Skip to content

chore(deps): update trufflesecurity/trufflehog action to v3.97.5 - #3237

Closed
renovate[bot] wants to merge 6 commits into
mainfrom
renovate/trufflesecurity-trufflehog-3.x
Closed

chore(deps): update trufflesecurity/trufflehog action to v3.97.5#3237
renovate[bot] wants to merge 6 commits into
mainfrom
renovate/trufflesecurity-trufflehog-3.x

Conversation

@renovate

@renovate renovate Bot commented Sep 30, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change Pending
trufflesecurity/trufflehog action patch v3.97.4 → v3.97.5 v3.98.1 (+5)

Release Notes

trufflesecurity/trufflehog (trufflesecurity/trufflehog)

v3.97.5

Compare Source

What's Changed

New Contributors

Full Changelog: trufflesecurity/trufflehog@v3.97.4...v3.97.5

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from a team as a code owner September 30, 2026 22:01
@renovate renovate Bot added the no-release Do not create a new release (wait for additional code changes) label Sep 30, 2026
@atmos-pro

atmos-pro Bot commented Sep 30, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Tip

Atmos Pro  

No affected stacks workflow was detected for this pull request.
If this is expected, no action is needed.
Learn More. Ask AI.

@github-actions

github-actions Bot commented Sep 30, 2026 •
edited
Loading

Copy link
Copy Markdown

Dependency Review

✅ No vulnerabilities or license issues found.

Scanned Files

None

@github-actions github-actions Bot added the size/xs Extra small size PR label Sep 30, 2026
@mergify

mergify Bot commented Sep 30, 2026

Copy link
Copy Markdown
Contributor

Important

Cloud Posse Engineering Team Review Required

This pull request modifies files that require Cloud Posse's review. Please be patient, and a core maintainer will review your changes.

To expedite this process, reach out to us on Slack in the #pr-reviews channel.

@mergify mergify Bot added auto-update This PR was automatically generated needs-cloudposse Needs Cloud Posse assistance labels Sep 30, 2026
@github-actions

github-actions Bot commented Sep 30, 2026 •
edited
Loading

Copy link
Copy Markdown

Warning

SHA Pin Verification Passed — with documented exceptions

All 239 third-party action reference(s) are covered, but 2 rely on a documented allowlist entry in allowlist.json and could not be automatically drift-checked. This does not fail CI, but should be reviewed.

Action Location Status Details
aquasecurity/trivy-action@v0.36.0 build.yml:162 ⚠️ Allowlisted (documented) The aquasecurity GitHub organization has enabled an IP allow list that blocks API access (git ref/tag lookups) from GitHub-hosted Actions runner IPs, for any caller, on any of their repos, including public ones — this is not specific to our token or workflow. Verified independently: the exact same 403 is reported against the sibling aquasecurity/tfsec-action, and trivy-cache-action's issue tracker explicitly confirms 'aquasecurity GitHub org now has IP allow list enabled, blocking API access'. Manually confirmed our pinned SHA is correct (dereferenced the v0.36.0 annotated tag directly against the GitHub API from a non-Actions IP; it matches) — this entry only silences the automated drift check, which the API access restriction makes impossible to run in CI, not the underlying security property.
aquasecurity/trivy-action@v0.36.0 test.yml:1294 ⚠️ Allowlisted (documented) The aquasecurity GitHub organization has enabled an IP allow list that blocks API access (git ref/tag lookups) from GitHub-hosted Actions runner IPs, for any caller, on any of their repos, including public ones — this is not specific to our token or workflow. Verified independently: the exact same 403 is reported against the sibling aquasecurity/tfsec-action, and trivy-cache-action's issue tracker explicitly confirms 'aquasecurity GitHub org now has IP allow list enabled, blocking API access'. Manually confirmed our pinned SHA is correct (dereferenced the v0.36.0 annotated tag directly against the GitHub API from a non-Actions IP; it matches) — this entry only silences the automated drift check, which the API access restriction makes impossible to run in CI, not the underlying security property.

See the action run for full details.

