chore(deps): update trufflesecurity/trufflehog action to v3.67.5

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
trufflesecurity/trufflehog	action	minor	v3.63.5 -> v3.67.5

---

Release Notes

trufflesecurity/trufflehog (trufflesecurity/trufflehog)

v3.67.5

Compare Source

What's Changed

• Fix handling of GitHub ratelimit information by @​rgmz in https://github.com/trufflesecurity/trufflehog/pull/2041
• Set GHA workdir by @​zricethezav in https://github.com/trufflesecurity/trufflehog/pull/2393
• Allow CLI version pinning in GHA (#​2397) by @​skeweredlogic in https://github.com/trufflesecurity/trufflehog/pull/2398
• [bug] - prevent concurrent map writes by @​ahrav in https://github.com/trufflesecurity/trufflehog/pull/2399
• Allow multiple domains for Forager by @​dustin-decker in https://github.com/trufflesecurity/trufflehog/pull/2400
• Update GitParse to handle quoted binary filenames by @​rgmz in https://github.com/trufflesecurity/trufflehog/pull/2391
• [feat] - buffered file writer metrics by @​ahrav in https://github.com/trufflesecurity/trufflehog/pull/2395

New Contributors

• @​skeweredlogic made their first contribution in https://github.com/trufflesecurity/trufflehog/pull/2398

Full Changelog: trufflesecurity/trufflehog@v3.67.4...v3.67.5

v3.67.4

Compare Source

What's Changed

• [feat] - use diff chan by @​ahrav in https://github.com/trufflesecurity/trufflehog/pull/2387

Full Changelog: trufflesecurity/trufflehog@v3.67.3...v3.67.4

v3.67.3

Compare Source

What's Changed

• Disable GitHub wiki scanning by default by @​rosecodym in https://github.com/trufflesecurity/trufflehog/pull/2386
• Fix binary file hanging bug in git sources by @​mcastorina in https://github.com/trufflesecurity/trufflehog/pull/2388
• tightening opsgenie detection and verification by @​dylanTruffle in https://github.com/trufflesecurity/trufflehog/pull/2389
• Make SkipFile case-insensitive by @​rgmz in https://github.com/trufflesecurity/trufflehog/pull/2383
• [not-fixup] - Reduce memory consumption for Buffered File Writer by @​ahrav in https://github.com/trufflesecurity/trufflehog/pull/2377

Full Changelog: trufflesecurity/trufflehog@v3.67.2...v3.67.3

v3.67.2

Compare Source

What's Changed

• [bug] - unhashable map key by @​ahrav in https://github.com/trufflesecurity/trufflehog/pull/2374
• custom detector docs improvement by @​dxa4481 in https://github.com/trufflesecurity/trufflehog/pull/2376
• [fixup] - correctly use the buffered file writer by @​ahrav in https://github.com/trufflesecurity/trufflehog/pull/2373

Full Changelog: trufflesecurity/trufflehog@v3.67.1...v3.67.2

v3.67.1

Compare Source

What's Changed

• [chore] Cleanup GitLab source errors by @​mcastorina in https://github.com/trufflesecurity/trufflehog/pull/2345
• [feat] - concurently scan the filesystem source by @​ahrav in https://github.com/trufflesecurity/trufflehog/pull/2364

Full Changelog: trufflesecurity/trufflehog@3.67.1...v3.67.1

v3.67.1

Compare Source

What's Changed

• [chore] Cleanup GitLab source errors by @​mcastorina in https://github.com/trufflesecurity/trufflehog/pull/2345
• [feat] - concurently scan the filesystem source by @​ahrav in https://github.com/trufflesecurity/trufflehog/pull/2364

Full Changelog: trufflesecurity/trufflehog@3.67.1...v3.67.1

v3.67.0

Compare Source

What's Changed

• Make AzureDevopsPersonalAccessToken verification more robust by @​dustin-decker in https://github.com/trufflesecurity/trufflehog/pull/2359
• Polite Verification by @​ahrav in https://github.com/trufflesecurity/trufflehog/pull/2356

Full Changelog: trufflesecurity/trufflehog@v3.66.3...v3.67.0

v3.66.3

Compare Source

What's Changed

• Allow for configuring the buffered file writer by @​ahrav in https://github.com/trufflesecurity/trufflehog/pull/2319
• added flyio protos by @​lonmarsDev in https://github.com/trufflesecurity/trufflehog/pull/2357
• Scan GitHub wikis by @​rgmz in https://github.com/trufflesecurity/trufflehog/pull/2233
• [chore] Add filesystem integration test by @​mcastorina in https://github.com/trufflesecurity/trufflehog/pull/2358
• update azure test files to check rawV2 by @​roxanne-tampus in https://github.com/trufflesecurity/trufflehog/pull/2353
• [bug] fix script change by @​ahrav in https://github.com/trufflesecurity/trufflehog/pull/2360

