/trufflehog#2440

chore(deps): update actions/setup-go action to v5 by @renovate in trufflesecurity/trufflehog#2443

fix(deps): update module golang.org/x/oauth2 to v0.17.0 by @renovate in trufflesecurity/trufflehog#2441

fix(deps): update module google.golang.org/api to v0.164.0 by @renovate in trufflesecurity/trufflehog#2442

chore(deps): update github/codeql-action action to v3 by @renovate in trufflesecurity/trufflehog#2444

chore(deps): update golangci/golangci-lint-action action to v4 by @renovate in trufflesecurity/trufflehog#2445

Update custom detector example by @zricethezav in trufflesecurity/trufflehog#2435

2396 since commit stopped working by @ahrav in trufflesecurity/trufflehog#2402

Full Changelog: https://github.com/trufflesecurity/trufflehog/compare/v3.67.5...v3.67.6

v3.67.5

What's Changed

... (truncated)

Commits

e8006f1 2396 since commit stopped working (#2402)
794f2bc Update custom detector example (#2435)
af7f811 chore(deps): update golangci/golangci-lint-action action to v4 (#2445)
939aca2 chore(deps): update github/codeql-action action to v3 (#2444)
0149ef7 fix(deps): update module google.golang.org/api to v0.164.0 (#2442)
bf9512a fix(deps): update module golang.org/x/oauth2 to v0.17.0 (#2441)
774c485 chore(deps): update actions/setup-go action to v5 (#2443)
929949a fix(deps): update module golang.org/x/net to v0.21.0 (#2440)
beb7a0e fix(deps): update module golang.org/x/crypto to v0.19.0 (#2439)
30a067f fix(deps): update module cloud.google.com/go/storage to v1.38.0 (#2438)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Quality Gate passed

Issues
0 New issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarCloud

Superseded by #966.

Project-MONAI / monai-deploy-workflow-manager

Bump trufflesecurity/trufflehog from 3.63.7 to 3.67.6 #960

v3.67.6

What's Changed

v3.67.5

What's Changed

Quality Gate passed