@codecov

codecov Bot commented Sep 30, 2026 •
edited
Loading

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 84.67%. Comparing base (bbe58a6) to head (14a9798).

Additional details and impacted files

Impacted file tree graph

@@           Coverage Diff           @@
##             main    #3237   +/-   ##
=======================================
  Coverage   84.67%   84.67%           
=======================================
  Files        2105     2105           
  Lines      206759   206759           
=======================================
+ Hits       175063   175067    +4     
+ Misses      23426    23416   -10     
- Partials     8270     8276    +6
Flag Coverage Δ
unittests 84.67% <ø> (+<0.01%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.
see 10 files with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@github-actions

github-actions Bot commented Sep 30, 2026 •
edited
Loading

Copy link
Copy Markdown

CI timing summary

Latest completed GitHub Actions runs for 14a97986eaef.

  • PR wall-clock time: 9h 38m 36s
  • Aggregate runner time: 8h 19m 46s
  • Included: 14 workflows, 118 jobs (including matrix jobs)

Wall-clock time spans the earliest included workflow creation through the latest completion. Aggregate runner time adds each job's execution time, so concurrent jobs are counted separately.

Workflow Elapsed Runner time Jobs
❌ Dependency Review 9h 38m 34s 15s 1
✅ Tests 36m 28s 7h 55m 38s 98
✅ CodeQL 7m 50s 14m 41s 6
✅ atmos.ci 3m 32s 3m 30s 1
✅ Pre-commit 2m 26s 2m 23s 1
✅ TruffleHog secret scan 45s 42s 1
✅ Release Documentation Check 34s 30s 1
✅ Verify SHA Pinning 32s 29s 1
✅ Validate Codeowners 26s 24s 1
✅ Verify Repository Symlinks 26s 23s 1
✅ vhs 25s 21s 3
✅ PR Size Labeler 20s 17s 1
✅ autofix.ci 17s 13s 1
⏭️ Feature release 1s 0s 1
Longest jobs (top 10)
Job Workflow Duration Conclusion
Acceptance Tests (windows, shard 1/10) Tests 14m 56s ✅ success
[race] non-acceptance test suite (shard 1/4) Tests 14m 12s ✅ success
[k3s-macos] helm Tests 14m 08s ✅ success
Acceptance Tests (windows, shard 5/10) Tests 13m 54s ✅ success
[floci] go e2e Tests 13m 40s ✅ success
[k3s-macos] demo-helmfile Tests 13m 21s ✅ success
Acceptance Tests (macos, shard 1/10) Tests 12m 47s ✅ success
Acceptance Tests (macos, shard 3/10) Tests 12m 27s ✅ success
Acceptance Tests (macos, shard 7/10) Tests 12m 21s ✅ success
Acceptance Tests (windows, shard 3/10) Tests 12m 14s ✅ success

Updated automatically when a PR workflow finishes.

@renovate
renovate Bot force-pushed the renovate/trufflesecurity-trufflehog-3.x branch 13 times, most recently from 89a96ed to 817b651 Compare October 5, 2026 16:36
@renovate
renovate Bot force-pushed the renovate/trufflesecurity-trufflehog-3.x branch from 817b651 to 02a84f9 Compare October 6, 2026 04:01
@renovate

renovate Bot commented Oct 6, 2026

Copy link
Copy Markdown
Contributor Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@mergify mergify Bot closed this Oct 7, 2026
@mergify

mergify Bot commented Oct 7, 2026

Copy link
Copy Markdown
Contributor

This pull request was automatically closed as it no longer contains any changes.

This typically happens when another merged pull request has already included this request's
proposed modifications into the default branch.

@atmos-pro

atmos-pro Bot commented Oct 7, 2026

Copy link
Copy Markdown
Contributor

Note

Atmos Pro  

Waiting for your GitHub Actions workflow to upload affected stacks.
Learn More.

@mergify mergify Bot added no-changes No changes were made in this PR and removed needs-cloudposse Needs Cloud Posse assistance labels Oct 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

auto-update This PR was automatically generated no-changes No changes were made in this PR no-release Do not create a new release (wait for additional code changes) size/xs Extra small size PR

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants