trufflehog/trufflehog.changes

676 lines
33 KiB
Plaintext
Raw Normal View History

-------------------------------------------------------------------
Mon Aug 28 15:05:32 UTC 2023 - felix.niederwanger@suse.com
- Update to version 3.53.0:
* [chore] - Prevent nil deref panic (#1709)
* Support cancelling a run from a JobProgressRef (#1663)
* Test S3 role assumption (#1655)
* Add SourceName to JobProgressRef (#1664)
* Support azure git links (#1662)
* Capture source-reported progress in JobProgress snapshot (#1661)
* Add ElapsedTime method to JobProgressMetrics (#1660)
* add snowflake detector (#1653)
* Update launchdarkly regex, support sdk keys, add tri-state verification (#1645)
* [chore] - update benchmarks. (#1641)
* [chore] - update comments and logs. (#1654)
* Include the job ID in a chunk (#1652)
* add rate limit and consumption metrics for GitHub (#1651)
* update s3 test bucket (#1649)
* Fix reversed ordering of arguments (#1648)
* add thog CLI support for GitHub config validate (#1626)
* wait before finishing s3 test (#1647)
* Add tri-state verification to sqlserver detector (#1624)
* Only scan gist comments or repo comments. (#1646)
-------------------------------------------------------------------
Fri Aug 18 08:06:27 UTC 2023 - felix.niederwanger@suse.com
- Update to version 3.52.0:
* add role assumption for s3 source (#1477)
* [bug] - handle IOOR panic (#1639)
* updat test file. (#1637)
* [bug] - Correctly reset reader before handling archive chunk data (#1636)
-------------------------------------------------------------------
Thu Aug 17 13:04:29 UTC 2023 - felix.niederwanger@suse.com
- Update to version 3.47:
* [bug] - copy chunk before sending on chunksChan (#1633)
* Add ScanChunk to allow injecting Chunks into the SourceManager's channel (#1634)
* correct logging output for github comments and add oss flags (#1632)
* [chore] - Use custom context for archive handler of specialized archives (#1629)
* add salesforce detector (#1608)
* Integration of SpecializedHandler for Enhanced Archive Processing (#1625)
* fix github org placeholder (#1627)
* bump go to 1.21 (#1623)
* change verification endpoint (#1611)
* add huggingface detector (#1621)
* Refactor FragmentLineOffset to match multiline secrets (#1612)
* fix alchemy test error message (#1622)
* Docker scanning by digest (#1615)
* Use the common chunker for scanning the filesystem source (#1619)
* Support indeterminate verification in Gitlab detector (#1613)
* stop saving alchemy url (#1614)
* Add tri-state verification to pubnub publish key detector (#1616)
* fix error msg in alchemy test (#1617)
* Add terminal UI (#1593)
* implement tri-state verification in FTP detector (#1604)
* Move commits_scanned to ScanRepo (#1610)
* Use common chunk reader (#1596)
* Tweak template detector test code (#1609)
Accepting request 1102309 from home:ph03nix - Update to version 3.46.3: * Detect API keys without app keys (#1605) * Adjust regex and add tests (#1602) * Use SourceManager in engine (#1586) * implement indeterminate LDAP verification (#1574) * Fix nil pointer dereference to git ScanOptions (#1603) * initial support for bare repositories (#1499) * Common chunk reader (#1594) * Add commits scanned to log (#1600) * include scan duration in output log (#1598) * Make prints to stdout serial. (#1597) - Update to version 3.46.2: * add tri-state verification to mongodb detector by @rosecodym in #1575 * create hidden debug flag to disable overseer by @zubairk14 in #1582 * Fix VirusTotal deetector by @ahrav in #1585 * Refactor git source to allow ScanOptions and use source in engine by @mcastorina in #1518 * S3 panic send on closed channel by @ahrav in #1589 - Update to version 3.46.1: * [bug] - Fix unlocking an unlocked mutex by @ahrav in #1583 - Update to version 3.46.0: * Increase log level of engine messages by @dustin-decker in #1576 * Initialize the default logger to output to stderr by @mcastorina in #1569 * Fix runtime error when scanning Gist comments by @rgmz in #1552 * Do not nest transports for Github installation client by @rosecodym in #1564 * Identify transient AWS verification failures by @rosecodym in #1563 * Support fatal errors in job reports by @mcastorina in #1562 * Fix pubnub regular expression by @mcastorina in #1565 * gitparse: Use an object for currentDiff by @mcastorina in #1573 * Concurrent detection by @ahrav in #1580 * Replace magic strings with const by @ahrav in #1568 OBS-URL: https://build.opensuse.org/request/show/1102309 OBS-URL: https://build.opensuse.org/package/show/devel:languages:go/trufflehog?expand=0&rev=13
2023-08-04 20:22:55 +00:00
-------------------------------------------------------------------
Fri Aug 04 08:05:50 UTC 2023 - felix.niederwanger@suse.com
- Update to version 3.46.3:
* Detect API keys without app keys (#1605)
* Adjust regex and add tests (#1602)
* Use SourceManager in engine (#1586)
* implement indeterminate LDAP verification (#1574)
* Fix nil pointer dereference to git ScanOptions (#1603)
* initial support for bare repositories (#1499)
* Common chunk reader (#1594)
* Add commits scanned to log (#1600)
* include scan duration in output log (#1598)
* Make prints to stdout serial. (#1597)
- Update to version 3.46.2:
* add tri-state verification to mongodb detector by @rosecodym in #1575
* create hidden debug flag to disable overseer by @zubairk14 in #1582
* Fix VirusTotal deetector by @ahrav in #1585
* Refactor git source to allow ScanOptions and use source in engine by @mcastorina in #1518
* S3 panic send on closed channel by @ahrav in #1589
- Update to version 3.46.1:
* [bug] - Fix unlocking an unlocked mutex by @ahrav in #1583
- Update to version 3.46.0:
* Increase log level of engine messages by @dustin-decker in #1576
* Initialize the default logger to output to stderr by @mcastorina in #1569
* Fix runtime error when scanning Gist comments by @rgmz in #1552
* Do not nest transports for Github installation client by @rosecodym in #1564
* Identify transient AWS verification failures by @rosecodym in #1563
* Support fatal errors in job reports by @mcastorina in #1562
* Fix pubnub regular expression by @mcastorina in #1565
* gitparse: Use an object for currentDiff by @mcastorina in #1573
* Concurrent detection by @ahrav in #1580
* Replace magic strings with const by @ahrav in #1568
* [bug] - fix data races by @ahrav in #1577
* [bug] - fix shodan detector by @ahrav in #1579
-------------------------------------------------------------------
Fri Jul 28 09:49:25 UTC 2023 - Felix Niederwanger <felix.niederwanger@suse.com>
- trufflehog-v3.35.2
* Pass GitHub apiEndpoint for basic or no auth by @rgmz in #1454
* Bump github.com/xanzy/go-gitlab from 0.86.0 to 0.88.0 by @dependabot in #1522
* Bump github.com/google/go-containerregistry from 0.14.0 to 0.15.2 by @dependabot in #1504
* Add SourceManager tests for Run and Wait methods by @mcastorina in #1530
* Improve log message when scanning GitHub comments by @rgmz in #1553
* Bump github.com/bradleyfalzon/ghinstallation/v2 from 2.4.0 to 2.6.0 by @dependabot in #1503
* Bump github.com/go-git/go-git/v5 from 5.8.0 to 5.8.1 by @dependabot in #1554
* [MongoDB] Detect CosmoDB access keys by @rgmz in #1511
* Override broken dependency version by @dustin-decker in #1558
* Add azure repos protos by @ahrav in #1559
* add merge support by @zricethezav in #1561
-------------------------------------------------------------------
Fri Jul 28 09:45:30 UTC 2023 - Felix Niederwanger <felix.niederwanger@suse.com>
- trufflehog-v3.35.1
* [chore] - optimize chunker by @ahrav in #1535
* Add commitsScanned metrics by @bill-rich in #1533
* Make Ahocorasick matching case insensitive by @zricethezav in #1547
* Fix data race in context wrapper library by @mcastorina in #1546
* Update gitparse logic by @rgmz in #1486
Accepting request 1100549 from home:ph03nix - trufflehog-v3.35.0 * [chore] - Update loop to switch. by @ahrav in #1487 * Rewrite SourceUnitEnumerator to use UnitReporter instead of a channel by @mcastorina in #1485 * Define SourceUnit chunking interface by @mcastorina in #1484 * fix twilio verification side effect by @brandonjyan in #1494 * Fix URI detector false positives when the redacted password has been URL encoded by @trufflesteeeve in #1489 * add envoy api key scanner by @brandonjyan in #1482 * add couchbase scanner to defaults by @brandonjyan in #1497 * tweak jdbc redaction by @rosecodym in #1490 * add launch_darkly keyword to launchdarkly scanner by @brandonjyan in #1495 * [chore] - update detector template file by @ahrav in #1500 * add thog enterprise detector for web keys by @zubairk14 in #1448 * use Go 1.20 for all github workflows by @rosecodym in #1508 * unify JDBC detector ping logic by @rosecodym in #1506 * add dockerhub scanner by @brandonjyan in #1496 * JDBC indeterminacy by @rosecodym in #1507 * [chore] Remove parent setting / getting in Context wrapper by @mcastorina in #1516 * Revert "[chore] Remove parent setting / getting in Context wrapper (#… by @mcastorina in #1519 * Bump github.com/googleapis/gax-go/v2 from 2.11.0 to 2.12.0 by @dependabot in #1501 * Bump google.golang.org/api from 0.130.0 to 0.131.0 by @dependabot in #1502 * Bump github.com/go-git/go-git/v5 from 5.7.0 to 5.8.0 by @dependabot in #1523 * capture JSON error in AWS detector by @rosecodym in #1509 * Decrease frequency of dependabot alerts to monthly by @zricethezav in #1524 * Support indeterminacy in alchemy and update detector docs by @rosecodym in #1510 * [chore] Remove parent manipulation in context package by @mcastorina in #1525 * Implement SourceManager basics by @mcastorina in #1515 * Correctly route pprof endpoint by @mcastorina in #1527 * [chore] - Remove password info from log by @ahrav in #1528 * continue scanning on detector / decoder panic by @dustin-decker in #863 * Add match boundary to okta regular expressions by @mcastorina in #1531 OBS-URL: https://build.opensuse.org/request/show/1100549 OBS-URL: https://build.opensuse.org/package/show/devel:languages:go/trufflehog?expand=0&rev=11
2023-07-25 14:57:45 +00:00
-------------------------------------------------------------------
Tue Jul 25 07:00:24 UTC 2023 - Felix Niederwanger <felix.niederwanger@suse.com>
- trufflehog-v3.35.0
* [chore] - Update loop to switch. by @ahrav in #1487
* Rewrite SourceUnitEnumerator to use UnitReporter instead of a channel by @mcastorina in #1485
* Define SourceUnit chunking interface by @mcastorina in #1484
* fix twilio verification side effect by @brandonjyan in #1494
* Fix URI detector false positives when the redacted password has been URL encoded by @trufflesteeeve in #1489
* add envoy api key scanner by @brandonjyan in #1482
* add couchbase scanner to defaults by @brandonjyan in #1497
* tweak jdbc redaction by @rosecodym in #1490
* add launch_darkly keyword to launchdarkly scanner by @brandonjyan in #1495
* [chore] - update detector template file by @ahrav in #1500
* add thog enterprise detector for web keys by @zubairk14 in #1448
* use Go 1.20 for all github workflows by @rosecodym in #1508
* unify JDBC detector ping logic by @rosecodym in #1506
* add dockerhub scanner by @brandonjyan in #1496
* JDBC indeterminacy by @rosecodym in #1507
* [chore] Remove parent setting / getting in Context wrapper by @mcastorina in #1516
* Revert "[chore] Remove parent setting / getting in Context wrapper (#… by @mcastorina in #1519
* Bump github.com/googleapis/gax-go/v2 from 2.11.0 to 2.12.0 by @dependabot in #1501
* Bump google.golang.org/api from 0.130.0 to 0.131.0 by @dependabot in #1502
* Bump github.com/go-git/go-git/v5 from 5.7.0 to 5.8.0 by @dependabot in #1523
* capture JSON error in AWS detector by @rosecodym in #1509
* Decrease frequency of dependabot alerts to monthly by @zricethezav in #1524
* Support indeterminacy in alchemy and update detector docs by @rosecodym in #1510
* [chore] Remove parent manipulation in context package by @mcastorina in #1525
* Implement SourceManager basics by @mcastorina in #1515
* Correctly route pprof endpoint by @mcastorina in #1527
* [chore] - Remove password info from log by @ahrav in #1528
* continue scanning on detector / decoder panic by @dustin-decker in #863
* Add match boundary to okta regular expressions by @mcastorina in #1531
* Replace aho-corasick library by @zricethezav in #1538
-------------------------------------------------------------------
Tue Jul 18 11:37:25 UTC 2023 - Felix Niederwanger <felix.niederwanger@suse.com>
- trufflehog-v3.44.0
* fix typo
* Remove additional apk clean up in Dockerfile
* Remove the Image4 detector
* tighten up Shortcut API detector
* additional similarity check for base64 and plain
* Add new verification error message field
* Bump golang.org/x/crypto from 0.10.0 to 0.11.0
* Bump github.com/jlaffaye/ftp from 0.1.0 to 0.2.0
* Bump github.com/TheZeroSlave/zapsentry from 1.15.0 to 1.17.0
* remove old detector
* Bump google.golang.org/api from 0.129.0 to 0.130.0
* Define SourceUnit enumeration interface
* Update tests for forks so we don't fail on everything
* scan GitHub PR and issue comments
* Report indeterminacy in AWS verifier
* do not report AWS 403s as indeterminate
* Dedupe results
* Include the line number GitHub & Gitlab links
Accepting request 1097074 from home:ph03nix - trufflehog-v3.43.0 * Introduce trufflehog:ignore tag feature * remove HEAD from git diff command, rename unstaged to staged * Bump github.com/envoyproxy/protoc-gen-validate from 1.0.1 to 1.0.2 * Bump cloud.google.com/go/secretmanager from 1.11.0 to 1.11.1 * Bump google.golang.org/protobuf from 1.30.0 to 1.31.0 * Add missing keywords for sqlserver * Bump google.golang.org/api from 0.128.0 to 0.129.0 * Bump cloud.google.com/go/storage from 1.30.1 to 1.31.0 - trufflehog-v3.42.0 * Exit with non-zero exit code on chunk source error * Fix docker source to return any chunk errors * Add Couchbase Detector * Bump github.com/xanzy/go-gitlab from 0.85.0 to 0.86.0 * Use url redaction in git * Fix stripPassword * Don't return on okta credential failed verification * verify response body with expected keywords * added opsgenie detector - trufflehog-v3.41.1 * Bump github.com/docker/distribution from 2.8.1+incompatible to 2.8.2+incompatible * Implement SourceUnitUnmarshaller for all sources * Ensure results are collected correctly when verification is off, and ... * prevent www from being a key to prevent fp * Bump github.com/go-ldap/ldap/v3 from 3.4.4 to 3.4.5 * Bump go.mongodb.org/mongo-driver from 1.11.6 to 1.12.0 * Bump golang.org/x/sync from 0.2.0 to 0.3.0 * Update Slack webhook error text for verification OBS-URL: https://build.opensuse.org/request/show/1097074 OBS-URL: https://build.opensuse.org/package/show/devel:languages:go/trufflehog?expand=0&rev=9
2023-07-07 05:13:10 +00:00
-------------------------------------------------------------------
Thu Jul 6 07:57:21 UTC 2023 - Felix Niederwanger <felix.niederwanger@suse.com>
- trufflehog-v3.43.0
* Introduce trufflehog:ignore tag feature
* remove HEAD from git diff command, rename unstaged to staged
* Bump github.com/envoyproxy/protoc-gen-validate from 1.0.1 to 1.0.2
* Bump cloud.google.com/go/secretmanager from 1.11.0 to 1.11.1
* Bump google.golang.org/protobuf from 1.30.0 to 1.31.0
* Add missing keywords for sqlserver
* Bump google.golang.org/api from 0.128.0 to 0.129.0
* Bump cloud.google.com/go/storage from 1.30.1 to 1.31.0
-------------------------------------------------------------------
Thu Jul 6 07:56:15 UTC 2023 - Felix Niederwanger <felix.niederwanger@suse.com>
- trufflehog-v3.42.0
* Exit with non-zero exit code on chunk source error
* Fix docker source to return any chunk errors
* Add Couchbase Detector
* Bump github.com/xanzy/go-gitlab from 0.85.0 to 0.86.0
* Use url redaction in git
* Fix stripPassword
* Don't return on okta credential failed verification
* verify response body with expected keywords
* added opsgenie detector
-------------------------------------------------------------------
Tue Jun 27 07:15:30 UTC 2023 - Felix Niederwanger <felix.niederwanger@suse.com>
- trufflehog-v3.41.1
* Bump github.com/docker/distribution from 2.8.1+incompatible to 2.8.2+incompatible
* Implement SourceUnitUnmarshaller for all sources
* Ensure results are collected correctly when verification is off, and ...
