SHA256
1
0
forked from pool/trufflehog
trufflehog/trufflehog.spec

56 lines
1.5 KiB
RPMSpec
Raw Normal View History

#
# spec file for package trufflehog
#
Accepting request 1139765 from home:ph03nix - Update to version 3.63.10: * [chore] - Add regex and keyword for api_org tokens (#2240) * Assume unauthenticated github scans have public visibility (#2308) * [fixup ] - Allow ssh cloning with AWS Code Commit (#2307) * added azure protos (#2304) * Disable recently added postgres detector because it it too sensitive (#2303) * [feat] - Provide CLI flag to only use custom verifiers (#2299) * Individuate archive tests #2293 * [feat] - Allow for the use of include/exclude path files for filesystem scans (#2297) * [chore] - small updates (#2288) * fix(deps): update module github.com/bradleyfalzon/ghinstallation/v2 to v2.9.0 (#2295) * fix(deps): update module github.com/aws/aws-sdk-go to v1.49.19 (#2294) * feat(installation): Implement checksum signature verification (#2157) * fix(deps): update module github.com/aws/aws-sdk-go to v1.49.18 (#2292) * fix(deps): update module cloud.google.com/go/storage to v1.36.0 (#2291) * chore(deps): update sigstore/cosign-installer action to v3.3.0 (#2290) * chore(deps): update alpine docker tag to v3.19 (#2287) * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.19 (#2286) * Extend memory cache (#2275) * fix(deps): update module github.com/gabriel-vasile/mimetype to v1.4.3 (#2285) * fix(deps): update golang.org/x/exp digest to 0dcbfd6 (#2284) * fix(deps): update module github.com/azuread/microsoft-authentication-library-for-go to v1.2.1 (#2282) * adding postgres detector (#2108) * update test (#2283) * fix(deps): update golang.org/x/exp digest to be819d1 (#2281) * fix(signable): ignore common false positives (#2230) * fix(parseur): ignore false positives (#2229) * [chore] - update docs for pre-commit (#2280) * 1833 Fix syslog udp (#1835) * Wrap temp deletion err #2277 OBS-URL: https://build.opensuse.org/request/show/1139765 OBS-URL: https://build.opensuse.org/package/show/devel:languages:go/trufflehog?expand=0&rev=42
2024-01-18 17:09:58 +00:00
# Copyright (c) 2024 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
# Please submit bugfixes or comments via https://bugs.opensuse.org/
#
Name: trufflehog
Accepting request 1169980 from home:ph03nix - Update to version 3.74.0: * [bug] - Correctly return the checked out buffer to the pool (#2732) * fix(deps): update module google.golang.org/api to v0.176.1 (#2736) * fix(deps): update module github.com/aws/aws-sdk-go to v1.51.27 (#2735) * Make connection issues less jarring (#2730) * [bug] - Fix disk write metric and update BufferedFileWriter file field (#2733) * Add false positive info to proto (#2729) * [refactor] - Update Write method signature in contentWriter interface (#2721) * fix(deps): update module github.com/aws/aws-sdk-go to v1.51.26 (#2728) * Move detectors.IsKnownFalsePositive from the detectors and into the engine (#2643) * fix(deps): update module google.golang.org/api to v0.176.0 (#2726) * added onfleet api key detector (#2375) * fix(deps): update module google.golang.org/api to v0.175.0 (#2724) * fix(deps): update module github.com/microsoft/go-mssqldb to v1.7.1 (#2720) * fix(deps): update module github.com/aws/aws-sdk-go to v1.51.25 (#2723) * Detect Slack workflows webhook (#2569) * fix(deps): update module github.com/couchbase/gocb/v2 to v2.8.1 (#2714) * fix(deps): update module github.com/xanzy/go-gitlab to v0.103.0 (#2715) * fix(deps): update module github.com/aws/aws-sdk-go to v1.51.24 (#2717) * fix(deps): update module google.golang.org/api to v0.174.0 (#2712) * fix(deps): update module github.com/aws/aws-sdk-go to v1.51.23 (#2711) * fix(deps): update module google.golang.org/api to v0.173.0 (#2709) * fix(deps): update module github.com/aws/aws-sdk-go to v1.51.22 (#2708) * fix(deps): update module github.com/go-ldap/ldap/v3 to v3.4.8 (#2707) * fix(deps): update