build(deps): bump trufflesecurity/trufflehog from 3.92.5 to 3.93.0 (#21)

dependabot[bot] · web-flow · commit a5aef0023e5d · 2026-02-04T21:53:23.000Z
Bumps [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) from 3.92.5 to 3.93.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/trufflesecurity/trufflehog/releases">trufflesecurity/trufflehog's releases</a>.</em></p> <blockquote> <h2>v3.93.0</h2> <h2>What's Changed</h2> <ul> <li>Remove ResultWithMetadata.Data by <a href="https://github.com/rosecodym"><code>@​rosecodym</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4659">trufflesecurity/trufflehog#4659</a></li> <li>Add tests for processResult by <a href="https://github.com/rosecodym"><code>@​rosecodym</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4674">trufflesecurity/trufflehog#4674</a></li> <li>Switch out default HTTP client use in detectors by <a href="https://github.com/bradlarsen"><code>@​bradlarsen</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4670">trufflesecurity/trufflehog#4670</a></li> <li>[INS-202] Add rate limiting to the Github Analyzer by <a href="https://github.com/mustansir14"><code>@​mustansir14</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4617">trufflesecurity/trufflehog#4617</a></li> <li>Fix/issue 4578 path normalization for unix and windows by <a href="https://github.com/Rusted2361"><code>@​Rusted2361</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4614">trufflesecurity/trufflehog#4614</a></li> <li>Auto-configure TruffleHog for Pre-commit Hooks by <a href="https://github.com/kashifkhan0771"><code>@​kashifkhan0771</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4666">trufflesecurity/trufflehog#4666</a></li> <li>Include key info for analyze by <a href="https://github.com/bill-rich"><code>@​bill-rich</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4686">trufflesecurity/trufflehog#4686</a></li> <li>fix: typos in comments by <a href="https://github.com/NAM-MAN"><code>@​NAM-MAN</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4676">trufflesecurity/trufflehog#4676</a></li> <li>Stop using detectableChunk in processResult by <a href="https://github.com/rosecodym"><code>@​rosecodym</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4691">trufflesecurity/trufflehog#4691</a></li> <li>fix(github): preserve trailing hyphens in repository names by <a href="https://github.com/PascalThuet"><code>@​PascalThuet</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4695">trufflesecurity/trufflehog#4695</a></li> <li>Skip failing Git Engine test by <a href="https://github.com/mustansir14"><code>@​mustansir14</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4701">trufflesecurity/trufflehog#4701</a></li> <li>[INS-281] Github Bug fix: UnitErr and UnitOK called for the same repo by <a href="https://github.com/mustansir14"><code>@​mustansir14</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4681">trufflesecurity/trufflehog#4681</a></li> <li>[INS-258] Revert includeRepos removal from GitHub source by <a href="https://github.com/mustansir14"><code>@​mustansir14</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4673">trufflesecurity/trufflehog#4673</a></li> <li>Re-enable Git Engine Test by <a href="https://github.com/shahzadhaider1"><code>@​shahzadhaider1</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4715">trufflesecurity/trufflehog#4715</a></li> <li>Add some false positive tests by <a href="https://github.com/rosecodym"><code>@​rosecodym</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4703">trufflesecurity/trufflehog#4703</a></li> <li>Unify false positive/overlap tests by <a href="https://github.com/rosecodym"><code>@​rosecodym</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4699">trufflesecurity/trufflehog#4699</a></li> <li>Unify some false positive logic by <a href="https://github.com/rosecodym"><code>@​rosecodym</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4720">trufflesecurity/trufflehog#4720</a></li> <li>[INS-249] Updated Gitlab client from v0.129.0 to v1.12.0(latest) by <a href="https://github.com/MuneebUllahKhan222"><code>@​MuneebUllahKhan222</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4655">trufflesecurity/trufflehog#4655</a></li> <li>[INS-307] Added unspecified(0.0.0.0) check to DetectorHttpClientWithNoLocalAddresses by <a href="https://github.com/MuneebUllahKhan222"><code>@​MuneebUllahKhan222</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4726">trufflesecurity/trufflehog#4726</a></li> <li>Added Analysis info to tableau detector by <a href="https://github.com/MuneebUllahKhan222"><code>@​MuneebUllahKhan222</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4717">trufflesecurity/trufflehog#4717</a></li> <li>Remove first-class verification overlap tracker by <a href="https://github.com/rosecodym"><code>@​rosecodym</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4723">trufflesecurity/trufflehog#4723</a></li> <li>[INS-280] Fix