build(deps): Bump trufflesecurity/trufflehog from 3.78.1 to 3.78.2

[dependabot[bot]]

Bumps trufflesecurity/trufflehog from 3.78.1 to 3.78.2.

Release notes

Sourced from trufflesecurity/trufflehog's releases.

v3.78.2

What's Changed

• fix(deps): update golang.org/x/exp digest to fc45aab by @​renovate in trufflesecurity/trufflehog#2931
• adding twitter + Consumer key detector by @​abmussani in trufflesecurity/trufflehog#2963
• Fix test compilation errors by @​rgmz in trufflesecurity/trufflehog#2964
• Modularize scanning engine by @​ahrav in trufflesecurity/trufflehog#2887
• adding eraser ai detector by @​0x1 in trufflesecurity/trufflehog#2961
• [feat] - add metrics to the Engine by @​ahrav in trufflesecurity/trufflehog#2968
• Double archive maxDepth until bug is fixed by @​rgmz in trufflesecurity/trufflehog#2965
• Return match/reason from detectors.IsKnownFalsePositive by @​rgmz in trufflesecurity/trufflehog#2969
• Fix integration tests by @​rosecodym in trufflesecurity/trufflehog#2970
• [fix] - implement MaxSecretSizeProvider for auth0managementapitoken detector by @​ahrav in trufflesecurity/trufflehog#2953
• Patch archived dependency by @​dustin-decker in trufflesecurity/trufflehog#2971
• fix(deps): update module github.com/aws/aws-sdk-go to v1.54.2 by @​renovate in trufflesecurity/trufflehog#2962
• fix(deps): update golang.org/x/exp digest to 7f521ea by @​renovate in trufflesecurity/trufflehog#2972
• fix(deps): update module github.com/google/go-containerregistry to v0.19.2 by @​renovate in trufflesecurity/trufflehog#2973
• fix(deps): update module go.mongodb.org/mongo-driver to v1.15.1 by @​renovate in trufflesecurity/trufflehog#2975
• fix(deps): update module cloud.google.com/go/storage to v1.42.0 by @​renovate in trufflesecurity/trufflehog#2977
• fix(deps): update module github.com/bradleyfalzon/ghinstallation/v2 to v2.11.0 by @​renovate in trufflesecurity/trufflehog#2980
• fix(deps): update module github.com/elastic/go-elasticsearch/v8 to v8.14.0 by @​renovate in trufflesecurity/trufflehog#2981
• fix(deps): update module github.com/getsentry/sentry-go to v0.28.1 by @​renovate in trufflesecurity/trufflehog#2986
• [feat] - Add Option to Retain False Positives During Detection by @​ahrav in trufflesecurity/trufflehog#2967
• fix(deps): update module google.golang.org/api to v0.185.0 by @​renovate in trufflesecurity/trufflehog#2987
• clone more refs by @​zricethezav in trufflesecurity/trufflehog#2988
• fix(deps): update module github.com/aws/aws-sdk-go to v1.54.5 by @​renovate in trufflesecurity/trufflehog#2992
• Disambiguate step names in detector-tests workflow by @​rgmz in trufflesecurity/trufflehog#2989
• fix(deps): update module github.com/googleapis/gax-go/v2 to v2.12.5 by @​renovate in trufflesecurity/trufflehog#2993

Full Changelog: https://github.com/trufflesecurity/trufflehog/compare/v3.78.1...v3.78.2

Commits

• e3d5227 fix(deps): update module github.com/googleapis/gax-go/v2 to v2.12.5 (#2993)
• 9176e25 ci(detector-tests): disambiguate step names (#2989)
• 5eaad83 fix(deps): update module github.com/aws/aws-sdk-go to v1.54.5 (#2992)
• d5b9157 clone more refs (#2988)
• 007fbf5 fix(deps): update module google.golang.org/api to v0.185.0 (#2987)
• 347e8a6 [feat] - Add Option to Retain False Positives During Detection (#2967)
• a0108df fix(deps): update module github.com/getsentry/sentry-go to v0.28.1 (#2986)
• 981c568 fix(deps): update module github.com/elastic/go-elasticsearch/v8 to v8.14.0 (#...
• 32d714b fix(deps): update module github.com/bradleyfalzon/ghinstallation/v2 to v2.11....
• 204e574 fix(deps): update module cloud.google.com/go/storage to v1.42.0 (#2977)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions[bot]]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ❌ 1 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ✅ 0 package(s) with unknown licenses.

See the Details below.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA 4bcd0e9e0919ef78a9bbd8999c54896961c490b1.

Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

License Issues

.github/workflows/trufflehog.yml

Package	Version	License	Issue Type
trufflesecurity/trufflehog	e3d5227a4ca04b38d584fae4a7b1fcb36e1fd77e	AGPL-3.0	Incompatible License

Allowed Licenses: Apache-2.0, BSD-2-Clause, BSD-3-Clause, ISC, MPL-2.0, MIT

OpenSSF Scorecard

Package	Version	Score	Details
actions/trufflesecurity/trufflehog	e3d5227a4ca04b38d584fae4a7b1fcb36e1fd77e	Unknown	Unknown
actions/trufflesecurity/trufflehog	433a57adaf8fedce312630ef593f5142227c5855	Unknown	Unknown

Scanned Manifest Files

.github/workflows/trufflehog.yml

• trufflesecurity/trufflehog@e3d5227a4ca04b38d584fae4a7b1fcb36e1fd77e
• trufflesecurity/trufflehog@433a57adaf8fedce312630ef593f5142227c5855

[dependabot[bot]]

Superseded by #283.