* prevent www from being a key to prevent fp
* Bump github.com/go-ldap/ldap/v3 from 3.4.4 to 3.4.5
* Bump go.mongodb.org/mongo-driver from 1.11.6 to 1.12.0
* Bump golang.org/x/sync from 0.2.0 to 0.3.0
* Update Slack webhook error text for verification
* Bump cloud.google.com/go/storage from 1.29.0 to 1.30.1
-------------------------------------------------------------------
Mon Jun 26 09:43:12 UTC 2023 - Felix Niederwanger <felix.niederwanger@suse.com>
- trufflehog-v3.41.0
* Make trace error message so newlines aren't escaped
* Add Validator interface and example
* Setup SourceUnit interface
* Bump github.com/getsentry/sentry-go from 0.21.0 to 0.22.0
* Bump golang.org/x/oauth2 from 0.8.0 to 0.9.0
* update discord invite link to one that doesn't expire
* Custom detector name
* Bump github.com/googleapis/gax-go/v2 from 2.10.0 to 2.11.0
* Bump google.golang.org/api from 0.125.0 to 0.128.0
* add new key pat for mailgun detector
* remove gorilla mux
* fix spelling errors
* tada Add Docker image scanning tada
-------------------------------------------------------------------
Fri Jun 16 06:34:37 UTC 2023 - Felix Niederwanger <felix.niederwanger@suse.com>
- trufflehog-v3.40.0
* Bump github.com/mattn/go-sqlite3 from 1.14.16 to 1.14.17
* Bump github.com/stretchr/testify from 1.8.3 to 1.8.4
* [chore] - fix test
* Add DocuSign detector
* fix plusfile git bug
* Update sqlserver redaction, deduplication, and URI redaction
* Split files instead of using ReadAll
* add a custom detector check for logging duplicate detector
* Bump github.com/go-git/go-git/v5 from 5.6.1 to 5.7.0
* Bump github.com/hashicorp/go-retryablehttp from 0.7.2 to 0.7.4
* Bump github.com/xanzy/go-gitlab from 0.83.0 to 0.85.0
* Bump cloud.google.com/go/secretmanager from 1.10.1 to 1.11.0
* Use heuristic to choose the most likely UTF-16 decoded string
-------------------------------------------------------------------
Mon Jun 5 09:33:58 UTC 2023 - Felix Niederwanger <felix.niederwanger@suse.com>
- trufflehog-v3.38.0
* [chore] - update Float detector regex by @ahrav in #1368
* Check that git meets version requirements by @dustin-decker in #1373
- trufflehog-v3.39.0
* Loosen up version check for git
Accepting request 1090174 from home:ph03nix - trufflehog-v3.37.0 * [chore] - Use correct detector proto by @ahrav in #1347 * Add message for discord server in readme by @zricethezav in #1344 * [chore] - Replace context.TODO by @ahrav in #1349 * needed perms for running workflows against forks by @codevbus in #1348 * Bump github.com/go-logr/zapr from 1.2.3 to 1.2.4 by @dependabot in #1355 * Bump github.com/stretchr/testify from 1.8.2 to 1.8.3 by @dependabot in #1353 * Bump golang.org/x/oauth2 from 0.7.0 to 0.8.0 by @dependabot in #1352 * Make OpenAI regex more specific by @nyanshak in #1345 * Bump github.com/getsentry/sentry-go from 0.20.0 to 0.21.0 by @dependabot in #1351 * Bump golang.org/x/crypto from 0.8.0 to 0.9.0 by @dependabot in #1354 * adds linting for workflow and actions by @codevbus in #1356 * Add Data member to ResultsMetadata struct. by @strazzere in #1358 * Surface missing git as an error during source initialization by @dustin-decker in #1362 * Bump go.mongodb.org/mongo-driver from 1.11.4 to 1.11.6 by @dependabot in #1367 * Bump github.com/envoyproxy/protoc-gen-validate from 1.0.0 to 1.0.1 by @dependabot in #1366 * Bump cloud.google.com/go/secretmanager from 1.10.0 to 1.10.1 by @dependabot in #1365 * fix mockaroo fps by @dustin-decker in #1370 * Bump github.com/googleapis/gax-go/v2 from 2.8.0 to 2.9.1 by @dependabot in #1363- OBS-URL: https://build.opensuse.org/request/show/1090174 OBS-URL: https://build.opensuse.org/package/show/devel:languages:go/trufflehog?expand=0&rev=5
2023-06-03 16:46:06 +00:00
-------------------------------------------------------------------
Thu Jun 1 07:25:59 UTC 2023 - Felix Niederwanger <felix.niederwanger@suse.com>
- trufflehog-v3.37.0
* [chore] - Use correct detector proto by @ahrav in #1347
* Add message for discord server in readme by @zricethezav in #1344
* [chore] - Replace context.TODO by @ahrav in #1349
* needed perms for running workflows against forks by @codevbus in #1348
* Bump github.com/go-logr/zapr from 1.2.3 to 1.2.4 by @dependabot in #1355
* Bump github.com/stretchr/testify from 1.8.2 to 1.8.3 by @dependabot in #1353
* Bump golang.org/x/oauth2 from 0.7.0 to 0.8.0 by @dependabot in #1352
* Make OpenAI regex more specific by @nyanshak in #1345
* Bump github.com/getsentry/sentry-go from 0.20.0 to 0.21.0 by @dependabot in #1351
* Bump golang.org/x/crypto from 0.8.0 to 0.9.0 by @dependabot in #1354
* adds linting for workflow and actions by @codevbus in #1356
* Add Data member to ResultsMetadata struct. by @strazzere in #1358
* Surface missing git as an error during source initialization by @dustin-decker in #1362
* Bump go.mongodb.org/mongo-driver from 1.11.4 to 1.11.6 by @dependabot in #1367
* Bump github.com/envoyproxy/protoc-gen-validate from 1.0.0 to 1.0.1 by @dependabot in #1366
* Bump cloud.google.com/go/secretmanager from 1.10.0 to 1.10.1 by @dependabot in #1365
* fix mockaroo fps by @dustin-decker in #1370
* Bump github.com/googleapis/gax-go/v2 from 2.8.0 to 2.9.1 by @dependabot in #1363-
Accepting request 1088795 from home:ph03nix Update trufflehog to version 3.36.0 - trufflehog-v3.36.0 * Check to see if StructuredData exists before attempting to print it by @trufflesteeeve in #1346 - trufflehog-v3.35.0 * added pulumi cloud Access token detector by @vickygoel in #1295 * Bump github.com/cloudflare/circl from 1.1.0 to 1.3.3 by @dependabot in #1339 * Bump google.golang.org/api from 0.114.0 to 0.122.0 by @dependabot in #1342 * Bump github.com/go-sql-driver/mysql from 1.7.0 to 1.7.1 by @dependabot in #1336 * Bump github.com/rabbitmq/amqp091-go from 1.8.0 to 1.8.1 by @dependabot in #1335 * Bump golang.org/x/sync from 0.1.0 to 0.2.0 by @dependabot in #1334 * [chore] - move objectManager interface by @ahrav in #1332 * use md5 hash for checking if key exists by @ahrav in #1257 * Add buildkitev2 detector for newer tokens by @ahrav in #1341 * GitHub basic auth by @dustin-decker in #1337 * Add extra data and structured data to plain output by @nyanshak in #1316 * [oc-313] - Add GitHub metrics by @ahrav in #1324 * Updating generic.go by @RuchitaKshirsagarTR in #1343 * Add Base64URLSafe decoder by @nyanshak in #1292 - trufflehog-v3.34.0 * Fixed contentfulpersonalaccesstoken regex by @amansakhuja in #1199 * Add max object size flag for s3 bucket scanning by @nyanshak in #1294 * add scripts to benchmark and plot performance across tags by @dustin-decker in #1293 * Implement EndpointCustomizer by @mcastorina in #1291 * add additional logging by @ahrav in #1298 * [chore] - format log