golang.org/x/exp digest to fe59bbe (#2706) * fix(deps): update module go.mongodb.org/mongo-driver to v1.15.0 (#2700) * fix(deps): update module github.com/aws/aws-sdk-go to v1.51.21 (#2699) * fix(deps): update module github.com/aws/aws-sdk-go to v1.51.20 (#2698) * fix(deps): update module github.com/launchdarkly/go-server-sdk/v7 to v7.4.0 (#2697) * Adding Pagarme API key detection (#2665) * fix(deps): update module github.com/aws/aws-sdk-go to v1.51.19 (#2694) * chore(deps): update sigstore/cosign-installer action to v3.5.0 (#2695) * [refactor] - template detector (#2692) * Remove unnecessary space in Vultr regex pattern (#2689) * Add Wiz detector (#2691) * fix(deps): update module github.com/aws/aws-sdk-go to v1.51.18 (#2690) * fix(deps): update golang.org/x/exp digest to 93d18d7 (#2688) * Update README.md with Windows-specific Docker installation instructions (#2674) * fix(deps): update module github.com/aws/aws-sdk-go to v1.51.17 (#2686) * fix(deps): update module github.com/go-ldap/ldap/v3 to v3.4.7 (#2684) * fix(deps): update testcontainers-go monorepo to v0.30.0 (#2685) * fix(deps): update module github.com/xanzy/go-gitlab to v0.102.0 (#2682) * Enrich Gitlab enumeration logging (#2678) * fix(deps): update module github.com/aws/aws-sdk-go to v1.51.16 (#2680) * fix(deps): update golang.org/x/exp digest to c0f41cb (#2672) * fix(deps): update module github.com/wasilibs/go-re2 to v1.5.2 (#2681) * fix(deps): update module github.com/thezeroslave/zapsentry to v1.23.0 (#2667) * fix(deps): update module golang.org/x/net to v0.24.0 (#2662) * Handle inactive Slack account tokens (#2668) * [bug] - Add ASCII validation check for base64 decoding (#2671) * fix(deps): update module golang.org/x/oauth2 to v0.19.0 (#2670) * chore: fix some typos (#2666) * [chore] - update go-github dep manually (#2664) * fix(deps): update module github.com/google/go-github/v57 to v61 (#2652) * fix(deps): update module github.com/launchdarkly/go-server-sdk/v7 to v7.3.0 (#2660) * fix(deps): update module github.com/aws/aws-sdk-go to v1.51.14 (#2659) * upgrade launchdarkly dep (#2650) * chore: remove duplicate jiratoken.v2 detector (#2657) * fix(deps): update module github.com/aws/aws-sdk-go to v1.51.13 (#2655) * fix(deps): update module github.com/thezeroslave/zapsentry to v1.22.1 (#2654) * Add GitLab CI Pipeline Example in Documentation (#2601) * fix(deps): update module github.com/aws/aws-sdk-go to v1.51.12 (#2651) * add GCP application default credentials detector (#2530) * fix(deps): update module github.com/go-git/go-git/v5 to v5.12.0 (#2649) * fix(deps): update module github.com/thezeroslave/zapsentry to v1.22.0 (#2648) * fix(deps): update module github.com/aws/aws-sdk-go to v1.51.11 (#2646) * Add JupiterOne detector (#2446) * fix(deps): update module cloud.google.com/go/storage to v1.40.0 (#2645) * fix(deps): update module github.com/launchdarkly/go-server-sdk/v6 to v6.2.0 (#2638) * Fix GitHub enumeration & rate-limiting logic (#2625) * build: fix 'toolchair not available' error (#2642) * fix(deps): update module github.com/aws/aws-sdk-go to v1.51.10 (#2636) * make postman source public (#2635) * fix(deps): update module google.golang.org/api to v0.172.0 (#2634) * Fixing nitro check (#2631) * Link to GitHub contribution guide in CONTRIBUTING (#2632) OBS-URL: https://build.opensuse.org/request/show/1169980 OBS-URL: https://build.opensuse.org/package/show/devel:languages:go/trufflehog?expand=0&rev=89
2024-04-24 11:58:27 +00:00
Version: 3.74.0
Release: 0
