Releases: trufflesecurity/trufflehog
Releases · trufflesecurity/trufflehog
v3.90.12
What's Changed
- Updated Docker source with new test cases and README by @kashifkhan0771 in #4481
- Comment out broken CircleCI integration test by @trufflesteeeve in #4505
- Fix "skipping binary file" logging to show actual file name by @mariduv in #4509
- Refactored circleci source test cases by @kashifkhan0771 in #4506
- added ability to run github-experimental against private repos by @joeleonjr in #4508
- explicit repositories now bypass wantRepo() filtering entirely. added ctx to newConnector by @jordanTunstill in #4507
- Remove include repos by @jordanTunstill in #4469
- Remove depaware by @rosecodym in #4515
Full Changelog: v3.90.11...v3.90.12
v3.90.11
v3.90.10
What's Changed
- Local Git Config Sanitization by @joeleonjr in #4502
Full Changelog: v3.90.9...v3.90.10
v3.90.9
What's Changed
- Return non-zero exit code if an error occurs during a scan. by @mplzik in #4476
- Fix: SonarCloud Verification Logic by @shahzadhaider1 in #4482
- Clarify what 'unknown' means by @dustin-decker in #4477
- Proto update to support scanning confluence comments by @mustansir14 in #4484
- Fix SSH schema error executing git clone by @shahzadhaider1 in #4488
- Detect Organization ID to pass into AnalysisInfo for Atlassian Detector by @mustansir14 in #4480
- Add support for Account API Token verification in Postmark Detector by @mustansir14 in #4495
- refactor: use b.Loop() to simplify the code and improve performance by @dulanting in #4497
- Fix wrong line number in private key detector (#4485) by @kmgv in #4486
- Reduce GitHub V1 Detector False Positives by @shahzadhaider1 in #4494
- Bump github.com/nwaples/rardecode/v2 from 2.0.0-beta.4.0.20241112120701-034e449c6e78 to 2.2.0 by @dependabot[bot] in #4501
New Contributors
- @mplzik made their first contribution in #4476
- @mustansir14 made their first contribution in #4484
- @dulanting made their first contribution in #4497
- @kmgv made their first contribution in #4486
Full Changelog: v3.90.8...v3.90.9
v3.90.8
What's Changed
- Pre-filter GitHub v1 findings to prevent large numbers of validation requests by @trufflesteeeve in #4468
Full Changelog: v3.90.7...v3.90.8
v3.90.7
What's Changed
- Fix nondeterminism in custom detectors by @bradlarsen in #4446
- fix(deps): update aws-sdk-go-v2 monorepo by @renovate[bot] in #4433
- fix(deps): update module github.com/couchbase/gocb/v2 to v2.11.0 by @renovate[bot] in #4455
- fix(deps): update module google.golang.org/protobuf to v1.36.9 by @renovate[bot] in #4456
- fix(deps): update module github.com/brianvoe/gofakeit/v7 to v7.6.0 by @renovate[bot] in #4457
- [Feature] Fixed And Updated FlightLabs API Detector by @nabeelalam in #4393
- Revert "Improved and fixed copper detector (#4394)" by @camgunz in #4470
- Add metrics to SaneHTTPClient by @amanfcp in #4471
Full Changelog: v3.90.6...v3.90.7
v3.90.6
What's Changed
- Added support for indeterminate verification for letter Q detectors by @patidartanay in #4398
- [Detector] rippling detector for phrase api tokens by @SyedAliHamad in #4348
- Added explicit secrets manager write flag to Bitbucket source proto and generate new files by @casey-tran in #4403
- [Feature] Updated Dotmailer Detector To Dotdigital by @nabeelalam in #4331
- Add support for AWS account allow and deny lists by @dustin-decker in #4407
- Enable cloning repository to a specified location with retention option by @kashifkhan0771 in #4408
- fix(deps): update module google.golang.org/protobuf to v1.36.8 by @renovate[bot] in #4397
- fix(deps): update module cloud.google.com/go/storage to v1.56.1 by @renovate[bot] in #4412
- added flyio detector by @lonmarsDev in #2381
- Added a dedicated optional flag to ignore gists during scan by @kashifkhan0771 in #4423
- Fix git tests if run with global commit.gpgsign=true by @mariduv in #4415
- Recover logger if wrapped by a non-logging context implementation by @mcastorina in #4406
- fix(deps): update aws-sdk-go-v2 monorepo by @renovate[bot] in #4422
- fix(deps): update module github.com/gabriel-vasile/mimetype to v1.4.10 by @renovate[bot] in #4424
- [GitHub] Add a GraphQL client to the connector by @rgmz in #3837
- Added support for additional validation rules in custom detector by @kashifkhan0771 in #4413
- Ignore known common prefix matches for Github V1 detector by @kashifkhan0771 in #4379
- Fix error propagation and a typo in verification logic by @bradlarsen in #4427
- [Feature] Added Detector for the Photoroom API by @nabeelalam in #4414
- Scan Github Private Repositories With Token by @kashifkhan0771 in #4426
- fix(deps): update module github.com/brianvoe/gofakeit/v7 to v7.5.1 by @renovate[bot] in #4425
- fix(deps): update module github.com/jedib0t/go-pretty/v6 to v6.6.8 by @renovate[bot] in #4396
- Fix legacy json flag for Github and Gitlab private repos by @shahzadhaider1 in #4386
