diff --git a/_service b/_service index ee57818..06fcac4 100644 --- a/_service +++ b/_service @@ -3,7 +3,7 @@ https://github.com/trufflesecurity/trufflehog.git git main - v3.63.7 + v3.63.10 v(.*) enable diff --git a/trufflehog-3.63.10.obscpio b/trufflehog-3.63.10.obscpio new file mode 100644 index 0000000..ecaea77 --- /dev/null +++ b/trufflehog-3.63.10.obscpio @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:7e50ab8ec59738a62a8e1868d0b56f69853fb505405fcc669ddec922cabc2f35 +size 9446925 diff --git a/trufflehog-3.63.7.obscpio b/trufflehog-3.63.7.obscpio deleted file mode 100644 index 3e27e58..0000000 --- a/trufflehog-3.63.7.obscpio +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:dae4354101950419b220d7b6cdafbdebcd021345d98a59b556db9d1aa1486c28 -size 9392653 diff --git a/trufflehog.changes b/trufflehog.changes index bd49684..e20be92 100644 --- a/trufflehog.changes +++ b/trufflehog.changes @@ -1,3 +1,46 @@ +------------------------------------------------------------------- +Thu Jan 18 13:29:28 UTC 2024 - felix.niederwanger@suse.com + +- Update to version 3.63.10: + * [chore] - Add regex and keyword for api_org tokens (#2240) + * Assume unauthenticated github scans have public visibility (#2308) + * [fixup ] - Allow ssh cloning with AWS Code Commit (#2307) + * added azure protos (#2304) + * Disable recently added postgres detector because it it too sensitive (#2303) + * [feat] - Provide CLI flag to only use custom verifiers (#2299) + * Individuate archive tests #2293 + * [feat] - Allow for the use of include/exclude path files for filesystem scans (#2297) + * [chore] - small updates (#2288) + * fix(deps): update module github.com/bradleyfalzon/ghinstallation/v2 to v2.9.0 (#2295) + * fix(deps): update module github.com/aws/aws-sdk-go to v1.49.19 (#2294) + * feat(installation): Implement checksum signature verification (#2157) + * fix(deps): update module github.com/aws/aws-sdk-go to v1.49.18 (#2292) + * fix(deps): update module cloud.google.com/go/storage to v1.36.0 (#2291) + * chore(deps): update sigstore/cosign-installer action to v3.3.0 (#2290) + * chore(deps): update alpine docker tag to v3.19 (#2287) + * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.19 (#2286) + * Extend memory cache (#2275) + * fix(deps): update module github.com/gabriel-vasile/mimetype to v1.4.3 (#2285) + * fix(deps): update golang.org/x/exp digest to 0dcbfd6 (#2284) + * fix(deps): update module github.com/azuread/microsoft-authentication-library-for-go to v1.2.1 (#2282) + * adding postgres detector (#2108) + * update test (#2283) + * fix(deps): update golang.org/x/exp digest to be819d1 (#2281) + * fix(signable): ignore common false positives (#2230) + * fix(parseur): ignore false positives (#2229) + * [chore] - update docs for pre-commit (#2280) + * 1833 Fix syslog udp (#1835) + * Wrap temp deletion err #2277 + * Bump github.com/dvsekhvalnov/jose2go from 1.5.0 to 1.6.0 (#2279) + * Bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 (#2278) + * Updated trufflehog sourcegraph secret format (#2254) + * Update stripe detector regex (#2261) + * [chore] Add test to check all versioned detectors are non-zero (#2272) + * fix(gitparse): handle fromFileLine edge case (#2206) + * Fix non-ASCII whitespace on GitHub Action (#2270) + * fix(deps): update module github.com/go-git/go-git/v5 to v5.11.0 [security] (#2263) + * Fix commit message single quote escaping on GitHub Action (#2259) + ------------------------------------------------------------------- Sat Dec 23 19:28:02 UTC 2023 - felix.niederwanger@suse.com diff --git a/trufflehog.obsinfo b/trufflehog.obsinfo index 6c7a62a..0b97fb2 100644 --- a/trufflehog.obsinfo +++ b/trufflehog.obsinfo @@ -1,4 +1,4 @@ name: trufflehog -version: 3.63.7 -mtime: 1703313927 -commit: 1cc41e2c757017b55e447c015485e166486376c1 +version: 3.63.10 +mtime: 1705447526 +commit: b0fd951652a50ffb1911073f0bfb6a8ade7afc37 diff --git a/trufflehog.spec b/trufflehog.spec index df47d94..46d1a31 100644 --- a/trufflehog.spec +++ b/trufflehog.spec @@ -1,7 +1,7 @@ # # spec file for package trufflehog # -# Copyright (c) 2023 SUSE LLC +# Copyright (c) 2024 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,7 +17,7 @@ Name: trufflehog -Version: 3.63.7 +Version: 3.63.10 Release: 0 Summary: CLI tool to find exposed secrets in source and archives License: AGPL-3.0-or-later diff --git a/vendor.tar.gz b/vendor.tar.gz index 544f77b..450c68a 100644 --- a/vendor.tar.gz +++ b/vendor.tar.gz @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:7d5aef4f8f39ae7bb56ddd98f3c9468045b086ed5850caa9b90191317fbfd1d2 -size 20275621 +oid sha256:200e6b5b216c09ee3f3c5233a1c52aad9d3d2a1ee8850cfec3003d7ad93f1103 +size 20294278