msg by @ahrav in #1299 * Bump github.com/bradleyfalzon/ghinstallation/v2 from 2.3.0 to 2.4.0 by @dependabot in #1306 * add tineswebhook detector by @jsolis in #1304 * Bump github.com/mholt/archiver/v4 from 4.0.0-alpha.7 to 4.0.0-alpha.8 by @dependabot in #1305 * Bump github.com/lib/pq from 1.10.8 to 1.10.9 by @dependabot in #1307 * Scan only for verified secrets in our CI by @dustin-decker in #1310 * add performance test by @zricethezav in #1301 * Add log to track git log size by @ahrav in #1325 * Extend cache interface by @ahrav in #1318 * Normalize GitHub repos during enumeration by @ahrav in #1269 * Output git timestamps as UTC times by @nyanshak in #1323 * Fix how we scan orgs by @ahrav in #1327 * [bug] - Update regex for ipstack by @ahrav in #1328 * Fix SquareApp detector type return value by @nyanshak in #1322 * Generate protos by @mcastorina in #1329 * Make sure context lines are properly handled by @bill-rich in #1331 * Do extraction after decompression by @nyanshak in #1320 * git worktree scanning fix for #827 by @nyanshak in #1315 * Support line numbers in filesystem source by @nyanshak in #1297 - trufflehog-v3.33.0 * improve sqlserver detection and testing by @dustin-decker in #1285 * Added a new detector for percy.io by @shabbirbs in #1284 * update jira detector by @ahrav in #1288 * update proto to allow for ignoring projects by @ahrav in #1289 * Fix include and exclude detector logic by @mcastorina in #1267 * Updated BrowserStack verified detector endpoint by @shabbirbs in #1290 - trufflehog-v3.32.2 * Bump google.golang.org/api from 0.118.0 to 0.119.0 by @dependabot in #1279 * Bump github.com/envoyproxy/protoc-gen-validate from 0.10.1 to 1.0.0 by @dependabot in #1280 * Bump cloud.google.com/go/storage from 1.29.0 to 1.30.1 by @dependabot in #1282 * Small optimizations for the base64 decoder by @ahrav in #1278 - trufflehog-v3.32.1 * Add RawV2 Results to the JSON Output by @yilmi in #1273 * optimize utf-8 decoder by @ahrav in #1275 * optimize base64 decoder by @ahrav in #1277 - trufflehog-v3.32.0 * Use md5 hash for resuming key by @ahrav in #1203 * [chore] - use hex encode vs base64 by @ahrav in #1256 * Remove toLower call on decoded chunk by @zricethezav in #1254 * git output []bytes were being logged as b64ed string by @dustin-decker in #1255 * Add team name to proto by @ahrav in #1258 * Only add detectors once by @bill-rich in #1265 * Bump google.golang.org/api from 0.114.0 to 0.118.0 by @dependabot in #1261 * Bump github.com/xanzy/go-gitlab from 0.81.0 to 0.82.0 by @dependabot in #1262 * [chore] Log possible duplicate detectors by @mcastorina in #1266 * Bump github.com/lib/pq from 1.10.7 to 1.10.8 by @dependabot in #1260 * Bump github.com/xanzy/go-gitlab from 0.81.0 to 0.83.0 by @dependabot in #1268 * Adding Google drive to MetaData proto by @0x1 in #1264 * Allow multiple team IDs for MS Teams by @ahrav in #1259 * Switch Endpoint Field to Client ID by @zubairk14 in #1270 * Add configurable detectors by @bill-rich in #1139 * Add utf16 decoder by @ahrav in #1274 * Ensure multipart credentials are deduplicated correctly by @dustin-decker in #1271 * Add utf16 decoder proto by @ahrav in #1276 - trufflehog-v3.31.6 * optimize gitparse handling of diffs by @zricethezav in #1253 - trufflehog-v3.31.5 * Use persistable cache for GCS progress tracking by @ahrav in #1204 * Bump golang.org/x/text from 0.8.0 to 0.9.0 by @dependabot in #1246 * Bump golang.org/x/oauth2 from 0.6.0 to 0.7.0 by @dependabot in #1243 * Bump golang.org/x/crypto from 0.7.0 to 0.8.0 by @dependabot in #1244 * Bump github.com/bradleyfalzon/ghinstallation/v2 from 2.2.0 to 2.3.0 by @dependabot in #1245 * Bump go.mongodb.org/mongo-driver from 1.11.3 to 1.11.4 by @dependabot in #1247 * THOG-920/add oss proto by @zubairk14 in #1240 * Generate protos by @mcastorina in #1250 * update circle test because workflows expire and need re-running by @dustin-decker in #1251 - trufflehog-v3.31.4 * fix linting step by @dustin-decker in #1235 * Resolve #1167 by adding support for the AWS_SESSION_TOKEN by @iamjpotts in #1170 * Use default endpoints when no custom verifier provided by @ahrav in #1242 - trufflehog-v3.31.3 * Run golang lint on entire repo instead of patches by @zricethezav in #1214 * add CLI switch to actions config by @codevbus in #1215 * Update verification endpoint - BrowserStack Detector by @gobind-singh in #1179 * Allow for custom verifier by @ahrav in #1070 * Add oauth2 cred as auth type for Teams. by @ahrav in #1221 * Use OAuth2 http client with GCS by @ahrav in #1220 * Add DetectorName to Result by @bill-rich in #1223 * Bump github.com/envoyproxy/protoc-gen-validate from 0.9.1 to 0.10.1 by @dependabot in #1207 * Bump github.com/TheZeroSlave/zapsentry from 1.14.0 to 1.15.0 by @dependabot in #1229 * Bump github.com/go-logr/logr from 1.2.3 to 1.2.4 by @dependabot in #1226 * Bump google.golang.org/api from 0.109.0 to 0.114.0 by @dependabot in #1228 * Bump go from 1.18 to 1.20 by @bceylan in #1230 * Bump github.com/googleapis/gax-go/v2 from 2.7.0 to 2.8.0 by @dependabot in #1227 * Bump cloud.google.com/go/storage from 1.29.0 to 1.30.1 by @dependabot in #1225 * Bump github.com/getsentry/sentry-go from 0.19.0 to 0.20.0 by @dependabot in #1231 * forager requires direct access to gitparse.FromReader by @dustin-decker in #1233 * Add lint for exporting loop references by @mcastorina in #1232 * readme improvements by @dustin-decker in #1234 - trufflehog-v3.31.2 * revert to original entrypoint config by @codevbus in #1219 - trufflehog-v3.31.1 * ensure stdout is still provided by @codevbus in #1217 - trufflehog-v3.31.0 * Bump cloud.google.com/go/storage from 1.30.0 to 1.30.1 by @dependabot in #1209 * Support for exclude globs at the git log level by @zricethezav in #1202 * Add GitHub Actions output by @dustin-decker in #1201 - trufflehog-v3.30.0 * update integration test excludes by @dustin-decker in #1169 * Bump github.com/googleapis/gax-go/v2 from 2.7.0 to 2.7.1 by @dependabot in #1171 * Bump github.com/fatih/color from 1.13.0 to 1.15.0 by @dependabot in #1174 * Bump github.com/xanzy/go-gitlab from 0.80.2 to 0.81.0 by @dependabot in #1172 * [chore] - Add unauth GCS source type by @ahrav in #1178 * Fix git commit date string formatting by @fearnoeval in #1181 * Bump google.golang.org/protobuf from 1.29.0 to 1.29.1 by @dependabot in #1182 * [chore] Log git output on error by @mcastorina in #1180 * [chore] Add a break statement when iterating through keywords by @zricethezav in #1184 * [chore] Ignore errors from CustomRegex so the channel doesn't leak by @mcastorina in #1149 * updating browserstack detector user and key PrefixRegex strings by @raju-kamble in #1176 * [chore] - add support for json service account and