- Changes to fix Enterprise UI filtering of Github Hosted Scanner Repositories to Include by @jordanTunstill in #4430
- pkg: fix some typos in comment by @vetclippy in #4440
- Added feature flag to configure projects per page in gitlab enumeration by @kashifkhan0771 in #4437
New Contributors
- @patidartanay made their first contribution in #4398
- @bradlarsen made their first contribution in #4427
- @vetclippy made their first contribution in #4440
Full Changelog: v3.90.5...v3.90.6
v3.90.5
What's Changed
- Fixed and improved currentsapi detector by @kashifkhan0771 in #4391
- Improved and fixed copper detector by @kashifkhan0771 in #4394
- fix(deps): update module github.com/bradleyfalzon/ghinstallation/v2 to v2.16.0 by @renovate[bot] in #4342
- fix(deps): update module github.com/sendgrid/sendgrid-go to v3.16.1+incompatible by @renovate[bot] in #4232
- Utf16 bom support by @joeleonjr in #4326
- Add additional unicode escape support by @jltrfl in #4296
- Update PreCommit.md with audit mode details by @joeleonjr in #4280
- Update proto definitions for custom bitbucket oauth by @casey-tran in #4390
New Contributors
Full Changelog: v3.90.4...v3.90.5
v3.90.4
What's Changed
- Disabled besnappy detector by @kashifkhan0771 in #4363
- Expanded test coverage for binary content by @kashifkhan0771 in #4332
- Fixed syslog source panic on invalid or chunked input by @kashifkhan0771 in #4366
- Improve Bitfinex Detector - Implemented API-Based Secret Validation by @shahzadhaider1 in #4368
- [SCAN-81] Report ChunkUnit Panics by @mariduv in #4367
- Oss 133 new detector vault approle auth for hashicorp by @SyedAliHamad in #4362
- fix(deps): update module github.com/charmbracelet/glamour to v0.10.0 by @renovate[bot] in #4345
- Add private key id to GCP metadata by @dustin-decker in #4361
- fixed minor grammatical and punctuation issues by @shahzadhaider1 in #4369
- Refactored caflou detector by @kashifkhan0771 in #4372
- Add option to skip binary files during filesystem source scanning by @dustin-decker in #4376
- Improved and fixed couchbase detector by @kashifkhan0771 in #4383
- Fixed and improved Clickhelp detector by @kashifkhan0771 in #4384
- Fix error-wrapping for callback in common.RecoverWithHandler by @mariduv in #4380
- Fixed gitlab detector by @kashifkhan0771 in #4371
- [Feature] Fixed And Updated Fibery Detecor by @nabeelalam in #4385
- added User to proto by @jordanTunstill in #4378
New Contributors
Full Changelog: v3.90.3...v3.90.4
v3.90.3
What's Changed
- Refactored Gitlab Detectors by @kashifkhan0771 in #4323
- Support sub-unit resumption in filesystem scans by @mcastorina in #4325
- Arranged the detectors in alphabetical order by @shahzadhaider1 in #4335
- fix(deps): update module cloud.google.com/go/storage to v1.56.0 by @renovate[bot] in #4311
- (fix) Git Repo Cloning Error by @abmussani in #4223
- chore(deps): update sigstore/cosign-installer action to v3.9.2 by @renovate[bot] in #4337
- fix(deps): update module cloud.google.com/go/secretmanager to v1.15.0 by @renovate[bot] in #4310
- fix(deps): update aws-sdk-go-v2 monorepo by @renovate[bot] in #4338
- fix(deps): update module github.com/couchbase/gocb/v2 to v2.10.1 by @renovate[bot] in #4340
- fix(deps): update module github.com/golang-jwt/jwt/v5 to v5.2.3 by @renovate[bot] in #4341
- fix(deps): update module github.com/aws/smithy-go to v1.22.5 by @renovate[bot] in #4339
- chore: updated defaults.go references in documentation for adding new detectors by @Jeff-Rowell in #4344
- fix(deps): update module github.com/brianvoe/gofakeit/v7 to v7.3.0 by @renovate[bot] in #4343
- feat: add webexbot support by @jonathongardner in #4322
- Regenerate protobufs with the correct protoc (etc) version by @camgunz in #4349
- fix GCS test by @dustin-decker in #4350
- [Detector]-Detector for tableau personal access token by @SyedAliHamad in #4261
- Scan GitLab Groups by @shahzadhaider1 in #4320
- Fixed Aha detector by @kashifkhan0771 in #4354
- Updated Github V1 detector to ignore matches with known common prefixes by @kashifkhan0771 in #4329
- fix(deps): update module github.com/docker/docker to v28.3.3+incompatible [security] by @renovate[bot] in #4355
- removed duplicate detector entries from engine defaults by @shahzadhaider1 in #4357
- Missed Smartsheet Tokens by @shahzadhaider1 in #4358
- Do not quit TUI, if 'q' is pressed on specific pages by @kashifkhan0771 in #4356
- Improve LarkSuite Detector Accuracy and Error Handling by @shahzadhaider1 in #4334
- [detector] feat: added rootly detector by @sahil9001 in #3414
- Improved and fixed A&B detectors pattern test cases by @kashifkhan0771 in #4359
- Restore link field in Slack Continuous Source protobuf message by @camgunz in #4360
- fix: fixed verification endpoint and verification logic for brand fetch by @sahil9001 in #3470
New Contributors
- @Jeff-Rowell made their first contribution in #4344
- @jonathongardner made their first contribution in #4322
Full Changelog: v3.90.2...v3.90.3