chore(deps): update trufflesecurity/trufflehog action to v3.92.5

[renovate]

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
trufflesecurity/trufflehog	action	minor	v3.64.0 → v3.92.5

---

Release Notes

trufflesecurity/trufflehog (trufflesecurity/trufflehog)

v3.92.5

Compare Source

What's Changed

• [INS-206] Store Gitlab Project ID in secret location metadata by @​mustansir14 in #​4601
• [INS-242] Add more validations to Custom Detector config by @​mustansir14 in #​4642
• Fix syslog test failing due to hardcoded timestamp by @​MuneebUllahKhan222 in #​4646
• [INS-120] Increase code coverage for Postman's source scanItem function by @​MuneebUllahKhan222 in #​4648
• [INS-232] Fix S3 Source "panic: runtime error: index out of range" bug by @​mustansir14 in #​4610
• [INS-170] Unify JDBC URL Parsing Across Detector and Analyzer (Continued) by @​mustansir14 in #​4606
• Add exponential backoff retry logic in Twilio detector by @​shahzadhaider1 in #​4652
• Fix typo in help description for Postman API metric by @​shahzadhaider1 in #​4656
• Rework JWT detector to better block local IPs by @​bradlarsen in #​4607
• Gitlab Source: Backoff from Scan2 which is experimental to legacy pagination API call by @​kashifkhan0771 in #​4608
• fix: git commit date parsing for non-English locales by @​GLEF1X in #​4653
• fix: report accurate line numbers for chunked file scanning (#​1876) by @​GLEF1X in #​4615
• Add Postman API monthly request limit metric by @​shahzadhaider1 in #​4667
• [INS-243] Fix jdbc detector detecting incomplete connection string and fixed invalid… by @​MuneebUllahKhan222 in #​4636

New Contributors

• @​GLEF1X made their first contribution in #​4653

Full Changelog: trufflesecurity/trufflehog@v3.92.4...v3.92.5

v3.92.4

Compare Source

What's Changed

• [INS-170] Unify JDBC URL parsing across detectors and analyzers by @​mustansir14 in #​4574
• Pagination and Rate-Limit Handling In Docker Registry Namespace API Calls by @​nabeelalam in #​4557
• [INS-226] Use pinned image for Quay registry Integration test by @​mustansir14 in #​4602
• Update module golang.org/x/crypto to v0.45.0 [SECURITY] by @​renovate[bot] in #​4562
• [INS-207] Add Role-Aware Resumption Support for Legacy S3 Scan by @​MuneebUllahKhan222 in #​4600
• Enable line numbers for GitHub Real-time by @​rosecodym in #​4611

Full Changelog: trufflesecurity/trufflehog@v3.92.3...v3.92.4

v3.92.3

Compare Source

What's Changed

• Add proto definitions for Google Drive Domain-Wide Delegation (DWD) by @​shahzadhaider1 in #​4596
• Fix git clone timeout typo by @​rosecodym in #​4599
• Update Azure Repos link format by @​amanfcp in #​4598

Full Changelog: trufflesecurity/trufflehog@v3.92.2...v3.92.3

v3.92.2

Compare Source

What's Changed

• [INS-37] Fixed the issue of ftp connection ignoring the detector's co… by @​MuneebUllahKhan222 in #​4590
• Add optional git clone timeout by @​rosecodym in #​4597

New Contributors

• @​MuneebUllahKhan222 made their first contribution in #​4590

Full Changelog: trufflesecurity/trufflehog@v3.92.1...v3.92.2

v3.92.1

Compare Source

What's Changed

• Improve Copper Detector verification with stricter status code and email matching by @​amanfcp in #​4594

Full Changelog: trufflesecurity/trufflehog@v3.92.0...v3.92.1

v3.92.0

Compare Source

What's Changed

• Added API Call Metrics to Docker Source by @​nabeelalam in #​4552
• Added Additional Metrics and Job ID in the Docker Source by @​nabeelalam in #​4547
• [Fix] Updated the failing Docker Source Quay Registry Test by @​nabeelalam in #​4580
• Add Gitlab V3 Detector by @​mustansir14 in #​4563
• Add Metrics to RetryableHTTPClient by @​mustansir14 in #​4545
• [INS-104] Support units in S3 source by @​mustansir14 in #​4560
• [INS-204] Abort Postman scan if monthly API request limit crosses 80% by @​mustansir14 in #​4586
• Create way to add key-value pairs to new sinks by @​rosecodym in #​4582
• Skip flaky test by @​rosecodym in #​4595
• Add more clone logging by @​rosecodym in #​4593
• Apply configured include/ignore lists to GitLab unit scans by @​rosecodym in #​4592