service account file by @ahrav in #1185 * Add resuming capability to GCS source by @ahrav in #1161 * Add OpenAI API Tokens detector by @yilmi in #1142 * added new detectors and fixed mesibo detector by @garg472 in #1166 * Bump go.mongodb.org/mongo-driver from 1.11.2 to 1.11.3 by @dependabot in #1196 * Bump cloud.google.com/go/storage from 1.29.0 to 1.30.0 by @dependabot in #1195 * Bump github.com/go-git/go-git/v5 from 5.6.0 to 5.6.1 by @dependabot in #1194 * Bump google.golang.org/protobuf from 1.29.1 to 1.30.0 by @dependabot in #1193 * Bump github.com/googleapis/gax-go/v2 from 2.7.1 to 2.8.0 by @dependabot in #1192 * Add in-memory caching pkg by @ahrav in #1189 * [chore] - log enumeration duration by @ahrav in #1187 * Bump actions/setup-go from 3 to 4 by @dependabot in #1191 * Fix OpenAI test by @dustin-decker in #1186 * Bump google.golang.org/api from 0.111.0 to 0.114.0 by @dependabot in #1210 * Bump github.com/rabbitmq/amqp091-go from 1.7.0 to 1.8.0 by @dependabot in #1208 * [bug] - Use correct date format for Date posted by @ahrav in #1211 * Add Oauth creds to GCS by @ahrav in #1212 * Delete progress tracking from GCS source by @ahrav in #1190 - trufflehog-v3.29.1 * Make slack webhook detector regex more specific by @trufflesteeeve in #1168 - trufflehog-v3.29.0 * Remove period from file extension by @ahrav in #1154 * Bump golang.org/x/crypto from 0.6.0 to 0.7.0 by @dependabot in #1158 * Bump github.com/go-git/go-git/v5 from 5.5.2 to 5.6.0 by @dependabot in #1147 * Bump github.com/bradleyfalzon/ghinstallation/v2 from 2.1.0 to 2.2.0 by @dependabot in #1148 * Bump github.com/getsentry/sentry-go from 0.18.0 to 0.19.0 by @dependabot in #1157 * Add gcs scanning integration by @ahrav in #1153 - trufflehog-v3.28.7 Support filtering detectors by version by @mcastorina in #1150 - trufflehog-v3.28.6 * Rename .pre-commit-hooks.yml to .pre-commit-hooks.yaml by @zhuwenxing in #1141 * Keyword optimization by @zricethezav in #1144 * Release should only run on tags by @dustin-decker in #1146 - trufflehog-v3.28.5 [chore] - Only scanned staged git changes by @ahrav in #1143 - trufflehog-v3.28.4 * [chore] Address more linter errors by @mcastorina in #1134 * Custom regex parallel verify by @0x1 in #1127 * [chore] Close response bodies by @mcastorina in #1137 * Bump github.com/stretchr/testify from 1.8.1 to 1.8.2 by @dependabot in #1130 * Add pre-commit yml config by @ahrav in #1138 * Disable profiler in debug mode and add profile switch by @yilmi in #1136 - trufflehog-v3.28.3 * Support file scanning in filesystem source by @mcastorina in #1030 * Add ability to include and exclude detectors by @mcastorina in #1106 * [chore] Implement String for ScanErrors by @mcastorina in #1131 * [chore] Update docs for individual file scanning by @mcastorina in #1132 * [chore] Address lint errors by @mcastorina in #1133 - trufflehog-v3.28.2 * Bump github.com/xanzy/go-gitlab from 0.78.0 to 0.80.2 by @dependabot in #1117 * Gitparse message fix by @bill-rich in #1125 - trufflehog-v3.28.1 * Bump github.com/xanzy/go-gitlab from 0.78.0 to 0.80.2 by @dependabot in #1117 * Gitparse message fix by @bill-rich in #1125 OBS-URL: https://build.opensuse.org/request/show/1088795 OBS-URL: https://build.opensuse.org/package/show/devel:languages:go/trufflehog?expand=0&rev=4
2023-05-24 11:23:25 +00:00
-------------------------------------------------------------------
Wed May 24 08:24:26 UTC 2023 - Felix Niederwanger <felix.niederwanger@suse.com>
- trufflehog-v3.36.0
* Check to see if StructuredData exists before attempting to print it by @trufflesteeeve in #1346
- trufflehog-v3.35.0
* added pulumi cloud Access token detector by @vickygoel in #1295
* Bump github.com/cloudflare/circl from 1.1.0 to 1.3.3 by @dependabot in #1339
* Bump google.golang.org/api from 0.114.0 to 0.122.0 by @dependabot in #1342
* Bump github.com/go-sql-driver/mysql from 1.7.0 to 1.7.1 by @dependabot in #1336
* Bump github.com/rabbitmq/amqp091-go from 1.8.0 to 1.8.1 by @dependabot in #1335
* Bump golang.org/x/sync from 0.1.0 to 0.2.0 by @dependabot in #1334
* [chore] - move objectManager interface by @ahrav in #1332
* use md5 hash for checking if key exists by @ahrav in #1257
* Add buildkitev2 detector for newer tokens by @ahrav in #1341
* GitHub basic auth by @dustin-decker in #1337
* Add extra data and structured data to plain output by @nyanshak in #1316
* [oc-313] - Add GitHub metrics by @ahrav in #1324
* Updating generic.go by @RuchitaKshirsagarTR in #1343
* Add Base64URLSafe decoder by @nyanshak in #1292
- trufflehog-v3.34.0
* Fixed contentfulpersonalaccesstoken regex by @amansakhuja in #1199
* Add max object size flag for s3 bucket scanning by @nyanshak in #1294
* add scripts to benchmark and plot performance across tags by @dustin-decker in #1293
* Implement EndpointCustomizer by @mcastorina in #1291
* add additional logging by @ahrav in #1298
* [chore] - format log msg by @ahrav in #1299
* Bump github.com/bradleyfalzon/ghinstallation/v2 from 2.3.0 to 2.4.0 by @dependabot in #1306
* add tineswebhook detector by @jsolis in #1304
* Bump github.com/mholt/archiver/v4 from 4.0.0-alpha.7 to 4.0.0-alpha.8 by @dependabot in #1305
* Bump github.com/lib/pq from 1.10.8 to 1.10.9 by @dependabot in #1307
* Scan only for verified secrets in our CI by @dustin-decker in #1310
* add performance test by @zricethezav in #1301
* Add log to track git log size by @ahrav in #1325
* Extend cache interface by @ahrav in #1318
* Normalize GitHub repos during enumeration by @ahrav in #1269
* Output git timestamps as UTC times by @nyanshak in #1323
* Fix how we scan orgs by @ahrav in #1327
* [bug] - Update regex for ipstack by @ahrav in #1328
* Fix SquareApp detector type return value by @nyanshak in #1322
* Generate protos by @mcastorina in #1329
* Make sure context lines are properly handled by @bill-rich in #1331
* Do extraction after decompression by @nyanshak in #1320
* git worktree scanning fix for #827 by @nyanshak in #1315
* Support line numbers in filesystem source by @nyanshak in #1297
- trufflehog-v3.33.0
* improve sqlserver detection and testing by @dustin-decker in #1285
* Added a new detector for percy.io by @shabbirbs in #1284
* update jira detector by @ahrav in #1288
* update proto to allow for ignoring projects by @ahrav in #1289
* Fix include and exclude detector logic by @mcastorina in #1267
* Updated BrowserStack verified detector endpoint by @shabbirbs in #1290
- trufflehog-v3.32.2
* Bump google.golang.org/api from 0.118.0 to 0.119.0 by @dependabot in #1279
* Bump github.com/envoyproxy/protoc-gen-validate from 0.10.1 to 1.0.0 by @dependabot in #1280
* Bump cloud.google.com/go/storage from 1.29.0 to 1.30.1 by @dependabot in #1282
