Bump trufflesecurity/trufflehog from 3.76.3 to 3.81.10

dependabot[bot] commented 3 months ago

Bumps trufflesecurity/trufflehog from 3.76.3 to 3.81.10.

Release notes

Sourced from trufflesecurity/trufflehog's releases.

v3.81.10

What's Changed

fix(deps): update module github.com/sendgrid/sendgrid-go to v3.15.0+incompatible by @renovate in trufflesecurity/trufflehog#3214

fix(deps): update module github.com/charmbracelet/bubbletea to v0.27.0 by @renovate in trufflesecurity/trufflehog#3229

chore(deps): update golang docker tag to v1.23 by @renovate in trufflesecurity/trufflehog#3228

fix(deps): update module github.com/prometheus/client_golang to v1.20.1 by @renovate in trufflesecurity/trufflehog#3236

fix(deps): update module google.golang.org/api to v0.192.0 by @renovate in trufflesecurity/trufflehog#3237

fix(deps): update module google.golang.org/api to v0.193.0 by @renovate in trufflesecurity/trufflehog#3238

fix(deps): update testcontainers-go monorepo to v0.33.0 by @renovate in trufflesecurity/trufflehog#3239

fix(deps): update module cloud.google.com/go/secretmanager to v1.14.0 by @renovate in trufflesecurity/trufflehog#3240

Customize results cleaning (using smuggled interface) by @rosecodym in trufflesecurity/trufflehog#3235

Skip filtration for targeted scans by @rosecodym in trufflesecurity/trufflehog#3243

Strip leading +/- from GitHub target diffs by @rosecodym in trufflesecurity/trufflehog#3244

Th 899 postman panic issue by @LaraCroftDev in trufflesecurity/trufflehog#3245

Update rotation guide link for teams by @hxnyk in trufflesecurity/trufflehog#3248

Download files when reverifying by @rosecodym in trufflesecurity/trufflehog#3252

[chore] - Update buffer by @ahrav in trufflesecurity/trufflehog#3255

New Contributors

@LaraCroftDev made their first contribution in trufflesecurity/trufflehog#3245

Full Changelog: https://github.com/trufflesecurity/trufflehog/compare/v3.81.9...v3.81.10

v3.81.9

What's Changed

Capture decoding time metric by @rosecodym in trufflesecurity/trufflehog#3209

fix(deps): update module cloud.google.com/go/secretmanager to v1.13.6 by @renovate in trufflesecurity/trufflehog#3208

remove two letter keyword by @0x1 in trufflesecurity/trufflehog#3210

Add metrics for command invocation by @mcastorina in trufflesecurity/trufflehog#3185

chore(deps): update sigstore/cosign-installer action to v3.6.0 by @renovate in trufflesecurity/trufflehog#3211

[analyze] Capture the hierarchy of GitHub permissions by @mcastorina in trufflesecurity/trufflehog#3127

[analyze] Fix GitHub token expiration parsing by @mcastorina in trufflesecurity/trufflehog#3205

[chore] Fix lint errors by @mcastorina in trufflesecurity/trufflehog#3218

[chore] Ignore analyzer implementation tests in test-community by @mcastorina in trufflesecurity/trufflehog#3219

Support for kebab case and dot notation in permission generation tool by @abmussani in trufflesecurity/trufflehog#3222

Improve domain / url handling in detectors by @dustin-decker in trufflesecurity/trufflehog#3221

Full Changelog: https://github.com/trufflesecurity/trufflehog/compare/v3.81.8...v3.81.9

v3.81.8

What's Changed

[analyze] Deduplicate finegrained GitHub permissions by @mcastorina in trufflesecurity/trufflehog#3196

fix(deps): update module golang.org/x/net to v0.28.0 by @renovate in trufflesecurity/trufflehog#3187

[analyze] Fix double-print in postgres analyzer by @mcastorina in trufflesecurity/trufflehog#3199

fix(deps): update module go.mongodb.org/mongo-driver to v1.16.1 by @renovate in trufflesecurity/trufflehog#3197

Log when a detector ignores the timeout by @rosecodym in trufflesecurity/trufflehog#3201

[bug] - Correctly Handle Large Files in BufferedReadSeeker by @ahrav in trufflesecurity/trufflehog#3203

fix(deps): update module github.com/google/go-containerregistry to v0.20.2 by @renovate in trufflesecurity/trufflehog#3184

... (truncated)

Commits

06bbd6f Update buffer (#3255)
dbc1464 Download files when reverifying (#3252)
247b56a update rotation guide link for teams (#3248)
69f5d9b Th 899 postman panic issue (#3245)
3b0b290 Strip leading +/- from github target diffs (#3244)
8f299ff Skip filtration for targeted scans #3243
f39a525 Customize results cleaning (using smuggled interface) (#3235)
a0400c1 fix(deps): update module cloud.google.com/go/secretmanager to v1.14.0 (#3240)
0e8b433 fix(deps): update testcontainers-go monorepo to v0.33.0 (#3239)
f56f321 fix(deps): update module google.golang.org/api to v0.193.0 (#3238)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)