Full Changelog: trufflesecurity/trufflehog@v3.91.2...v3.92.0

v3.91.2

Compare Source

What's Changed

• Make Integrations team codeown source integrations by @​rosecodym in #​4561
• Fix custom regex link in readme.md by @​jmcshannon in #​4568
• Add some engine tests around the Verify flag by @​rosecodym in #​4566
• Addition of Installation Type field in Jira Source Proto [INS-79] by @​shahzadhaider1 in #​4564
• [INS-131] Add response id and response name to Postman metadata by @​mustansir14 in #​4555
• Make Integrations (shared) codeowners of proto/ by @​rosecodym in #​4576

New Contributors

• @​jmcshannon made their first contribution in #​4568

Full Changelog: trufflesecurity/trufflehog@v3.91.1...v3.91.2

v3.91.1

Compare Source

v3.91.0

Compare Source

What's Changed

• Remove gh-actions approval workflows in favor of new repo setting by @​j2fw in #​4525
• Scan all images under a namespace for Docker remote registries by @​kashifkhan0771 in #​4514
• Added .msg and .doc to skipArchiverMimeTypes by @​jordanTunstill in #​4544
• Fix Github Wiki Page Links by @​mustansir14 in #​4538
• Added tests for new .msg and .doc file types to skipArchiverMimeTypes by @​jordanTunstill in #​4546
• Shadow context when enumerating GitHub by @​rosecodym in #​4549

Full Changelog: trufflesecurity/trufflehog@v3.90.13...v3.91.0

v3.90.13

Compare Source

What's Changed

• Require product eng approval for PRs by @​dustin-decker in #​4478
• pr approval workflow: use pull_request_target by @​j2fw in #​4522
• Switch to an outside action for pr approval by @​j2fw in #​4523
• pr-approval-check: use separate workflow to check approvals by @​j2fw in #​4530
• test multi-workflow pr approval check by @​j2fw in #​4531
• Implemented Graphql requests for Github PR's, Issues and comments scanning by @​kashifkhan0771 in #​4431
• chore: fix feature support to append user agent suffix by @​dmdhrumilmistry in #​4520
• Updated GDrive proto to support On-Prem Scanning by @​kashifkhan0771 in #​4539
• Track chunk size by source type by @​rosecodym in #​4543

New Contributors

• @​dmdhrumilmistry made their first contribution in #​4520

Full Changelog: trufflesecurity/trufflehog@v3.90.12...v3.90.13

v3.90.12

Compare Source

What's Changed

• Updated Docker source with new test cases and README by @​kashifkhan0771 in #​4481
• Comment out broken CircleCI integration test by @​trufflesteeeve in #​4505
• Fix "skipping binary file" logging to show actual file name by @​mariduv in #​4509
• Refactored circleci source test cases by @​kashifkhan0771 in #​4506
• added ability to run github-experimental against private repos by @​joeleonjr in #​4508
• explicit repositories now bypass wantRepo() filtering entirely. added ctx to newConnector by @​jordanTunstill in #​4507
• Remove include repos by @​jordanTunstill in #​4469
• Remove depaware by @​rosecodym in #​4515

