What's Changed [SCAN-162] Add Err() to JobProgress and JobProgressRef by @dipto-truffle in #5346 ci: scope Smoke timeouts to trufflehog runs, not the build by @bryanbeverly in #5317 Update module github.com/aymanbagabas/go-osc52 to v1.2.2 by @renovate[bot] in #5252 Update module github.com/gabriel-vasile/mimetype to v1.4.15 by @renovate[bot] in #5283 make 401s for Basic auth verified false. by @jo…
What's Changed Add Okta OAuth support in Okta detector by @shreyas-sriram in #5323 Add per detector verification timing to verification cache by @kvnphvm in #5341 Set all verification errors in detectors by @shahzadhaider1 in #5253 Full Changelog: v3.97.7...v3.97.8
What's Changed Recognize a missing Postgres database by SQLSTATE by @gaborbernat in #5312 Improve Github App installation access token caching by @mariduv in #5324 give git the real base..head range for diff scans by @kvnphvm in #5325 Add GCS source documentation by @kashifkhan0771 in #5319 [PERF] Remove \b anchor from escaped-unicode codePointPat by @Ahsan-Sarbaz in #5320 🐛 fix(engine): map decod…
What's Changed Clarify security policy by @bradlarsen in #5295 Add git source documentation by @kashifkhan0771 in #5326 fix(gitparse): cheaper low-memory git scan, stop losing trailing commits by @kashifkhan0771 in #5331 analyzer/github: include is_fine_grained metadata and make gist enumeration non-fatal by @unsmith in #5332 Full Changelog: v3.97.5...v3.97.6
What's Changed Update module github.com/rabbitmq/amqp091-go to v1.13.0 [SECURITY] by @renovate[bot] in #5274 Update github-actions by @renovate[bot] in #5250 Update dependency golangci/golangci-lint to v2.13.2 by @renovate[bot] in #5251 Make GitHub App installationId optional when scanning all installations by @kashifkhan0771 in #5275 [INT-942] Add HumioAPIToken detector by @unsmith in #5258 Objec…
What's Changed Make Transport Errors indeterminate for Twilio secrets and twilioapikeys by @jordanTunstill in #5267 Improve the json-enumerator source by @bradlarsen in #5265 added tests for twilio detector fixes by @jordanTunstill in #5271 Full Changelog: v3.97.3...v3.97.4
What's Changed fix(s3): cut a child context per object so key/size log values don't pile up by @mariduv in #5236 Revert "[INT-933] De-base64 SourceUnit.UnitData in the GitHub Source" by @trufflesteeeve in #5269 Full Changelog: v3.97.2...v3.97.3
What's Changed detectors/github/v2: differentiate token type in ExtraData by @hartsock in #5223 Update dependency trufflesecurity/.github to v1.0.4 by @renovate[bot] in #5228 ci: let Renovate bump the golangci-lint pin in scripts/lint.sh by @bryanbeverly in #5231 Update github.com/trufflesecurity/ldap-verify digest to aa52b46 by @renovate[bot] in #5172 Update github-actions by @renovate[bot] in #5…
What's Changed Update module github.com/go-git/go-git/v5 to v5.19.2 [SECURITY] by @renovate[bot] in #5196 Fix GHEC with Data Residency (*.ghe.com) base URL by @shahzadhaider1 in #4777 docs: add generic config-secret custom detector example by @pgmpofu in #5195 fix(detectors/docker): don't greedy match in keyPat by @mariduv in #5214 [SCAN-1020] neon scram pgx by @alafiand in #5217 Raised MongoDB de…
What's Changed fix(detectors/privatekey): report encrypted keys with uncrackable passphrases by @genisis0x in #5127 Update module go.mongodb.org/mongo-driver to v1.17.7 [SECURITY] by @renovate[bot] in #5058 Remove url tag from common HTTP client metrics by @mcastorina in #5158 Update github.com/avast/apkparser digest to 7fcaee4 by @renovate[bot] in #5037 [INS-318] Add New Relic License Key Detecto…
What's Changed [INS-355] Added Hashicorp vault token detector by @MuneebUllahKhan222 in #4819 Tighten JiraToken v1 verification by @shahzadhaider1 in #5122 [INT-718] Add TargetNotFoundError for targeted scan targets missing from the source by @bill-rich in #5123 Fix GitLab project metadata cache and switch to LRU by @kashifkhan0771 in #4727 Log analyze errors for Anthropic Analyzer by @kashifkhan0…