Github &quot;repostories&quot; filter does not respect GHES endpoint by <a href="https://github.com/mustansir14"><code>@​mustansir14</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4677">trufflesecurity/trufflehog#4677</a></li> <li>[INS-228] Add ignorePattern configuration support to Postgres and Sqlserver detectors by <a href="https://github.com/mustansir14"><code>@​mustansir14</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4612">trufflesecurity/trufflehog#4612</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/Rusted2361"><code>@​Rusted2361</code></a> made their first contribution in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4614">trufflesecurity/trufflehog#4614</a></li> <li><a href="https://github.com/NAM-MAN"><code>@​NAM-MAN</code></a> made their first contribution in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4676">trufflesecurity/trufflehog#4676</a></li> <li><a href="https://github.com/PascalThuet"><code>@​PascalThuet</code></a> made their first contribution in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4695">trufflesecurity/trufflehog#4695</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/trufflesecurity/trufflehog/compare/v3.92.5...v3.93.0">https://github.com/trufflesecurity/trufflehog/compare/v3.92.5...v3.93.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/7f4e37db2d928c18ddd7ddf0604f8f7d1f5793ec"><code>7f4e37d</code></a> [INS-228] Add ignorePattern configuration support to Postgres and Sqlserver d...</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/daf5bf1e94212936dae852e8638e313b806e06c5"><code>daf5bf1</code></a> [INS-280] Fix Github &quot;repostories&quot; filter does not respect GHES endpoint (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4677">#4677</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/4d4080bd276041df80ee55205b39933c9386ab0c"><code>4d4080b</code></a> remove tracker type (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4723">#4723</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/ddb9583ed6c7bcd4bdeeb658065463e0d9628686"><code>ddb9583</code></a> Added Analysis info to tableau detector (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4717">#4717</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/ef3bf34ddc7f0b51390af48b1118e8569e5f11ca"><code>ef3bf34</code></a> [INS-307] Added unspecified(0.0.0.0) check to DetectorHttpClientWithNoLocalAd...</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/f70218bad03e3593653723a6022693f656ddaf69"><code>f70218b</code></a> [INS-249] Updated Gitlab client from v0.129.0 to v1.12.0(latest) (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4655">#4655</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/a450544f0b7c12e99bd78b4f02fe67d5c5e56711"><code>a450544</code></a> Unify some false positive logic (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4720">#4720</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/a9a74163123b3a552e891cbb61c354cfe0e46441"><code>a9a7416</code></a> Unify false positive/overlap tests (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4699">#4699</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/7c7facf03271c81fa3b06af4bc6944bb2fecc9ca"><code>7c7facf</code></a> Add some false positive tests <a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4703">#4703</a></li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/5032470af16e9827f999dd207e67863310642aaa"><code>5032470</code></a> enabled the test which was previously failing due to inaccessible github repo...</li> <li>Additional commits viewable in <a href="https://github.com/trufflesecurity/trufflehog/compare/116e7171542d2f1dad8810f00dcfacbe0b809183...7f4e37db2d928c18ddd7ddf0604f8f7d1f5793ec">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=trufflesecurity/trufflehog&package-manager=github_actions&previous-version=3.92.5&new-version=3.93.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
diff --git a/.github/workflows/quality.yml b/.github/workflows/quality.yml
@@ -18,7 +18,7 @@ jobs:
           find . -type f -perm /111 -name "*.sh" | head -10 || true
       
       - name: Check for secrets
-        uses: trufflesecurity/trufflehog@116e7171542d2f1dad8810f00dcfacbe0b809183 # v3.92.5
+        uses: trufflesecurity/trufflehog@7f4e37db2d928c18ddd7ddf0604f8f7d1f5793ec # v3.93.0
         with:
           path: ./
           base: ${{ github.event.pull_request.base.sha || github.event.before }}
diff --git a/.github/workflows/secret-scanner.yml b/.github/workflows/secret-scanner.yml
@@ -18,7 +18,7 @@ jobs:
           fetch-depth: 0  # Full history for scanning
 
       - name: TruffleHog Secret Scan
-        uses: trufflesecurity/trufflehog@116e7171542d2f1dad8810f00dcfacbe0b809183 # v3
+        uses: trufflesecurity/trufflehog@7f4e37db2d928c18ddd7ddf0604f8f7d1f5793ec # v3
         with:
           extra_args: --only-verified --fail
 