* Small optimizations for the base64 decoder by @ahrav in #1278
- trufflehog-v3.32.1
* Add RawV2 Results to the JSON Output by @yilmi in #1273
* optimize utf-8 decoder by @ahrav in #1275
* optimize base64 decoder by @ahrav in #1277
- trufflehog-v3.32.0
* Use md5 hash for resuming key by @ahrav in #1203
* [chore] - use hex encode vs base64 by @ahrav in #1256
* Remove toLower call on decoded chunk by @zricethezav in #1254
* git output []bytes were being logged as b64ed string by @dustin-decker in #1255
* Add team name to proto by @ahrav in #1258
* Only add detectors once by @bill-rich in #1265
* Bump google.golang.org/api from 0.114.0 to 0.118.0 by @dependabot in #1261
* Bump github.com/xanzy/go-gitlab from 0.81.0 to 0.82.0 by @dependabot in #1262
* [chore] Log possible duplicate detectors by @mcastorina in #1266
* Bump github.com/lib/pq from 1.10.7 to 1.10.8 by @dependabot in #1260
* Bump github.com/xanzy/go-gitlab from 0.81.0 to 0.83.0 by @dependabot in #1268
* Adding Google drive to MetaData proto by @0x1 in #1264
* Allow multiple team IDs for MS Teams by @ahrav in #1259
* Switch Endpoint Field to Client ID by @zubairk14 in #1270
* Add configurable detectors by @bill-rich in #1139
* Add utf16 decoder by @ahrav in #1274
* Ensure multipart credentials are deduplicated correctly by @dustin-decker in #1271
* Add utf16 decoder proto by @ahrav in #1276
- trufflehog-v3.31.6
* optimize gitparse handling of diffs by @zricethezav in #1253
- trufflehog-v3.31.5
* Use persistable cache for GCS progress tracking by @ahrav in #1204
* Bump golang.org/x/text from 0.8.0 to 0.9.0 by @dependabot in #1246
* Bump golang.org/x/oauth2 from 0.6.0 to 0.7.0 by @dependabot in #1243
* Bump golang.org/x/crypto from 0.7.0 to 0.8.0 by @dependabot in #1244
* Bump github.com/bradleyfalzon/ghinstallation/v2 from 2.2.0 to 2.3.0 by @dependabot in #1245
* Bump go.mongodb.org/mongo-driver from 1.11.3 to 1.11.4 by @dependabot in #1247
* THOG-920/add oss proto by @zubairk14 in #1240
* Generate protos by @mcastorina in #1250
* update circle test because workflows expire and need re-running by @dustin-decker in #1251
- trufflehog-v3.31.4
* fix linting step by @dustin-decker in #1235
* Resolve #1167 by adding support for the AWS_SESSION_TOKEN by @iamjpotts in #1170
* Use default endpoints when no custom verifier provided by @ahrav in #1242
- trufflehog-v3.31.3
* Run golang lint on entire repo instead of patches by @zricethezav in #1214
* add CLI switch to actions config by @codevbus in #1215
* Update verification endpoint - BrowserStack Detector by @gobind-singh in #1179
* Allow for custom verifier by @ahrav in #1070
* Add oauth2 cred as auth type for Teams. by @ahrav in #1221
* Use OAuth2 http client with GCS by @ahrav in #1220
* Add DetectorName to Result by @bill-rich in #1223
* Bump github.com/envoyproxy/protoc-gen-validate from 0.9.1 to 0.10.1 by @dependabot in #1207
* Bump github.com/TheZeroSlave/zapsentry from 1.14.0 to 1.15.0 by @dependabot in #1229
* Bump github.com/go-logr/logr from 1.2.3 to 1.2.4 by @dependabot in #1226
* Bump google.golang.org/api from 0.109.0 to 0.114.0 by @dependabot in #1228
* Bump go from 1.18 to 1.20 by @bceylan in #1230
* Bump github.com/googleapis/gax-go/v2 from 2.7.0 to 2.8.0 by @dependabot in #1227
* Bump cloud.google.com/go/storage from 1.29.0 to 1.30.1 by @dependabot in #1225
* Bump github.com/getsentry/sentry-go from 0.19.0 to 0.20.0 by @dependabot in #1231
* forager requires direct access to gitparse.FromReader by @dustin-decker in #1233
* Add lint for exporting loop references by @mcastorina in #1232
* readme improvements by @dustin-decker in #1234
- trufflehog-v3.31.2
* revert to original entrypoint config by @codevbus in #1219
- trufflehog-v3.31.1
* ensure stdout is still provided by @codevbus in #1217
- trufflehog-v3.31.0
* Bump cloud.google.com/go/storage from 1.30.0 to 1.30.1 by @dependabot in #1209
* Support for exclude globs at the git log level by @zricethezav in #1202
* Add GitHub Actions output by @dustin-decker in #1201
- trufflehog-v3.30.0
* update integration test excludes by @dustin-decker in #1169
* Bump github.com/googleapis/gax-go/v2 from 2.7.0 to 2.7.1 by @dependabot in #1171
* Bump github.com/fatih/color from 1.13.0 to 1.15.0 by @dependabot in #1174
* Bump github.com/xanzy/go-gitlab from 0.80.2 to 0.81.0 by @dependabot in #1172
* [chore] - Add unauth GCS source type by @ahrav in #1178
* Fix git commit date string formatting by @fearnoeval in #1181
* Bump google.golang.org/protobuf from 1.29.0 to 1.29.1 by @dependabot in #1182
* [chore] Log git output on error by @mcastorina in #1180
* [chore] Add a break statement when iterating through keywords by @zricethezav in #1184
* [chore] Ignore errors from CustomRegex so the channel doesn't leak by @mcastorina in #1149
* updating browserstack detector user and key PrefixRegex strings by @raju-kamble in #1176
* [chore] - add support for json service account and service account file by @ahrav in #1185
* Add resuming capability to GCS source by @ahrav in #1161
* Add OpenAI API Tokens detector by @yilmi in #1142
* added new detectors and fixed mesibo detector by @garg472 in #1166
* Bump go.mongodb.org/mongo-driver from 1.11.2 to 1.11.3 by @dependabot in #1196
* Bump cloud.google.com/go/storage from 1.29.0 to 1.30.0 by @dependabot in #1195
* Bump github.com/go-git/go-git/v5 from 5.6.0 to 5.6.1 by @dependabot in #1194
* Bump google.golang.org/protobuf from 1.29.1 to 1.30.0 by @dependabot in #1193
* Bump github.com/googleapis/gax-go/v2 from 2.7.1 to 2.8.0 by @dependabot in #1192
* Add in-memory caching pkg by @ahrav in #1189
* [chore] - log enumeration duration by @ahrav in #1187
* Bump actions/setup-go from 3 to 4 by @dependabot in #1191
* Fix OpenAI test by @dustin-decker in #1186
* Bump google.golang.org/api from 0.111.0 to 0.114.0 by @dependabot in #1210
* Bump github.com/rabbitmq/amqp091-go from 1.7.0 to 1.8.0 by @dependabot in #1208
* [bug] - Use correct date format for Date posted by @ahrav in #1211
* Add Oauth creds to GCS by @ahrav in #1212
* Delete progress tracking from GCS source by @ahrav in #1190
- trufflehog-v3.29.1
* Make slack webhook detector regex more specific by @trufflesteeeve in #1168
- trufflehog-v3.29.0
* Remove period from file extension by @ahrav in #1154
* Bump golang.org/x/crypto from 0.6.0 to 0.7.0 by @dependabot in #1158
* Bump github.com/go-git/go-git/v5 from 5.5.2 to 5.6.0 by @dependabot in #1147
* Bump github.com/bradleyfalzon/ghinstallation/v2 from 2.1.0 to 2.2.0 by @dependabot in #1148
* Bump github.com/getsentry/sentry-go from 0.18.0 to 0.19.0 by @dependabot in #1157
* Add gcs scanning integration by @ahrav in #1153
- trufflehog-v3.28.7
Support filtering detectors by version by @mcastorina in #1150
- trufflehog-v3.28.6