Full Changelog: trufflesecurity/trufflehog@v3.90.11...v3.90.12

v3.90.11

Compare Source

What's Changed

• bump rardecode by @​rosecodym in #​4503

Full Changelog: trufflesecurity/trufflehog@v3.90.10...v3.90.11

v3.90.10

Compare Source

What's Changed

• Local Git Config Sanitization by @​joeleonjr in #​4502

Full Changelog: trufflesecurity/trufflehog@v3.90.9...v3.90.10

v3.90.9

Compare Source

What's Changed

• Return non-zero exit code if an error occurs during a scan. by @​mplzik in #​4476
• Fix: SonarCloud Verification Logic by @​shahzadhaider1 in #​4482
• Clarify what 'unknown' means by @​dustin-decker in #​4477
• Proto update to support scanning confluence comments by @​mustansir14 in #​4484
• Fix SSH schema error executing git clone by @​shahzadhaider1 in #​4488
• Detect Organization ID to pass into AnalysisInfo for Atlassian Detector by @​mustansir14 in #​4480
• Add support for Account API Token verification in Postmark Detector by @​mustansir14 in #​4495
• refactor: use b.Loop() to simplify the code and improve performance by @​dulanting in #​4497
• Fix wrong line number in private key detector (#​4485) by @​kmgv in #​4486
• Reduce GitHub V1 Detector False Positives by @​shahzadhaider1 in #​4494
• Bump github.com/nwaples/rardecode/v2 from 2.0.0-beta.4.0.20241112120701-034e449c6e78 to 2.2.0 by @​dependabot[bot] in #​4501

New Contributors

• @​mplzik made their first contribution in #​4476
• @​mustansir14 made their first contribution in #​4484
• @​dulanting made their first contribution in #​4497
• @​kmgv made their first contribution in #​4486

Full Changelog: trufflesecurity/trufflehog@v3.90.8...v3.90.9

v3.90.8

Compare Source

What's Changed

• Pre-filter GitHub v1 findings to prevent large numbers of validation requests by @​trufflesteeeve in #​4468

Full Changelog: trufflesecurity/trufflehog@v3.90.7...v3.90.8

v3.90.7

Compare Source

What's Changed

• Fix nondeterminism in custom detectors by @​bradlarsen in #​4446
• fix(deps): update aws-sdk-go-v2 monorepo by @​renovate[bot] in #​4433
• fix(deps): update module github.com/couchbase/gocb/v2 to v2.11.0 by @​renovate[bot] in #​4455
• fix(deps): update module google.golang.org/protobuf to v1.36.9 by @​renovate[bot] in #​4456
• fix(deps): update module github.com/brianvoe/gofakeit/v7 to v7.6.0 by @​renovate[bot] in #​4457
• [Feature] Fixed And Updated FlightLabs API Detector by @​nabeelalam in #​4393
• Revert "Improved and fixed copper detector (#​4394)" by @​camgunz in #​4470
• Add metrics to SaneHTTPClient by @​amanfcp in #​4471

Full Changelog: trufflesecurity/trufflehog@v3.90.6...v3.90.7

v3.90.6

Compare Source

What's Changed

• Added support for indeterminate verification for letter Q detectors by @​patidartanay in #​4398
• [Detector] rippling detector for phrase api tokens by @​SyedAliHamad in #​4348
• Added explicit secrets manager write flag to Bitbucket source proto and generate new files by @​casey-tran in #​4403
• [Feature] Updated Dotmailer Detector To Dotdigital by @​nabeelalam in #​4331
• Add support for AWS account allow and deny lists by @​dustin-decker in #​4407
• Enable cloning repository to a specified location with retention option by @​kashifkhan0771 in #​4408
• fix(deps): update module google.golang.org/protobuf to v1.36.8 by @​renovate[bot] in #​4397
• fix(deps): update module cloud.google.com/go/storage to v1.56.1 by @​renovate[bot] in #​4412
• added flyio detector by @​lonmarsDev in #​2381
• Added a dedicated optional flag to ignore gists during scan by @​kashifkhan0771 in #​4423
• Fix git tests if run with global commit.gpgsign=true by @​mariduv in #​4415
• Recover logger if wrapped by a non-logging context implementation by @​mcastorina in #​4406
• fix(deps): update aws-sdk-go-v2 monorepo by @​renovate[bot] in #​4422
• fix(deps): update module github.com/gabriel-vasile/mimetype to v1.4.10 by @​renovate[bot] in #​4424
• [GitHub] Add a GraphQL client to the connector by @​rgmz in #​3837
• Added support for additional validation rules in custom detector by @​kashifkhan0771 in #​4413
• Ignore known common prefix matches for Github V1 detector by @​kashifkhan0771 in #​4379
• Fix error propagation and a typo in verification logic by @​bradlarsen in #​4427
• [Feature] Added Detector for the Photoroom API by @​nabeelalam in #​4414
• Scan Github Private Repositories With Token by @​kashifkhan0771 in #​4426
• fix(deps): update module github.com/brianvoe/gofakeit/v7 to v7.5.1 by @​renovate[bot] in #​4425
• fix(deps): update module github.com/jedib0t/go-pretty/v6 to v6.6.8 by @​renovate[bot] in #​4396
• Fix legacy json flag for Github and Gitlab private repos by @​shahzadhaider1 in #​4386
• Changes to fix Enterprise UI filtering of Github Hosted Scanner Repositories to Include by @​jordanTunstill in #​4430
• pkg: fix some typos in comment by @​vetclippy in #​4440
• Added feature flag to configure projects per page in gitlab enumeration by @​kashifkhan0771 in #​4437