Accepting request 1121212 from home:jfkw:branches:devel:languages:go - Packaging improvement: * _service change disabled to manual per osc deprecation warning: WARNING: Command 'disabledrun/dr' is obsolete, please convert your _service to use 'manual' and then 'manualrun/mr' instead. * _service reorder move set_version earlier so go_modules sees updated version * Summary and Description clarify the purpose of this CLI tool * Use %%name macro where applicable to normalize common lines across Go app packages. Also makes renaming binary easier when required to handle package name conflict. * Drop BuildRequires: libpcre1. libpcre2 is already included during build, and there is no mention in upstream source or docs that only libpcre1 is supported. Since upstream uses CGO_ENABLED=0 in their Makefile, it is not clear if or how libpcre would be a required dependency. * Drop BuildRequires: golang-packaging. The original macros for file movements into GOPATH are obsolete with Go modules. Macro go_nostrip is no longer needed with current binutils and Go. * Remove %%{go_nostrip} macro which is no longer recommended * Extract go build command from upstream Makefile. The go build command straightforward in this package. Calling go build directly from packaging where possible helps package maintainers review usage and normalize packaging standards. * Build PIE with pattern that may become recommended procedure: %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build A go toolchain buildmode default config would be preferable but none exist at this time. * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable * Drop export CGO_ENABLED="0" used by Makefile. Use the default unless there is a defined requirement or benefit. OBS-URL: https://build.opensuse.org/request/show/1121212 OBS-URL: https://build.opensuse.org/package/show/devel:languages:go/trufflehog?expand=0&rev=25
2023-10-30 15:10:34 +00:00
Summary: CLI tool to find exposed secrets in source and archives
License: AGPL-3.0-or-later
URL: https://github.com/trufflesecurity/trufflehog
Source: trufflehog-%{version}.tar.gz
Source1: vendor.tar.gz
Accepting request 1162849 from home:ph03nix - Update to version 3.71.1: * Use Lstat to identify non-regular files in filesystem source (#2628) * fix(deps): update module github.com/aws/aws-sdk-go to v1.51.8 (#2630) * [bugfix] - Update the Anthropic detector (#2629) * fix(deps): update module github.com/charmbracelet/glamour to v0.7.0 (#2627) * fix(deps): update module github.com/go-sql-driver/mysql to v1.8.1 (#2626) * Fix incorrect regular expression with missing closing bracket (#2616) * fix(deps): update golang.org/x/exp digest to a685a6e (#2621) * [chore] - upgrade dep (#2618) * Fix additional GitHub test errors #2614 * fix(deps): update module github.com/aws/aws-sdk-go to v1.51.7 (#2623) - Update to version 3.71.0: * fix(deps): update module github.com/aws/aws-sdk-go to v1.51.6 (#2615) * fix(deps): update module github.com/xanzy/go-gitlab to v0.101.0 (#2617) * fix(github): resolve panic & test failures (#2608) * Dockerhub v2 detector (#2361) * fix(deps): update module github.com/brianvoe/gofakeit/v6 to v7 (#2612) * Update Snyk detector (#2559) * MaxMind detector uses the right endpoint (#2577) * feat(gitparse): avoid uneeded calls to strconv.Unquote (#2605) * fix(deps): update module github.com/bradleyfalzon/ghinstallation/v2 to v2.10.0 (#2607) * fix(deps): update module google.golang.org/api to v0.171.0 (#2611) * fix(deps): update module github.com/brianvoe/gofakeit/v6 to v7 (#2524) * fix(deps): update module github.com/launchdarkly/go-server-sdk/v6 to v7 (#2590) * Use go 1.22 (#2599) * Refactor GitHub source (#2379) * Bump github.com/docker/docker (#2603) * [chore] Fix potential resource leak in postman source (#2606) * strings contain keyword check, add collection name to keywords (#2602) * fix(deps): update module github.com/aws/aws-sdk-go to v1.51.4 (#2604) * Postman Source (#2579) OBS-URL: https://build.opensuse.org/request/show/1162849 OBS-URL: https://build.opensuse.org/package/show/devel:languages:go/trufflehog?expand=0&rev=83
2024-03-27 12:01:09 +00:00
BuildRequires: golang(API) >= 1.22
%description
TruffleHog is a scanning engine that helps find exposed secrets
within e.g. GitHub/GitLab repos, AWS S3 buckets, GCS buckets,
Docker images, Circle CI/Travis CI setups, or in individual files.
