Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: trufflesecurity/trufflehog
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v3.88.35
Choose a base ref
...
head repository: trufflesecurity/trufflehog
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v3.89.0
Choose a head ref
  • 15 commits
  • 50 files changed
  • 9 contributors

Commits on May 29, 2025

  1. Stripe Payment Intent Detector (#4138)

    * stripe payment intent detector added
    
    * updated the stripe payment intent detector to verify the payment intents
    
    * tests updated for stripe payment intent
    
    * simplified code in the stripe payment intent detector
    
    * fetch secrets from gcp
    
    * updated stripe api return values for 400 and above cases
    
    * fixed integration test
    
    * updated the stripe payment intent detector keywords
    
    * updated the stripe payment intent detector to store the client secrets against all keys
    
    * simplified code
    
    * improved the client secret verification logic
    shahzadhaider1 authored May 29, 2025
    Configuration menu
    Copy the full SHA
    1ca22a6 View commit details
    Browse the repository at this point in the history

Commits on Jun 2, 2025

  1. Added support to scan github commit metadata for targeted scans (#4189)

    * Added support to scan github commit metadata for targeted scans
    
    * added log
    
    * add commit hash in context
    
    * move context value adding to scanTarget
    
    * added v2 log
    kashifkhan0771 authored Jun 2, 2025
    Configuration menu
    Copy the full SHA
    957ece9 View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    5fca163 View commit details
    Browse the repository at this point in the history

Commits on Jun 3, 2025

  1. Configuration menu
    Copy the full SHA
    1484992 View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    45655e9 View commit details
    Browse the repository at this point in the history

Commits on Jun 4, 2025

  1. chore(actions): check to install jq if it is not already (#4000)

    - Change single quotes to double quotes for consistency
    - Add a check to install `jq` if it is not already installed
    
    Signed-off-by: Bo-Yi Wu <appleboy.tw@gmail.com>
    Co-authored-by: Kashif Khan <70996046+kashifkhan0771@users.noreply.github.com>
    Co-authored-by: Nabeel Alam <nabeelalam811@gmail.com>
    3 people authored Jun 4, 2025
    Configuration menu
    Copy the full SHA
    f3b7c13 View commit details
    Browse the repository at this point in the history
  2. Added new version for heroku detector (#4201)

    * Added new version for heroku detector
    
    * updated integration tests
    kashifkhan0771 authored Jun 4, 2025
    Configuration menu
    Copy the full SHA
    8b6aac3 View commit details
    Browse the repository at this point in the history

Commits on Jun 5, 2025

  1. [fix] Report the unit in a single scan job (#4209)

    * [fix] Report the unit in a single scan job
    
    * Eliminate divide by 0 possibility
    mcastorina authored Jun 5, 2025
    Configuration menu
    Copy the full SHA
    ab1b459 View commit details
    Browse the repository at this point in the history
  2. Remove job ID from bytes_scanned and chunks_scanned metrics (#4206)

    We have several metrics that have captured job ID as a dimension. This is, in a strict sense, "wrong" because the cardinality is unbounded, but our job counts have been low enough that we've been able to get away with it. However, recent exploration of a new distributed job technique has caused job counts to substantially increase, and this extra, "incorrect" dimension is now harder to justify.
    
    We have been recently seeing some trouble with some of our Prometheus scrapes, and while I haven't drawn a direct connection between that trouble and the increased cardinality, I do know that we don't use the job ID dimension anywhere. We always sum it away! So this commit removes it. We're shouldn't be doing it, we're not using it, and it might be causing problems we're seeing.
    rosecodym authored Jun 5, 2025
    Configuration menu
    Copy the full SHA
    5581f08 View commit details
    Browse the repository at this point in the history
  3. Pass Context Through Postman NewRequest (#4190)

    This allows the underlying http request to respect the context
    martinlocklear authored Jun 5, 2025
    Configuration menu
    Copy the full SHA
    29c53eb View commit details
    Browse the repository at this point in the history

Commits on Jun 6, 2025

  1. Configuration menu
    Copy the full SHA
    603767f View commit details
    Browse the repository at this point in the history
  2. Add support for defining sources via a config file (#4172)

    * Add config.proto
    
    * Make protos
    
    * Add ConfigurableSource implementation
    
    * Parse config protoyaml into configured sources
    
    * Refactor setting postman keywords into a helper method on the engine
    
    * Add scan subcommand and plumb it all together
    
    * Refactor ConfigurableSource to ConfiguredSource
    
    * Export AhoCorasickCoreKeywords and return the set
    
    * Disallow source configurations for non-scan subcommands
    
    * Fix stdin scan compilation errors
    
    * Rename command to multi-scan
    
    * Add config file documentation
    
    * Add more documentation for ConfiguredSource
    
    * Replace initFunc closure with an embedded anonymous struct
    
    * Assign directly to refs
    
    * Fix typo
    mcastorina authored Jun 6, 2025
    1 Configuration menu
    Copy the full SHA
    ce3f2ae View commit details
    Browse the repository at this point in the history
  3. Updated OpenAI Analyzer (#4203)

    * Updated OpenAI Analyzer
    
    * fixed test
    kashifkhan0771 authored Jun 6, 2025
    Configuration menu
    Copy the full SHA
    d1feae1 View commit details
    Browse the repository at this point in the history
  4. Jiratoken Analyzer (#4193)

    * jira token analyzer init
    
    * added api requests in jiratoken analyzer
    
    * more apis added for jira resources
    
    * removed unnecessary code
    
    * added test for jira token analyzer
    
    * repeat resources in analyzer result based on assigned permissions of jira token
    
    * simplified the code
    
    * updated secret manager for analyzer tests
    shahzadhaider1 authored Jun 6, 2025
    Configuration menu
    Copy the full SHA
    da08d9b View commit details
    Browse the repository at this point in the history
  5. Fix git commit validation (#4192)

    * cleanup git commit validation
    
    * fixed local git repo validation
    
    * added remote commit validation
    
    * removed remote repo commit validation
    kashifkhan0771 authored Jun 6, 2025
    Configuration menu
    Copy the full SHA
    3fbb9e9 View commit details
    Browse the repository at this point in the history
Loading