New Contributors

• @​patidartanay made their first contribution in #​4398
• @​bradlarsen made their first contribution in #​4427
• @​vetclippy made their first contribution in #​4440

Full Changelog: trufflesecurity/trufflehog@v3.90.5...v3.90.6

v3.90.5

Compare Source

What's Changed

• Fixed and improved currentsapi detector by @​kashifkhan0771 in #​4391
• Improved and fixed copper detector by @​kashifkhan0771 in #​4394
• fix(deps): update module github.com/bradleyfalzon/ghinstallation/v2 to v2.16.0 by @​renovate[bot] in #​4342
• fix(deps): update module github.com/sendgrid/sendgrid-go to v3.16.1+incompatible by @​renovate[bot] in #​4232
• Utf16 bom support by @​joeleonjr in #​4326
• Add additional unicode escape support by @​jltrfl in #​4296
• Update PreCommit.md with audit mode details by @​joeleonjr in #​4280
• Update proto definitions for custom bitbucket oauth by @​casey-tran in #​4390

New Contributors

• @​jltrfl made their first contribution in #​4296

Full Changelog: trufflesecurity/trufflehog@v3.90.4...v3.90.5

v3.90.4

Compare Source

What's Changed

• Disabled besnappy detector by @​kashifkhan0771 in #​4363
• Expanded test coverage for binary content by @​kashifkhan0771 in #​4332
• Fixed syslog source panic on invalid or chunked input by @​kashifkhan0771 in #​4366
• Improve Bitfinex Detector - Implemented API-Based Secret Validation by @​shahzadhaider1 in #​4368
• [SCAN-81] Report ChunkUnit Panics by @​mariduv in #​4367
• Oss 133 new detector vault approle auth for hashicorp by @​SyedAliHamad in #​4362
• fix(deps): update module github.com/charmbracelet/glamour to v0.10.0 by @​renovate[bot] in #​4345
• Add private key id to GCP metadata by @​dustin-decker in #​4361
• fixed minor grammatical and punctuation issues by @​shahzadhaider1 in #​4369
• Refactored caflou detector by @​kashifkhan0771 in #​4372
• Add option to skip binary files during filesystem source scanning by @​dustin-decker in #​4376
• Improved and fixed couchbase detector by @​kashifkhan0771 in #​4383
• Fixed and improved Clickhelp detector by @​kashifkhan0771 in #​4384
• Fix error-wrapping for callback in common.RecoverWithHandler by @​mariduv in #​4380
• Fixed gitlab detector by @​kashifkhan0771 in #​4371
• [Feature] Fixed And Updated Fibery Detecor by @​nabeelalam in #​4385
• added User to proto by @​jordanTunstill in #​4378

