Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: trufflesecurity/trufflehog
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v3.81.9
Choose a base ref
...
head repository: trufflesecurity/trufflehog
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v3.81.10
Choose a head ref
  • 15 commits
  • 17 files changed
  • 6 contributors

Commits on Aug 17, 2024

  1. fix(deps): update module github.com/sendgrid/sendgrid-go to v3.15.0+i…

    …ncompatible (#3214)
    
    Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
    renovate[bot] authored Aug 17, 2024
    Configuration menu
    Copy the full SHA
    3625d6a View commit details
    Browse the repository at this point in the history

Commits on Aug 20, 2024

  1. fix(deps): update module github.com/charmbracelet/bubbletea to v0.27.0 (

    #3229)
    
    Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
    renovate[bot] authored Aug 20, 2024
    Configuration menu
    Copy the full SHA
    e5cba69 View commit details
    Browse the repository at this point in the history
  2. chore(deps): update golang docker tag to v1.23 (#3228)

    * chore(deps): update golang docker tag to v1.23
    
    * Update Dockerfile.protos
    
    ---------
    
    Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
    Co-authored-by: Dustin Decker <dustin@trufflesec.com>
    renovate[bot] and dustin-decker authored Aug 20, 2024
    Configuration menu
    Copy the full SHA
    3f4d411 View commit details
    Browse the repository at this point in the history
  3. fix(deps): update module github.com/prometheus/client_golang to v1.20…

    ….1 (#3236)
    
    Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
    renovate[bot] authored Aug 20, 2024
    Configuration menu
    Copy the full SHA
    772f164 View commit details
    Browse the repository at this point in the history
  4. fix(deps): update module google.golang.org/api to v0.192.0 (#3237)

    Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
    renovate[bot] authored Aug 20, 2024
    Configuration menu
    Copy the full SHA
    4f945bf View commit details
    Browse the repository at this point in the history
  5. fix(deps): update module google.golang.org/api to v0.193.0 (#3238)

    Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
    renovate[bot] authored Aug 20, 2024
    Configuration menu
    Copy the full SHA
    f56f321 View commit details
    Browse the repository at this point in the history
  6. fix(deps): update testcontainers-go monorepo to v0.33.0 (#3239)

    Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
    renovate[bot] authored Aug 20, 2024
    Configuration menu
    Copy the full SHA
    0e8b433 View commit details
    Browse the repository at this point in the history
  7. fix(deps): update module cloud.google.com/go/secretmanager to v1.14.0 (

    …#3240)
    
    Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
    renovate[bot] authored Aug 20, 2024
    Configuration menu
    Copy the full SHA
    a0400c1 View commit details
    Browse the repository at this point in the history

Commits on Aug 21, 2024

  1. Customize results cleaning (using smuggled interface) (#3235)

    We have identified some cases in which the results "cleaning" logic (the logic that eliminates superfluous results) should not run. In order to allow this, we need to expose the cleaning logic to the engine. This PR does so by doing these things:
    
    - Create a CustomResultsCleaner interface that can be implemented by detectors that want to use custom cleaning logic
    - Implement this interface for the aws and awssessionkey detectors (and remove their previous invocation of their custom cleaning logic)
    - Modify the engine to invoke this logic (conditionally)
    
    This PR also removes the "custom" cleaning logic for the opsgenie, razorpay, and twilio detectors, because it was added erroneously.
    
    This is an alternative implementation of #3233.
    rosecodym authored Aug 21, 2024
    Configuration menu
    Copy the full SHA
    f39a525 View commit details
    Browse the repository at this point in the history

Commits on Aug 23, 2024

  1. Skip filtration for targeted scans #3243

    There is a scenario in which results filtration is known to cause problems, and this PR disables it in that scenario. (It should cause problems more generally, but lacking any concrete cases of that, I want to tread lightly.)
    rosecodym authored Aug 23, 2024
    Configuration menu
    Copy the full SHA
    8f299ff View commit details
    Browse the repository at this point in the history
  2. Strip leading +/- from github target diffs (#3244)

    The GitHub source generates chunks for targeted scans differently than it does for "normal" scans. One difference was the presence of leading + and - characters, which can interfere with detection in some cases.
    rosecodym authored Aug 23, 2024
    Configuration menu
    Copy the full SHA
    3b0b290 View commit details
    Browse the repository at this point in the history

Commits on Aug 26, 2024

  1. Th 899 postman panic issue (#3245)

    * Fixed the checks for local exported data
    
    * Fixed the check for local export files
    
    * Fixed the check for local export files
    
    * Fixed the check for local export files
    
    * Merge branch 'main' into th-899-postman-panic-issue
    
    * minor changes in the tests
    
    * test update
    
    * test
    LaraCroftDev authored Aug 26, 2024
    Configuration menu
    Copy the full SHA
    69f5d9b View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    247b56a View commit details
    Browse the repository at this point in the history

Commits on Aug 29, 2024

  1. Download files when reverifying (#3252)

    The previous implementation of targeted file scanning pulled patches out of commit data, which didn't work for binary files (because GitHub doesn't return patches for them). This PR changes the system to always just download the requested file and scan it, which means we get binary file support.
    rosecodym authored Aug 29, 2024
    Configuration menu
    Copy the full SHA
    dbc1464 View commit details
    Browse the repository at this point in the history
  2. Update buffer (#3255)

    ahrav authored Aug 29, 2024
    Configuration menu
    Copy the full SHA
    06bbd6f View commit details
    Browse the repository at this point in the history
Loading