%prep
%autosetup -D -a 1
%build
Accepting request 1121212 from home:jfkw:branches:devel:languages:go - Packaging improvement: * _service change disabled to manual per osc deprecation warning: WARNING: Command 'disabledrun/dr' is obsolete, please convert your _service to use 'manual' and then 'manualrun/mr' instead. * _service reorder move set_version earlier so go_modules sees updated version * Summary and Description clarify the purpose of this CLI tool * Use %%name macro where applicable to normalize common lines across Go app packages. Also makes renaming binary easier when required to handle package name conflict. * Drop BuildRequires: libpcre1. libpcre2 is already included during build, and there is no mention in upstream source or docs that only libpcre1 is supported. Since upstream uses CGO_ENABLED=0 in their Makefile, it is not clear if or how libpcre would be a required dependency. * Drop BuildRequires: golang-packaging. The original macros for file movements into GOPATH are obsolete with Go modules. Macro go_nostrip is no longer needed with current binutils and Go. * Remove %%{go_nostrip} macro which is no longer recommended * Extract go build command from upstream Makefile. The go build command straightforward in this package. Calling go build directly from packaging where possible helps package maintainers review usage and normalize packaging standards. * Build PIE with pattern that may become recommended procedure: %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build A go toolchain buildmode default config would be preferable but none exist at this time. * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable * Drop export CGO_ENABLED="0" used by Makefile. Use the default unless there is a defined requirement or benefit. OBS-URL: https://build.opensuse.org/request/show/1121212 OBS-URL: https://build.opensuse.org/package/show/devel:languages:go/trufflehog?expand=0&rev=25
2023-10-30 15:10:34 +00:00
%ifnarch ppc64
export GOFLAGS="-buildmode=pie"
%endif
go build
Accepting request 1121212 from home:jfkw:branches:devel:languages:go - Packaging improvement: * _service change disabled to manual per osc deprecation warning: WARNING: Command 'disabledrun/dr' is obsolete, please convert your _service to use 'manual' and then 'manualrun/mr' instead. * _service reorder move set_version earlier so go_modules sees updated version * Summary and Description clarify the purpose of this CLI tool * Use %%name macro where applicable to normalize common lines across Go app packages. Also makes renaming binary easier when required to handle package name conflict. * Drop BuildRequires: libpcre1. libpcre2 is already included during build, and there is no mention in upstream source or docs that only libpcre1 is supported. Since upstream uses CGO_ENABLED=0 in their Makefile, it is not clear if or how libpcre would be a required dependency. * Drop BuildRequires: golang-packaging. The original macros for file movements into GOPATH are obsolete with Go modules. Macro go_nostrip is no longer needed with current binutils and Go. * Remove %%{go_nostrip} macro which is no longer recommended * Extract go build command from upstream Makefile. The go build command straightforward in this package. Calling go build directly from packaging where possible helps package maintainers review usage and normalize packaging standards. * Build PIE with pattern that may become recommended procedure: %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build A go toolchain buildmode default config would be preferable but none exist at this time. * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable * Drop export CGO_ENABLED="0" used by Makefile. Use the default unless there is a defined requirement or benefit. OBS-URL: https://build.opensuse.org/request/show/1121212 OBS-URL: https://build.opensuse.org/package/show/devel:languages:go/trufflehog?expand=0&rev=25
2023-10-30 15:10:34 +00:00
%check
# execute the binary as a basic check
./%{name} --help
