From ee8f3ca77fd8aab6f0ba4a29ca0090e07c3a429f9787e372c5cc38b1d4f10ea4 Mon Sep 17 00:00:00 2001 From: Jeff Kowalczyk Date: Fri, 4 Aug 2023 20:22:55 +0000 Subject: [PATCH] Accepting request 1102309 from home:ph03nix - Update to version 3.46.3: * Detect API keys without app keys (#1605) * Adjust regex and add tests (#1602) * Use SourceManager in engine (#1586) * implement indeterminate LDAP verification (#1574) * Fix nil pointer dereference to git ScanOptions (#1603) * initial support for bare repositories (#1499) * Common chunk reader (#1594) * Add commits scanned to log (#1600) * include scan duration in output log (#1598) * Make prints to stdout serial. (#1597) - Update to version 3.46.2: * add tri-state verification to mongodb detector by @rosecodym in #1575 * create hidden debug flag to disable overseer by @zubairk14 in #1582 * Fix VirusTotal deetector by @ahrav in #1585 * Refactor git source to allow ScanOptions and use source in engine by @mcastorina in #1518 * S3 panic send on closed channel by @ahrav in #1589 - Update to version 3.46.1: * [bug] - Fix unlocking an unlocked mutex by @ahrav in #1583 - Update to version 3.46.0: * Increase log level of engine messages by @dustin-decker in #1576 * Initialize the default logger to output to stderr by @mcastorina in #1569 * Fix runtime error when scanning Gist comments by @rgmz in #1552 * Do not nest transports for Github installation client by @rosecodym in #1564 * Identify transient AWS verification failures by @rosecodym in #1563 * Support fatal errors in job reports by @mcastorina in #1562 * Fix pubnub regular expression by @mcastorina in #1565 * gitparse: Use an object for currentDiff by @mcastorina in #1573 * Concurrent detection by @ahrav in #1580 * Replace magic strings with const by @ahrav in #1568 OBS-URL: https://build.opensuse.org/request/show/1102309 OBS-URL: https://build.opensuse.org/package/show/devel:languages:go/trufflehog?expand=0&rev=13 --- _service | 3 ++- trufflehog-3.45.1.obscpio | 3 --- trufflehog-3.46.3.obscpio | 3 +++ trufflehog.changes | 36 ++++++++++++++++++++++++++++++++++++ trufflehog.obsinfo | 6 +++--- trufflehog.spec | 4 ++-- vendor.tar.gz | 4 ++-- 7 files changed, 48 insertions(+), 11 deletions(-) delete mode 100644 trufflehog-3.45.1.obscpio create mode 100644 trufflehog-3.46.3.obscpio diff --git a/_service b/_service index db6e308..ea229a1 100644 --- a/_service +++ b/_service @@ -3,8 +3,9 @@ https://github.com/trufflesecurity/trufflehog.git git main - v3.45.2 + v3.46.3 v(.*) + enable diff --git a/trufflehog-3.45.1.obscpio b/trufflehog-3.45.1.obscpio deleted file mode 100644 index 81f4a96..0000000 --- a/trufflehog-3.45.1.obscpio +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:72e897533e69bb2c5ba0ec13b345017ef8d1f507479e91bd0269cdc159c399f1 -size 6421517 diff --git a/trufflehog-3.46.3.obscpio b/trufflehog-3.46.3.obscpio new file mode 100644 index 0000000..46ac383 --- /dev/null +++ b/trufflehog-3.46.3.obscpio @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:e3e55b93bc9bec1c0310172a0673703c9b35238f2a1704ebdb74b63c11265967 +size 6470157 diff --git a/trufflehog.changes b/trufflehog.changes index 62982f6..4815f64 100644 --- a/trufflehog.changes +++ b/trufflehog.changes @@ -1,3 +1,39 @@ +------------------------------------------------------------------- +Fri Aug 04 08:05:50 UTC 2023 - felix.niederwanger@suse.com + +- Update to version 3.46.3: + * Detect API keys without app keys (#1605) + * Adjust regex and add tests (#1602) + * Use SourceManager in engine (#1586) + * implement indeterminate LDAP verification (#1574) + * Fix nil pointer dereference to git ScanOptions (#1603) + * initial support for bare repositories (#1499) + * Common chunk reader (#1594) + * Add commits scanned to log (#1600) + * include scan duration in output log (#1598) + * Make prints to stdout serial. (#1597) +- Update to version 3.46.2: + * add tri-state verification to mongodb detector by @rosecodym in #1575 + * create hidden debug flag to disable overseer by @zubairk14 in #1582 + * Fix VirusTotal deetector by @ahrav in #1585 + * Refactor git source to allow ScanOptions and use source in engine by @mcastorina in #1518 + * S3 panic send on closed channel by @ahrav in #1589 +- Update to version 3.46.1: + * [bug] - Fix unlocking an unlocked mutex by @ahrav in #1583 +- Update to version 3.46.0: + * Increase log level of engine messages by @dustin-decker in #1576 + * Initialize the default logger to output to stderr by @mcastorina in #1569 + * Fix runtime error when scanning Gist comments by @rgmz in #1552 + * Do not nest transports for Github installation client by @rosecodym in #1564 + * Identify transient AWS verification failures by @rosecodym in #1563 + * Support fatal errors in job reports by @mcastorina in #1562 + * Fix pubnub regular expression by @mcastorina in #1565 + * gitparse: Use an object for currentDiff by @mcastorina in #1573 + * Concurrent detection by @ahrav in #1580 + * Replace magic strings with const by @ahrav in #1568 + * [bug] - fix data races by @ahrav in #1577 + * [bug] - fix shodan detector by @ahrav in #1579 + ------------------------------------------------------------------- Fri Jul 28 09:49:25 UTC 2023 - Felix Niederwanger diff --git a/trufflehog.obsinfo b/trufflehog.obsinfo index 4e4731a..f03d459 100644 --- a/trufflehog.obsinfo +++ b/trufflehog.obsinfo @@ -1,4 +1,4 @@ name: trufflehog -version: 3.45.2 -mtime: 1690472996 -commit: e391e89f3e13ffba7463a3c536a9ddd96cb9f4f8 +version: 3.46.3 +mtime: 1691100714 +commit: c2b49b060bb0746a147840e47b88ba6f66e7c9a6 diff --git a/trufflehog.spec b/trufflehog.spec index 094012a..b62a52f 100644 --- a/trufflehog.spec +++ b/trufflehog.spec @@ -17,7 +17,7 @@ Name: trufflehog -Version: 3.45.2 +Version: 3.46.3 Release: 0 Summary: Find credentials all over the place License: AGPL-3.0-or-later @@ -26,7 +26,7 @@ Source: trufflehog-%{version}.tar.gz Source1: vendor.tar.gz BuildRequires: golang-packaging BuildRequires: libpcre1 -BuildRequires: go >= 1.18 +BuildRequires: go >= 1.20 %{go_nostrip} %description diff --git a/vendor.tar.gz b/vendor.tar.gz index 639b5be..27a0f31 100644 --- a/vendor.tar.gz +++ b/vendor.tar.gz @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:d0f3e8a0a867e63a15bddba6d7bc801c6ca72ac84e9a3c18ebb0320544a3a73d -size 13675758 +oid sha256:5176e1baaef1dbc16bb276b11e12a14d8a52cfb9c65358eefbb381a329451b0f +size 13701742