* Rename .pre-commit-hooks.yml to .pre-commit-hooks.yaml by @zhuwenxing in #1141
* Keyword optimization by @zricethezav in #1144
* Release should only run on tags by @dustin-decker in #1146
- trufflehog-v3.28.5
[chore] - Only scanned staged git changes by @ahrav in #1143
- trufflehog-v3.28.4
* [chore] Address more linter errors by @mcastorina in #1134
* Custom regex parallel verify by @0x1 in #1127
* [chore] Close response bodies by @mcastorina in #1137
* Bump github.com/stretchr/testify from 1.8.1 to 1.8.2 by @dependabot in #1130
* Add pre-commit yml config by @ahrav in #1138
* Disable profiler in debug mode and add profile switch by @yilmi in #1136
- trufflehog-v3.28.3
* Support file scanning in filesystem source by @mcastorina in #1030
* Add ability to include and exclude detectors by @mcastorina in #1106
* [chore] Implement String for ScanErrors by @mcastorina in #1131
* [chore] Update docs for individual file scanning by @mcastorina in #1132
* [chore] Address lint errors by @mcastorina in #1133
- trufflehog-v3.28.2
* Bump github.com/xanzy/go-gitlab from 0.78.0 to 0.80.2 by @dependabot in #1117
* Gitparse message fix by @bill-rich in #1125
- trufflehog-v3.28.1
* Bump github.com/xanzy/go-gitlab from 0.78.0 to 0.80.2 by @dependabot in #1117
* Gitparse message fix by @bill-rich in #1125
Accepting request 1067374 from home:pdostal - trufflehog-v3.28.0 * add smoke test by @dustin-decker in #1099 * Remove duplicated detectors by @trufflesteeeve in #1092 * adds TESTING doc w. steps for local GHA tests by @codevbus in #1093 * add more confluence options by @dustin-decker in #1105 * Github filter support for exclude and include by @MetinSAYGIN in #1087 * Fix nil scan options by @mcastorina in #1107 * [chore] Remove logrus from trufflehog by @mcastorina in #1095 * Bump golang.org/x/text from 0.6.0 to 0.7.0 by @dependabot in #1100 * Bump golang.org/x/crypto from 0.5.0 to 0.6.0 by @dependabot in #1101 * Bump github.com/getsentry/sentry-go from 0.17.0 to 0.18.0 by @dependabot in #1102 * [chore] - Add the unit for max archive size by @ahrav in #1108 * [chore] - archive size helper text by @ahrav in #1110 * [chore] - Update helper text for max-archive-size. by @ahrav in #1114 * Correctly parse most filenames with ' and ' by @bill-rich in #1113 * Drop tabs for filenames with spaces by @bill-rich in #1115 * Bump golang.org/x/oauth2 from 0.4.0 to 0.5.0 by @dependabot in #1116 * fix browserstack detector by @raju-kamble in #1120 * Bump golang.org/x/net from 0.6.0 to 0.7.0 by @dependabot in #1122 * Bump go.mongodb.org/mongo-driver from 1.11.1 to 1.11.2 by @dependabot in #1119 * Bump github.com/TheZeroSlave/zapsentry from 1.12.0 to 1.14.0 by @dependabot in #1118 * Bump github.com/rabbitmq/amqp091-go from 1.6.0 to 1.7.0 by @dependabot in #1103 * Adding initial protos for Google Drive scanner by @0x1 in #1121 * fixing browserstack regex username detection by @raju-kamble in #1123 - trufflehog-v3.27.1 * Revert "Make detectors configurable" by @dustin-decker in #1097 - trufflehog-v3.27.0 * Bump golang.org/x/oauth2 from 0.3.0 to 0.4.0 by @dependabot in #1039 * add bodyclose linter to help prevent file handle leaks by @dustin-decker in #1048 * braintree detector: use production API URL instead of the test sandbo… by @swdbo in #1054 OBS-URL: https://build.opensuse.org/request/show/1067374 OBS-URL: https://build.opensuse.org/package/show/devel:languages:go/trufflehog?expand=0&rev=3
2023-02-24 18:56:34 +00:00
-------------------------------------------------------------------
Thu Feb 23 11:56:28 UTC 2023 - Pavel Dostál <pdostal@suse.com>
- trufflehog-v3.28.0
* add smoke test by @dustin-decker in #1099
* Remove duplicated detectors by @trufflesteeeve in #1092
* adds TESTING doc w. steps for local GHA tests by @codevbus in #1093
* add more confluence options by @dustin-decker in #1105
* Github filter support for exclude and include by @MetinSAYGIN in #1087
* Fix nil scan options by @mcastorina in #1107
* [chore] Remove logrus from trufflehog by @mcastorina in #1095
* Bump golang.org/x/text from 0.6.0 to 0.7.0 by @dependabot in #1100
* Bump golang.org/x/crypto from 0.5.0 to 0.6.0 by @dependabot in #1101
* Bump github.com/getsentry/sentry-go from 0.17.0 to 0.18.0 by @dependabot in #1102
* [chore] - Add the unit for max archive size by @ahrav in #1108
* [chore] - archive size helper text by @ahrav in #1110
* [chore] - Update helper text for max-archive-size. by @ahrav in #1114
* Correctly parse most filenames with ' and ' by @bill-rich in #1113
* Drop tabs for filenames with spaces by @bill-rich in #1115
* Bump golang.org/x/oauth2 from 0.4.0 to 0.5.0 by @dependabot in #1116
* fix browserstack detector by @raju-kamble in #1120
* Bump golang.org/x/net from 0.6.0 to 0.7.0 by @dependabot in #1122
* Bump go.mongodb.org/mongo-driver from 1.11.1 to 1.11.2 by @dependabot in #1119
* Bump github.com/TheZeroSlave/zapsentry from 1.12.0 to 1.14.0 by @dependabot in #1118
* Bump github.com/rabbitmq/amqp091-go from 1.6.0 to 1.7.0 by @dependabot in #1103
* Adding initial protos for Google Drive scanner by @0x1 in #1121
* fixing browserstack regex username detection by @raju-kamble in #1123
- trufflehog-v3.27.1
* Revert "Make detectors configurable" by @dustin-decker in #1097
- trufflehog-v3.27.0
* Bump golang.org/x/oauth2 from 0.3.0 to 0.4.0 by @dependabot in #1039
* add bodyclose linter to help prevent file handle leaks by @dustin-decker in #1048
* braintree detector: use production API URL instead of the test sandbo… by @swdbo in #1054
* Update float detector with correct User-Agent and regex by @ahrav in #1061
* update webex detector regex by @ahrav in #1062
* Handle errors in a thread safe manner by @ahrav in #1052
* Add TruffleHog version input for GitHub action by @mcastorina in #1064
* Revert "Add TruffleHog version input for GitHub action (#1064)" by @mcastorina in #1068
* Pull gitparse config options out of pkg consts by @bill-rich in #1072
* Add include exclude spaces for confluence source. by @ahrav in #1073
* Add max commit size by @bill-rich in #1079
* Make archive handler configurable by @bill-rich in #1077
* [chore] - Add tests for errors by @ahrav in #1071
* Skip repo and continue scanning when encountering an error by @mcastorina in #1080
* [chore] - Dont pre-allocate errors slice by @ahrav in #1083
* Add Type() to detector interface by @trufflesteeeve in #1088
* [chore] Remove logrus from engine package by @mcastorina in #1085
* [chore] Remove logrus from github source by @mcastorina in #1086
* Bump github.com/joho/godotenv from 1.4.0 to 1.5.1 by @dependabot in #1075
* [chore] Remove logrus from circleci, filesystem, gitlab, and s3 sources by @mcastorina in #1089
* [chore] - Remove monolithic config struct by @ahrav in #1091
