Skip to content

Commit 7fbab8e

Browse files
build(deps): bump trufflesecurity/trufflehog from 3.93.1 to 3.93.3 (#24)
Bumps [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) from 3.93.1 to 3.93.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/trufflesecurity/trufflehog/releases">trufflesecurity/trufflehog's releases</a>.</em></p> <blockquote> <h2>v3.93.3</h2> <h2>What's Changed</h2> <ul> <li>OpenAI Admin Key Detector by <a href="https://github.com/amanfcp"><code>@​amanfcp</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4689">trufflesecurity/trufflehog#4689</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/trufflesecurity/trufflehog/compare/v3.93.2...v3.93.3">https://github.com/trufflesecurity/trufflehog/compare/v3.93.2...v3.93.3</a></p> <h2>v3.93.2</h2> <h2>What's Changed</h2> <ul> <li>Fix pre-receive hook hangs and missing logs by flushing logs on signal and using CommandContext for git commands by <a href="https://github.com/jordanTunstill"><code>@​jordanTunstill</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4714">trufflesecurity/trufflehog#4714</a></li> <li>[INS-285] Fix custom detectors line number reporting to match the full regex instead of capture group by <a href="https://github.com/mustansir14"><code>@​mustansir14</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4697">trufflesecurity/trufflehog#4697</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/trufflesecurity/trufflehog/compare/v3.93.1...v3.93.2">https://github.com/trufflesecurity/trufflehog/compare/v3.93.1...v3.93.2</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/6961f2bace57ab32b23b3ba40f8f420f6bc7e004"><code>6961f2b</code></a> OpenAI Admin Key Detector (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4689">#4689</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/4158734f234bd8770128deae2e2975cfab4b66a6"><code>4158734</code></a> [INS-285] Fix custom detectors line number reporting to match the full regex ...</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/e9734c1ff25106f68d4266f0b09c1fcfc915dad1"><code>e9734c1</code></a> Fix pre-receive hook hangs and missing logs by flushing logs on signal and us...</li> <li>See full diff in <a href="https://github.com/trufflesecurity/trufflehog/compare/7635b24fd512a2e817dd3e9dd661caaf035a079d...6961f2bace57ab32b23b3ba40f8f420f6bc7e004">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=trufflesecurity/trufflehog&package-manager=github_actions&previous-version=3.93.1&new-version=3.93.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent 972f66d commit 7fbab8e

2 files changed

Lines changed: 2 additions & 2 deletions

File tree

.github/workflows/quality.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ jobs:
1818
find . -type f -perm /111 -name "*.sh" | head -10 || true
1919
2020
- name: Check for secrets
21-
uses: trufflesecurity/trufflehog@7635b24fd512a2e817dd3e9dd661caaf035a079d # v3.93.1
21+
uses: trufflesecurity/trufflehog@6961f2bace57ab32b23b3ba40f8f420f6bc7e004 # v3.93.3
2222
with:
2323
path: ./
2424
base: ${{ github.event.pull_request.base.sha || github.event.before }}

.github/workflows/secret-scanner.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ jobs:
1818
fetch-depth: 0 # Full history for scanning
1919

2020
- name: TruffleHog Secret Scan
21-
uses: trufflesecurity/trufflehog@7635b24fd512a2e817dd3e9dd661caaf035a079d # v3
21+
uses: trufflesecurity/trufflehog@6961f2bace57ab32b23b3ba40f8f420f6bc7e004 # v3
2222
with:
2323
extra_args: --only-verified --fail
2424

0 commit comments

Comments
 (0)