chore(deps): bump trufflesecurity/trufflehog from 3.94.1 to 3.94.2 (#39)

dependabot[bot] · web-flow · commit 7749cded6d44 · 2026-04-03T00:22:49.000+01:00
Bumps [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) from 3.94.1 to 3.94.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/trufflesecurity/trufflehog/releases">trufflesecurity/trufflehog's releases</a>.</em></p> <blockquote> <h2>v3.94.2</h2> <h2>What's Changed</h2> <ul> <li>Skip TestAPKHandler by <a href="https://github.com/shahzadhaider1"><code>@​shahzadhaider1</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4841">trufflesecurity/trufflehog#4841</a></li> <li>fix: replace release-guard workflow with revert-latest job by <a href="https://github.com/sysread"><code>@​sysread</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4838">trufflesecurity/trufflehog#4838</a></li> <li>Deprecated GoogleAPIKey Detector by <a href="https://github.com/nabeelalam"><code>@​nabeelalam</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4853">trufflesecurity/trufflehog#4853</a></li> <li>todoist: replace deprecated verification endpoint by <a href="https://github.com/rai1612"><code>@​rai1612</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4828">trufflesecurity/trufflehog#4828</a></li> <li>Add Shopify OAuth Detector by <a href="https://github.com/amanfcp"><code>@​amanfcp</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4738">trufflesecurity/trufflehog#4738</a></li> <li>[INS-425] Updated google.golang.org/grpc v1.78.0 --&gt; v1.79.3 by <a href="https://github.com/MuneebUllahKhan222"><code>@​MuneebUllahKhan222</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4852">trufflesecurity/trufflehog#4852</a></li> <li>[INS-421] Re-enabled TestAPKHandler test and updated artifact url by <a href="https://github.com/MuneebUllahKhan222"><code>@​MuneebUllahKhan222</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4856">trufflesecurity/trufflehog#4856</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/sysread"><code>@​sysread</code></a> made their first contribution in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4838">trufflesecurity/trufflehog#4838</a></li> <li><a href="https://github.com/rai1612"><code>@​rai1612</code></a> made their first contribution in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4828">trufflesecurity/trufflehog#4828</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/trufflesecurity/trufflehog/compare/v3.94.1...v3.94.2">https://github.com/trufflesecurity/trufflehog/compare/v3.94.1...v3.94.2</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/6bd2d14f7a4bc1e569fa3550efa7ec632a4fa67b"><code>6bd2d14</code></a> Re-enabled TestAPKHandler test and updated artifact url (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4856">#4856</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/681b305b3c25ba6e559e64558681d54f106b52a5"><code>681b305</code></a> Updated google.golang.org/grpc v1.78.0 --&gt; v1.79.3 (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4852">#4852</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/e81c0fc0998cc1d62c54bab26c8d665691046538"><code>e81c0fc</code></a> Add Shopify OAuth Detector (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4738">#4738</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/03acc788f836627f46bda2bdb7bf4e2b0ca0217f"><code>03acc78</code></a> todoist: replace deprecated verification endpoint (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4828">#4828</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/bfaa370c786fdbee989d2cee76cf29ee8bb748ae"><code>bfaa370</code></a> updated detectors.proto and made protos (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4853">#4853</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/6171fa9f6676edf21e15bba41f049b18399d7372"><code>6171fa9</code></a> fix: replace release-guard workflow with revert-latest job (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4838">#4838</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/61d57c10a563ba8a33a4c4205c85b5b3505a050e"><code>61d57c1</code></a> skipping TestAPKHandler because the apk file being used in this test is unava...</li> <li>See full diff in <a href="https://github.com/trufflesecurity/trufflehog/compare/586f66d7886cd0b037c7c245d4a6e34ef357ab10...6bd2d14f7a4bc1e569fa3550efa7ec632a4fa67b">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=trufflesecurity/trufflehog&package-manager=github_actions&previous-version=3.94.1&new-version=3.94.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
diff --git a/.github/workflows/quality.yml b/.github/workflows/quality.yml
@@ -19,7 +19,7 @@ jobs:
           find . -type f -perm /111 -name "*.sh" | head -10 || true
       
       - name: Check for secrets
-        uses: trufflesecurity/trufflehog@586f66d7886cd0b037c7c245d4a6e34ef357ab10 # v3.94.1
+        uses: trufflesecurity/trufflehog@6bd2d14f7a4bc1e569fa3550efa7ec632a4fa67b # v3.94.2
         with:
           path: ./
           base: ${{ github.event.pull_request.base.sha || github.event.before }}
diff --git a/.github/workflows/secret-scanner.yml b/.github/workflows/secret-scanner.yml
@@ -19,7 +19,7 @@ jobs:
           fetch-depth: 0  # Full history for scanning
 
       - name: TruffleHog Secret Scan
-        uses: trufflesecurity/trufflehog@586f66d7886cd0b037c7c245d4a6e34ef357ab10 # v3
+        uses: trufflesecurity/trufflehog@6bd2d14f7a4bc1e569fa3550efa7ec632a4fa67b # v3
         with:
           extra_args: --only-verified --fail
 