* Make detectors configurable by @ahrav in #1084
- trufflehog-v3.26.0
* Add openssh-client to trufflehog container by @mcastorina in #1045
* Bump github.com/rabbitmq/amqp091-go from 1.5.0 to 1.6.0 by @dependabot in #1036
* filesystem support for exclude and include filters (2nd attemp) by @mac2000 in #1033
* Fix the typo "programatic" by @nezakoo in #1046
* Add file to confluence proto. by @ahrav in #1049
* Remove false positive detection for CustomRegex by @mcastorina in #1050
- trufflehog-v3.25.4
* fix github integration tests by @dustin-decker in #1042
* Full git log when targeting base merge commit by @bill-rich in #1044
- trufflehog-v3.25.3
* [chore] - Small cleanup of CircleCi source by @ahrav in #1028
* Add concurrency to CircleCi source by @ahrav in #1029
* Bump github.com/getsentry/sentry-go from 0.16.0 to 0.17.0 by @dependabot in #1022
* Bump github.com/xanzy/go-gitlab from 0.77.0 to 0.78.0 by @dependabot in #1024
* Bump github.com/sergi/go-diff from 1.2.0 to 1.3.1 by @dependabot in #1023
* Updated stdout to print results in alphabetical order for consistent output by @0x1 in #1032
* Add location to Teams source metadata by @ahrav in #1034
* Limit diff size to prevent out of control memory use. by @bill-rich in #1035
- trufflehog-v3.25.2
* Use access-token endpoint for validity check by @clonsdale-canva in #991
* Record timestamp when a context was cancelled by @mcastorina in #1018
* remove logger from retryable client, it is not respecting loglevels by @dustin-decker in #1020
Accepting request 1058007 from home:pdostal - trufflehog-v3.25.1 * Update entrypoint by @ahrav in #1013 * Copy metadata for line number aware sources by @bill-rich in #1011 * Rename and export isGitSource by @bill-rich in #1016 * Fix GitUrl Return by @pulkitanz in #987 * Bump goreleaser/goreleaser-action from 3 to 4 by @dependabot in #980 * Switch to retryableHttpClient for GitHub AuthN API Client + More Logs by @yilmi in #995 * Bump cloud.google.com/go/secretmanager from 1.9.0 to 1.10.0 by @dependabot in #1006 * Bump github.com/go-git/go-git/v5 from 5.5.1 to 5.5.2 by @dependabot in #1007 * Bump github.com/hashicorp/go-retryablehttp from 0.7.1 to 0.7.2 by @dependabot in #1008 * Bump golang.org/x/crypto from 0.4.0 to 0.5.0 by @dependabot in #1009 * Handle invalid regex for custom detector. by @ahrav in #1005 * Capture callstack of canceled contexts by @mcastorina in #979 * Validate custom regular expressions on detector initialization by @mcastorina in #1010 * fix: do not override base parameter with default in GitHub Action by @clarkedb in #1004 * Fix GitUrl Return by @pulkitanz in #987 * Bump goreleaser/goreleaser-action from 3 to 4 by @dependabot in #980 * Switch to retryableHttpClient for GitHub AuthN API Client + More Logs by @yilmi in #995 * Bump cloud.google.com/go/secretmanager from 1.9.0 to 1.10.0 by @dependabot in #1006 * Bump github.com/go-git/go-git/v5 from 5.5.1 to 5.5.2 by @dependabot in #1007 * Bump github.com/hashicorp/go-retryablehttp from 0.7.1 to 0.7.2 by @dependabot in #1008 * Bump golang.org/x/crypto from 0.4.0 to 0.5.0 by @dependabot in #1009 * Handle invalid regex for custom detector. by @ahrav in #1005 * Capture callstack of canceled contexts by @mcastorina in #979 * Validate custom regular expressions on detector initialization by @mcastorina in #1010 * Allow for default value to be used in GHA Workflow by @ahrav in #999 * Add Circle CI source by @dustin-decker in #997 * Remove ctx from source structs by @ahrav in #986 * Removing Debug version Println to logrus debug - Issue #992 by @yilmi in #993 * Make GA action default base an empty string. by @ahrav in #996 OBS-URL: https://build.opensuse.org/request/show/1058007 OBS-URL: https://build.opensuse.org/package/show/devel:languages:go/trufflehog?expand=0&rev=2
2023-01-12 16:37:11 +00:00
-------------------------------------------------------------------
Thu Jan 12 13:41:09 UTC 2023 - Pavel Dostál <pdostal@suse.com>
- trufflehog-v3.25.1
* Update entrypoint by @ahrav in #1013
* Copy metadata for line number aware sources by @bill-rich in #1011
* Rename and export isGitSource by @bill-rich in #1016
* Fix GitUrl Return by @pulkitanz in #987
* Bump goreleaser/goreleaser-action from 3 to 4 by @dependabot in #980
* Switch to retryableHttpClient for GitHub AuthN API Client + More Logs by @yilmi in #995
* Bump cloud.google.com/go/secretmanager from 1.9.0 to 1.10.0 by @dependabot in #1006
* Bump github.com/go-git/go-git/v5 from 5.5.1 to 5.5.2 by @dependabot in #1007
* Bump github.com/hashicorp/go-retryablehttp from 0.7.1 to 0.7.2 by @dependabot in #1008
* Bump golang.org/x/crypto from 0.4.0 to 0.5.0 by @dependabot in #1009
* Handle invalid regex for custom detector. by @ahrav in #1005
* Capture callstack of canceled contexts by @mcastorina in #979
* Validate custom regular expressions on detector initialization by @mcastorina in #1010
* fix: do not override base parameter with default in GitHub Action by @clarkedb in #1004
* Fix GitUrl Return by @pulkitanz in #987
* Bump goreleaser/goreleaser-action from 3 to 4 by @dependabot in #980
* Switch to retryableHttpClient for GitHub AuthN API Client + More Logs by @yilmi in #995
* Bump cloud.google.com/go/secretmanager from 1.9.0 to 1.10.0 by @dependabot in #1006
* Bump github.com/go-git/go-git/v5 from 5.5.1 to 5.5.2 by @dependabot in #1007
* Bump github.com/hashicorp/go-retryablehttp from 0.7.1 to 0.7.2 by @dependabot in #1008
* Bump golang.org/x/crypto from 0.4.0 to 0.5.0 by @dependabot in #1009
* Handle invalid regex for custom detector. by @ahrav in #1005
* Capture callstack of canceled contexts by @mcastorina in #979
* Validate custom regular expressions on detector initialization by @mcastorina in #1010
* Allow for default value to be used in GHA Workflow by @ahrav in #999
* Add Circle CI source by @dustin-decker in #997
* Remove ctx from source structs by @ahrav in #986
* Removing Debug version Println to logrus debug - Issue #992 by @yilmi in #993
* Make GA action default base an empty string. by @ahrav in #996
-------------------------------------------------------------------
Thu Dec 22 16:46:59 UTC 2022 - Pavel Dostál <pdostal@suse.com>
- Change the minimal version of Go from 1.14 to 1.18
-------------------------------------------------------------------
Thu Dec 22 15:51:49 UTC 2022 - Pavel Dostál <pdostal@suse.com>
- Bump github.com/xanzy/go-gitlab from 0.76.0 to 0.77.0 by @dependabot in #981
- Bump golang.org/x/crypto from 0.3.0 to 0.4.0 by @dependabot in #982
- Add configuration parsing and custom detectors to engine by @mcastorina in #968
- Add custom regex detector docs by @mcastorina in #983
- Remove custom log leveler by @mcastorina in #985