What's Changed feat: add OpenRouter detector by @McPatate in #4500 Integrations fully codeowns detectors by @trufflesteeeve in #5104 [INS-332] Add New Relic Insights Insert key detector by @mustansir14 in #4778 [INS-351] Added Duffel Token Detector by @MuneebUllahKhan222 in #4795 [INS-341] Added Shippo detector by @MuneebUllahKhan222 in #4820 [INS-467] Add IPinfo detector to default detectors list…
What's Changed removed "unauthorized" as exception for rotated graphana secrets by @jordanTunstill in #5068 fix(azuresastoken): match SAS tokens regardless of parameter order by @genisis0x in #5043 Add prometheus metrics for engine channels and workers by @mcastorina in #5095 [INS-465] Skip unverified JWT Detector results when feature flag is enabled by @MuneebUllahKhan222 in #5072 [INS-334] Octop…
What's Changed fix(sources/filesystem): order resume comparison by path component by @genisis0x in #5041 test(handlers): point APK test fixture at trufflehog-test-assets by @amanfcp in #5053 fixed regex typo that was causing conf uuid's to be surfaced as non-live atlassian secrets. by @jordanTunstill in #5029 Fix GitHub App cross-org member enumeration using per-installation tokens by @dustin-deck…
What's Changed Enigma detector enhance verification to prevent false verified findings by @shahzadhaider1 in #5011 fix: scan files with lines exceeding bufio's default 64 KB token limit by @MuneebUllahKhan222 in #5022 fix(postgres): honor ignore tags for default port URLs by @Dawn-Fighter in #4968 Move to github.com/moby/moby/client from docker/docker by @trufflesteeeve in #4987 fix: avoid termina…
What's Changed [INS-461] Add test to ensure new detectors are registered in defaults.go by @mustansir14 in #4915 [INS-455] Unify common logic in Atlassian Data Center detectors by @mustansir14 in #4907 fix(github): cache repo info under original URL on redirect by @kashifkhan0771 in #4958 Added GitLab OAuth Detector by @shahzadhaider1 in #4729 Box Detector: Extract Subject ID for Analyzer Integrat…
What's Changed [INS-461] Add test to ensure new detectors are registered in defaults.go by @mustansir14 in #4915 [INS-455] Unify common logic in Atlassian Data Center detectors by @mustansir14 in #4907 fix(github): cache repo info under original URL on redirect by @kashifkhan0771 in #4958 Added GitLab OAuth Detector by @shahzadhaider1 in #4729 Box Detector: Extract Subject ID for Analyzer Integrat…
What's Changed Renamed AnypointOAuth2 detector's AnalysisInfo keys to make it consistent with its Analyzer by @MuneebUllahKhan222 in #4906 Rename AnalysisInfo field to SecretParts on detectors.Result by @mcastorina in #4911 Document SecretParts contract in detector-authoring docs by @mcastorina in #4912 Add a static check for detectors that don't set SecretParts by @mcastorina in #4913 Populate Se…
What's Changed Revert "[INS-397] Fix git version parser panic on non-numeric patch versions" by @trufflesteeeve in #4903 Full Changelog: v3.95.1...v3.95.2
What's Changed [INS-444] Fix verification logic in Mesibo detector by @mustansir14 in #4884 Full Changelog: v3.95.0...v3.95.1
What's Changed Upgrade golangci-lint in CI runner and Makefile by @amanfcp in #4861 Deprecate SquareUp Detector by @nabeelalam in #4855 [INS-397] Fix git version parser panic on non-numeric patch versions by @shahzadhaider1 in #4882 Fix Bitbucket line highlighting URLs by @shahzadhaider1 in #4854 [INS-403] Support Custom endpoint config in hashicorpvaultauth Detector by @MuneebUllahKhan222 in #482…
What's Changed Add release bot workflow by @bryanbeverly in #4835 handle AADSTS50173 as explicit revocation signal for azure refresh tokens by @jordanTunstill in #4842 Add AnalysisInfo to verified results by @hxnyk in #4862 Add nil check and error context to GitHub analyzer by @johnelliott in #4858 [CSM-1857] Fix expired Azure secrets being silently dropped by @dipto-truffle in #4845 Add HTML deco…
What's Changed Skip TestAPKHandler by @shahzadhaider1 in #4841 fix: replace release-guard workflow with revert-latest job by @sysread in #4838 Deprecated GoogleAPIKey Detector by @nabeelalam in #4853 todoist: replace deprecated verification endpoint by @rai1612 in #4828 Add Shopify OAuth Detector by @amanfcp in #4738 [INS-425] Updated google.golang.org/grpc v1.78.0 --> v1.79.3 by @MuneebUllahKhan2…