Full Changelog: trufflesecurity/trufflehog@v3.66.2...v3.66.3

v3.66.2

Compare Source

What's Changed

• Update the template detector by @​rgmz in https://github.com/trufflesecurity/trufflehog/pull/2342
• Detectors Updates 1 for Tristate Verification by @​0x1 in https://github.com/trufflesecurity/trufflehog/pull/2187
• Fix filesystem enumeration ignore paths bug by @​mcastorina in https://github.com/trufflesecurity/trufflehog/pull/2355
• [feat] - tmp file diffs by @​ahrav in https://github.com/trufflesecurity/trufflehog/pull/2306

Full Changelog: trufflesecurity/trufflehog@v3.66.1...v3.66.2

v3.66.1

Compare Source

What's Changed

• Azure function key is throwing FPs by @​dustin-decker in https://github.com/trufflesecurity/trufflehog/pull/2352

Full Changelog: trufflesecurity/trufflehog@v3.66.0...v3.66.1

v3.66.0

Compare Source

What's Changed

• [chore] - make sure to close connections after testing by @​ahrav in https://github.com/trufflesecurity/trufflehog/pull/2343
• Prevent print or logging in detectors by @​dustin-decker in https://github.com/trufflesecurity/trufflehog/pull/2341
• Add the new MaxMind license key format by @​faktas2 in https://github.com/trufflesecurity/trufflehog/pull/2181
• updates to plain and json printing to include verification error by @​0x1 in https://github.com/trufflesecurity/trufflehog/pull/2335
• added azurefunctionkey detector by @​roxanne-tampus in https://github.com/trufflesecurity/trufflehog/pull/2337
• added azuresearchadminkey detector by @​roxanne-tampus in https://github.com/trufflesecurity/trufflehog/pull/2348
• added azuresearchquerykey detector by @​roxanne-tampus in https://github.com/trufflesecurity/trufflehog/pull/2349
• Improve fp ignore logic by @​dustin-decker in https://github.com/trufflesecurity/trufflehog/pull/2351

New Contributors

• @​faktas2 made their first contribution in https://github.com/trufflesecurity/trufflehog/pull/2181

Full Changelog: trufflesecurity/trufflehog@v3.65.0...v3.66.0

v3.65.0

Compare Source

What's Changed

• Walk directories in filesystem source enumeration by @​mcastorina in https://github.com/trufflesecurity/trufflehog/pull/2313
• added azuredevopspersonalaccesstoken detector by @​roxanne-tampus in https://github.com/trufflesecurity/trufflehog/pull/2315
• updating doppler logic by @​joeleonjr in https://github.com/trufflesecurity/trufflehog/pull/2329
• add priority semaphore to source manager by @​ahrav in https://github.com/trufflesecurity/trufflehog/pull/2336
• Add Google oauth2 token detector by @​rgmz in https://github.com/trufflesecurity/trufflehog/pull/2274
• Update DockerHub detector logic by @​rgmz in https://github.com/trufflesecurity/trufflehog/pull/2266
• Improve GitHub scan logging by @​rgmz in https://github.com/trufflesecurity/trufflehog/pull/2220
• add tri-state verification to yelp by @​zubairk14 in https://github.com/trufflesecurity/trufflehog/pull/1736
• Fix broken test by @​dustin-decker in https://github.com/trufflesecurity/trufflehog/pull/2339

Full Changelog: trufflesecurity/trufflehog@v3.64.0...v3.65.0

v3.64.0

Compare Source

What's Changed

• Add prometheus metrics to measure hook execution time by @​mcastorina in https://github.com/trufflesecurity/trufflehog/pull/2312
• updating detector logic for zenscrape by @​joeleonjr in https://github.com/trufflesecurity/trufflehog/pull/2316
• fix for incorrect AWS account number identification by @​joeleonjr in https://github.com/trufflesecurity/trufflehog/pull/2332
• Narrow Postgres detector to only look for URIs by @​rosecodym in https://github.com/trufflesecurity/trufflehog/pull/2314
• Update Gitlab repo count in tests by @​rosecodym in https://github.com/trufflesecurity/trufflehog/pull/2333
• [feat] - Replace regexp pkg w/ go-re2 in detectors by @​ahrav in https://github.com/trufflesecurity/trufflehog/pull/2324