New Contributors

• @​mariduv made their first contribution in #​4367

Full Changelog: trufflesecurity/trufflehog@v3.90.3...v3.90.4

v3.90.3

Compare Source

What's Changed

• Refactored Gitlab Detectors by @​kashifkhan0771 in #​4323
• Support sub-unit resumption in filesystem scans by @​mcastorina in #​4325
• Arranged the detectors in alphabetical order by @​shahzadhaider1 in #​4335
• fix(deps): update module cloud.google.com/go/storage to v1.56.0 by @​renovate[bot] in #​4311
• (fix) Git Repo Cloning Error by @​abmussani in #​4223
• chore(deps): update sigstore/cosign-installer action to v3.9.2 by @​renovate[bot] in #​4337
• fix(deps): update module cloud.google.com/go/secretmanager to v1.15.0 by @​renovate[bot] in #​4310
• fix(deps): update aws-sdk-go-v2 monorepo by @​renovate[bot] in #​4338
• fix(deps): update module github.com/couchbase/gocb/v2 to v2.10.1 by @​renovate[bot] in #​4340
• fix(deps): update module github.com/golang-jwt/jwt/v5 to v5.2.3 by @​renovate[bot] in #​4341
• fix(deps): update module github.com/aws/smithy-go to v1.22.5 by @​renovate[bot] in #​4339
• chore: updated defaults.go references in documentation for adding new detectors by @​Jeff-Rowell in #​4344
• fix(deps): update module github.com/brianvoe/gofakeit/v7 to v7.3.0 by @​renovate[bot] in #​4343
• feat: add webexbot support by @​jonathongardner in #​4322
• Regenerate protobufs with the correct protoc (etc) version by @​camgunz in #​4349
• fix GCS test by @​dustin-decker in #​4350
• [Detector]-Detector for tableau personal access token by @​SyedAliHamad in #​4261
• Scan GitLab Groups by @​shahzadhaider1 in #​4320
• Fixed Aha detector by @​kashifkhan0771 in #​4354
• Updated Github V1 detector to ignore matches with known common prefixes by @​kashifkhan0771 in #​4329
• fix(deps): update module github.com/docker/docker to v28.3.3+incompatible [security] by @​renovate[bot] in #​4355
• removed duplicate detector entries from engine defaults by @​shahzadhaider1 in #​4357
• Missed Smartsheet Tokens by @​shahzadhaider1 in #​4358
• Do not quit TUI, if 'q' is pressed on specific pages by @​kashifkhan0771 in #​4356
• Improve LarkSuite Detector Accuracy and Error Handling by @​shahzadhaider1 in #​4334
• [detector] feat: added rootly detector by @​sahil9001 in #​3414
• Improved and fixed A&B detectors pattern test cases by @​kashifkhan0771 in #​4359
• Restore link field in Slack Continuous Source protobuf message by @​camgunz in #​4360
• fix: fixed verification endpoint and verification logic for brand fetch by @​sahil9001 in #​3470

New Contributors

• @​Jeff-Rowell made their first contribution in #​4344
• @​jonathongardner made their first contribution in #​4322

Full Changelog: trufflesecurity/trufflehog@v3.90.2...v3.90.3

v3.90.2

Compare Source

What's Changed

• Added Anypoint API OAuth2 Detector by @​nabeelalam in #​4312
• Updated and Fixed CircleCI Source by @​kashifkhan0771 in #​4309
• Add additional Vector configuration options by @​dustin-decker in #​4301
• Removed stored logger from HuggingFace source by @​kashifkhan0771 in #​4328
• Suppress AWS SDK checksum skip warnings for S3 by @​peterfraedrich in #​4324
• Add slack continuous protobuf messages by @​camgunz in #​4330
• [Update] Dovico Detector Updated by @​nabeelalam in #​4290

New Contributors

• @​peterfraedrich made their first contribution in #​4324

Full Changelog: trufflesecurity/trufflehog@v3.90.1...v3.90.2

v3.90.1

Compare Source

What's Changed

• Added KeySet Pagination for Gitlab Projects V2 Enumeration by @​kashifkhan0771 in #​4319
• Salesforce Refresh Token Detector by @​shahzadhaider1 in #​4295