Accepting request 1121212 from home:jfkw:branches:devel:languages:go - Packaging improvement: * _service change disabled to manual per osc deprecation warning: WARNING: Command 'disabledrun/dr' is obsolete, please convert your _service to use 'manual' and then 'manualrun/mr' instead. * _service reorder move set_version earlier so go_modules sees updated version * Summary and Description clarify the purpose of this CLI tool * Use %%name macro where applicable to normalize common lines across Go app packages. Also makes renaming binary easier when required to handle package name conflict. * Drop BuildRequires: libpcre1. libpcre2 is already included during build, and there is no mention in upstream source or docs that only libpcre1 is supported. Since upstream uses CGO_ENABLED=0 in their Makefile, it is not clear if or how libpcre would be a required dependency. * Drop BuildRequires: golang-packaging. The original macros for file movements into GOPATH are obsolete with Go modules. Macro go_nostrip is no longer needed with current binutils and Go. * Remove %%{go_nostrip} macro which is no longer recommended * Extract go build command from upstream Makefile. The go build command straightforward in this package. Calling go build directly from packaging where possible helps package maintainers review usage and normalize packaging standards. * Build PIE with pattern that may become recommended procedure: %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build A go toolchain buildmode default config would be preferable but none exist at this time. * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable * Drop export CGO_ENABLED="0" used by Makefile. Use the default unless there is a defined requirement or benefit. OBS-URL: https://build.opensuse.org/request/show/1121212 OBS-URL: https://build.opensuse.org/package/show/devel:languages:go/trufflehog?expand=0&rev=25
2023-10-30 15:10:34 +00:00
%install
install -D -m 0755 %{name} %{buildroot}%{_bindir}/%{name}
%files
%doc README.md
%license LICENSE
Accepting request 1121212 from home:jfkw:branches:devel:languages:go - Packaging improvement: * _service change disabled to manual per osc deprecation warning: WARNING: Command 'disabledrun/dr' is obsolete, please convert your _service to use 'manual' and then 'manualrun/mr' instead. * _service reorder move set_version earlier so go_modules sees updated version * Summary and Description clarify the purpose of this CLI tool * Use %%name macro where applicable to normalize common lines across Go app packages. Also makes renaming binary easier when required to handle package name conflict. * Drop BuildRequires: libpcre1. libpcre2 is already included during build, and there is no mention in upstream source or docs that only libpcre1 is supported. Since upstream uses CGO_ENABLED=0 in their Makefile, it is not clear if or how libpcre would be a required dependency. * Drop BuildRequires: golang-packaging. The original macros for file movements into GOPATH are obsolete with Go modules. Macro go_nostrip is no longer needed with current binutils and Go. * Remove %%{go_nostrip} macro which is no longer recommended * Extract go build command from upstream Makefile. The go build command straightforward in this package. Calling go build directly from packaging where possible helps package maintainers review usage and normalize packaging standards. * Build PIE with pattern that may become recommended procedure: %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build A go toolchain buildmode default config would be preferable but none exist at this time. * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable * Drop export CGO_ENABLED="0" used by Makefile. Use the default unless there is a defined requirement or benefit. OBS-URL: https://build.opensuse.org/request/show/1121212 OBS-URL: https://build.opensuse.org/package/show/devel:languages:go/trufflehog?expand=0&rev=25
2023-10-30 15:10:34 +00:00
%{_bindir}/%{name}
%changelog