Full Changelog: trufflesecurity/trufflehog@v3.63.11...v3.64.0

v3.63.11

Compare Source

What's Changed

• [fixup] - save 8 bytes per chunk by @​ahrav in https://github.com/trufflesecurity/trufflehog/pull/2310
• fix(deps): update module github.com/hashicorp/golang-lru to v2 by @​renovate in https://github.com/trufflesecurity/trufflehog/pull/2054
• [chore] - Update Chunk struct comment by @​ahrav in https://github.com/trufflesecurity/trufflehog/pull/2317
• fix(deps): update golang.org/x/exp digest to 1b97071 by @​renovate in https://github.com/trufflesecurity/trufflehog/pull/2318
• fix(deps): update module github.com/couchbase/gocb/v2 to v2.7.1 by @​renovate in https://github.com/trufflesecurity/trufflehog/pull/2320
• fix(deps): update module github.com/envoyproxy/protoc-gen-validate to v1.0.4 by @​renovate in https://github.com/trufflesecurity/trufflehog/pull/2322
• fix(deps): update module github.com/aws/aws-sdk-go to v1.50.0 by @​renovate in https://github.com/trufflesecurity/trufflehog/pull/2325
• [chore] - reduce test time by @​ahrav in https://github.com/trufflesecurity/trufflehog/pull/2321

Full Changelog: trufflesecurity/trufflehog@v3.63.10...v3.63.11

v3.63.10

Compare Source

What's Changed

• added azure protos by @​roxanne-tampus in https://github.com/trufflesecurity/trufflehog/pull/2304
• [fixup ] - Allow ssh cloning with AWS Code Commit by @​ahrav in https://github.com/trufflesecurity/trufflehog/pull/2307
• Assume unauthenticated github scans have public visibility by @​mcastorina in https://github.com/trufflesecurity/trufflehog/pull/2308
• [chore] - Add regex and keyword for api_org tokens by @​ahrav in https://github.com/trufflesecurity/trufflehog/pull/2240

Full Changelog: trufflesecurity/trufflehog@v3.63.9...v3.63.10

v3.63.9

Compare Source

What's Changed

• [chore] - update docs for pre-commit by @​ahrav in https://github.com/trufflesecurity/trufflehog/pull/2280
• Ignore common false positives for Parseur Detector by @​rgmz in https://github.com/trufflesecurity/trufflehog/pull/2229
• Ignore common Signable false positives by @​rgmz in https://github.com/trufflesecurity/trufflehog/pull/2230
• fix(deps): update golang.org/x/exp digest to be819d1 by @​renovate in https://github.com/trufflesecurity/trufflehog/pull/2281
• [chore] - update test by @​ahrav in https://github.com/trufflesecurity/trufflehog/pull/2283
• adding postgres detector by @​dylanTruffle in https://github.com/trufflesecurity/trufflehog/pull/2108
• fix(deps): update module github.com/azuread/microsoft-authentication-library-for-go to v1.2.1 by @​renovate in https://github.com/trufflesecurity/trufflehog/pull/2282
• fix(deps): update golang.org/x/exp digest to 0dcbfd6 by @​renovate in https://github.com/trufflesecurity/trufflehog/pull/2284
• fix(deps): update module github.com/gabriel-vasile/mimetype to v1.4.3 by @​renovate in https://github.com/trufflesecurity/trufflehog/pull/2285
• Extend memory cache by @​ahrav in https://github.com/trufflesecurity/trufflehog/pull/2275
• fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.19 by @​renovate in https://github.com/trufflesecurity/trufflehog/pull/2286
• chore(deps): update alpine docker tag to v3.19 by @​renovate in https://github.com/trufflesecurity/trufflehog/pull/2287
• chore(deps): update sigstore/cosign-installer action to v3.3.0 by @​renovate in https://github.com/trufflesecurity/trufflehog/pull/2290
• fix(deps): update module cloud.google.com/go/storage to v1.36.0 by @​renovate in https://github.com/trufflesecurity/trufflehog/pull/2291
• fix(deps): update module github.com/aws/aws-sdk-go to v1.49.18 by @​renovate in https://github.com/trufflesecurity/trufflehog/pull/2292
• feat(installation): Implement checksum signature verification by @​hibare in https://github.com/trufflesecurity/trufflehog/pull/2157
• fix(deps): update module github.com/aws/aws-sdk-go to v1.49.19 by @​renovate in https://github.com/trufflesecurity/trufflehog/pull/2294
• fix(deps): update module github.com/bradleyfalzon/ghinstallation/v2 to v2.9.0 by @​renovate in https://github.com/trufflesecurity/trufflehog/pull/2295
• [chore] - small updates by @​ahrav in https://github.com/trufflesecurity/trufflehog/pull/2288
• [feat] - Allow for the use of include/exclude path files for filesystem scans by @​ahrav in https://github.com/trufflesecurity/trufflehog/pull/2297
• Individuate archive tests by @​rosecodym in https://github.com/trufflesecurity/trufflehog/pull/2293
• [feat] - Provide CLI flag to only use custom verifiers by @​ahrav in https://github.com/trufflesecurity/trufflehog/pull/2299
• Disable postgres detector because it it too sensitive by @​dustin-decker in https://github.com/trufflesecurity/trufflehog/pull/2303