Full Changelog: trufflesecurity/trufflehog@v3.90.0...v3.90.1

v3.90.0

Compare Source

What's Changed

• chore: fix comment by @​largemouth in #​4239
• Fixed jira detector invalid domain issue by @​kashifkhan0771 in #​4250
• Added LangSmith API Key detector by @​kashifkhan0771 in #​4251
• Gitparse test: Decreased MaxDiffSize in gitparse TestMaxDiffSize() function by @​nabeelalam in #​4240
• Updated GoDaddy Detector by @​kashifkhan0771 in #​4258
• Bannerbear Detector V2 by @​shahzadhaider1 in #​4222
• Surface errors when Github source cannot fetch repo or gist by @​kashifkhan0771 in #​4259
• Move default detectors ownership to OSS by @​rosecodym in #​4257
• Added Shannon Entropy Check in Gitlab v1 detector by @​kashifkhan0771 in #​4260
• Feat: bitbucket app by @​x-stp in #​4214
• fix: throws error if dir not found by @​sahil9001 in #​3419
• (fix) Flaky BoxOAuth detector test by @​abmussani in #​4199
• Enabled and Enhanced Artifactory Detector by @​kashifkhan0771 in #​4207
• Fix TestChunkUnit by @​shahzadhaider1 in #​4263
• Disable s3 filter test by @​rosecodym in #​4262
• feat [detector]: added hasura detector by @​sahil9001 in #​3427
• Handle no such host errors for Algolia Detector by @​kashifkhan0771 in #​4264
• [Update] Coinbase API Detector Updated by @​nabeelalam in #​4202
• Added SQL Server error code and message to verification error by @​kashifkhan0771 in #​4267
• Fixed and Improved billomat detector by @​kashifkhan0771 in #​4268
• Allow users to exit the TUI when there are extra args by @​mcastorina in #​4274
• Updated ExchangeRate Detector by @​kashifkhan0771 in #​4278
• Deprecated AirTable API Key detector by @​kashifkhan0771 in #​4266
• [chore] Write --help to stdout by @​mcastorina in #​4277
• Salesforce OAuth2 Detector by @​shahzadhaider1 in #​4252
• [Update] Added Missing Indeterminate Verification Errors In Detectors Starting With Letter "A" by @​nabeelalam in #​4256
• Updated Lokalise Detector by @​kashifkhan0771 in #​4279
• updating oss documentation to explain info provided here: CSM-1118 by @​jordanTunstill in #​4271
• RoninApp Rebranded to Clientary by @​kashifkhan0771 in #​4272
• [Update] Dwolla Detector Updated by @​nabeelalam in #​4282
• Added support for scanning images from the docker daemon by @​saghaulor in #​4276
• Revert "Added support for scanning images from the docker daemon" by @​rosecodym in #​4291
• Fixed Gist URL Detection by @​kashifkhan0771 in #​4284
• chore: fix some minor issues in the comments by @​shangchenglumetro in #​4292
• Updated Detectors Proto by @​kashifkhan0771 in #​4294
• [perf] - Optimize Chunk Size Handling for Improved I/O and Memory Efficiency by @​ahrav in #​3134
• fix(deps): update module github.com/charmbracelet/bubbletea to v1.3.6 by @​renovate[bot] in #​4227
• fix(deps): update module github.com/google/go-containerregistry to v0.20.6 by @​renovate[bot] in #​4230
• chore(deps): update dependency go to v1.24.5 by @​renovate[bot] in #​4298
• Simplified Gitlab Enumeration by @​kashifkhan0771 in #​4283
• fix(deps): update aws-sdk-go-v2 monorepo by @​renovate[bot] in #​4299
• fix(deps): update github.com/avast/apkparser digest to d53391f by @​renovate[bot] in #​4297
• fix(deps): update module github.com/hashicorp/go-retryablehttp to v0.7.8 by @​renovate[bot] in #​4302
• fix(deps): update module github.com/xo/dburl to v0.23.8 by @​renovate[bot] in #​4303
• fix(deps): update module go.mongodb.org/mongo-driver to v1.17.4 by @​renovate[bot] in #​4304
• fix(deps): update module go.uber.org/mock to v0.5.2 by @​renovate[bot] in #​4305
• chore(deps): update alpine docker tag to v3.22 by @​renovate[bot] in #​4307
• chore(deps): update sigstore/cosign-installer action to v3.9.1 by @​renovate[bot] in #​4308
• add detection for updated asana personal access token by @​SyedAliHamad in #​4273
• Added v2 for CircleCI Detector by @​kashifkhan0771 in #​4300
• Add field for conditional permission binding by @​bill-rich in #​4316
• Add support for docker daemon as a source by @​saghaulor in [#​4306](https://redirect.github.com/trufflesecurity/trufflehog/pull/

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.