Full Changelog: trufflesecurity/trufflehog@v3.63.8...v3.63.9

v3.63.8

Compare Source

What's Changed

• Fix commit message single quote escaping on GitHub Action by @​0x2b3bfa0 in https://github.com/trufflesecurity/trufflehog/pull/2259
• fix(deps): update module github.com/go-git/go-git/v5 to v5.11.0 [security] by @​renovate in https://github.com/trufflesecurity/trufflehog/pull/2263
• Fix non-ASCII whitespace on GitHub Action by @​0x2b3bfa0 in https://github.com/trufflesecurity/trufflehog/pull/2270
• Update GitParse logic to handle edge case. by @​rgmz in https://github.com/trufflesecurity/trufflehog/pull/2206
• [chore] Add test to check all versioned detectors are non-zero by @​mcastorina in https://github.com/trufflesecurity/trufflehog/pull/2272
• Update stripe detector regex by @​NikhilPanwar in https://github.com/trufflesecurity/trufflehog/pull/2261
• Update to Sourcegraph Access token format by @​shivasurya in https://github.com/trufflesecurity/trufflehog/pull/2254
• Bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 by @​dependabot in https://github.com/trufflesecurity/trufflehog/pull/2278
• Bump github.com/dvsekhvalnov/jose2go from 1.5.0 to 1.6.0 by @​dependabot in https://github.com/trufflesecurity/trufflehog/pull/2279
• Wrap temp deletion err by @​rosecodym in https://github.com/trufflesecurity/trufflehog/pull/2277
• 1833 Fix syslog udp by @​df3rry in https://github.com/trufflesecurity/trufflehog/pull/1835

New Contributors

• @​0x2b3bfa0 made their first contribution in https://github.com/trufflesecurity/trufflehog/pull/2259
• @​NikhilPanwar made their first contribution in https://github.com/trufflesecurity/trufflehog/pull/2261
• @​df3rry made their first contribution in https://github.com/trufflesecurity/trufflehog/pull/1835

Full Changelog: trufflesecurity/trufflehog@v3.63.7...v3.63.8

v3.63.7

Compare Source

What's Changed

• Add skip archive support by @​dustin-decker in https://github.com/trufflesecurity/trufflehog/pull/2257
• Skip all binaries by @​bill-rich in https://github.com/trufflesecurity/trufflehog/pull/2256
• Add handlerOpts back by @​bill-rich in https://github.com/trufflesecurity/trufflehog/pull/2258
• Use directory iterator instead of walkdir by @​dustin-decker in https://github.com/trufflesecurity/trufflehog/pull/2260

Full Changelog: trufflesecurity/trufflehog@v3.63.6...v3.63.7

v3.63.6

Compare Source

What's Changed

• Adds basic if/else check if pid slice is empty by @​codevbus in https://github.com/trufflesecurity/trufflehog/pull/2244
• [fixup] - move cleanup to run by @​ahrav in https://github.com/trufflesecurity/trufflehog/pull/2245
• shallow cloning + GitHub Action by @​joeleonjr in https://github.com/trufflesecurity/trufflehog/pull/2138
• Update GitHub extradata by @​rgmz in https://github.com/trufflesecurity/trufflehog/pull/2219
• Avoid extraneous authentication attempts when verifying Snowflake by @​rgmz in https://github.com/trufflesecurity/trufflehog/pull/2057
• Add missing import by @​dustin-decker in https://github.com/trufflesecurity/trufflehog/pull/2246
• [bug] - Bug archive handler memory leak by @​ahrav in https://github.com/trufflesecurity/trufflehog/pull/2247
• [chore] - use snake_case for naming by @​ahrav in https://github.com/trufflesecurity/trufflehog/pull/2238
• [chore] - add additional binary extensions to skip by @​ahrav in https://github.com/trufflesecurity/trufflehog/pull/2235
• [chore] - lower logging level by @​ahrav in https://github.com/trufflesecurity/trufflehog/pull/2249
• [bug] - Fix Context Timeout-Induced Goroutine Leak in readInChunks by @​ahrav in https://github.com/trufflesecurity/trufflehog/pull/2251
• Dedupe some source log keys by @​rosecodym in https://github.com/trufflesecurity/trufflehog/pull/2250
• [fixup] - Refactor to Pass Reader for Binary Diffs and Archived Data; Optimize /tmp Directory Cleanup by @​ahrav in https://github.com/trufflesecurity/trufflehog/pull/2253
• Use walkdir for tmp cleanup by @​dustin-decker in https://github.com/trufflesecurity/trufflehog/pull/2255

Full Changelog: trufflesecurity/trufflehog@v3.63.5...v3.63.6

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.