Sourced from trufflesecurity/trufflehog's releases.

v3.90.6

What's Changed

• Added support for indeterminate verification for letter Q detectors by @​patidartanay in trufflesecurity/trufflehog#4398
• [Detector] rippling detector for phrase api tokens by @​SyedAliHamad in trufflesecurity/trufflehog#4348
• Added explicit secrets manager write flag to Bitbucket source proto and generate new files by @​casey-tran in trufflesecurity/trufflehog#4403
• [Feature] Updated Dotmailer Detector To Dotdigital by @​nabeelalam in trufflesecurity/trufflehog#4331
• Add support for AWS account allow and deny lists by @​dustin-decker in trufflesecurity/trufflehog#4407
• Enable cloning repository to a specified location with retention option by @​kashifkhan0771 in trufflesecurity/trufflehog#4408
• fix(deps): update module google.golang.org/protobuf to v1.36.8 by @​renovate[bot] in trufflesecurity/trufflehog#4397
• fix(deps): update module cloud.google.com/go/storage to v1.56.1 by @​renovate[bot] in trufflesecurity/trufflehog#4412
• added flyio detector by @​lonmarsDev in trufflesecurity/trufflehog#2381
• Added a dedicated optional flag to ignore gists during scan by @​kashifkhan0771 in trufflesecurity/trufflehog#4423
• Fix git tests if run with global commit.gpgsign=true by @​mariduv in trufflesecurity/trufflehog#4415
• Recover logger if wrapped by a non-logging context implementation by @​mcastorina in trufflesecurity/trufflehog#4406
• fix(deps): update aws-sdk-go-v2 monorepo by @​renovate[bot] in trufflesecurity/trufflehog#4422
• fix(deps): update module github.com/gabriel-vasile/mimetype to v1.4.10 by @​renovate[bot] in trufflesecurity/trufflehog#4424
• [GitHub] Add a GraphQL client to the connector by @​rgmz in trufflesecurity/trufflehog#3837
• Added support for additional validation rules in custom detector by @​kashifkhan0771 in trufflesecurity/trufflehog#4413
• Ignore known common prefix matches for Github V1 detector by @​kashifkhan0771 in trufflesecurity/trufflehog#4379
• Fix error propagation and a typo in verification logic by @​bradlarsen in trufflesecurity/trufflehog#4427
• [Feature] Added Detector for the Photoroom API by @​nabeelalam in trufflesecurity/trufflehog#4414
• Scan Github Private Repositories With Token by @​kashifkhan0771 in trufflesecurity/trufflehog#4426
• fix(deps): update module github.com/brianvoe/gofakeit/v7 to v7.5.1 by @​renovate[bot] in trufflesecurity/trufflehog#4425
• fix(deps): update module github.com/jedib0t/go-pretty/v6 to v6.6.8 by @​renovate[bot] in trufflesecurity/trufflehog#4396
• Fix legacy json flag for Github and Gitlab private repos by @​shahzadhaider1 in trufflesecurity/trufflehog#4386
• Changes to fix Enterprise UI filtering of Github Hosted Scanner Repositories to Include by @​jordanTunstill in trufflesecurity/trufflehog#4430
• pkg: fix some typos in comment by @​vetclippy in trufflesecurity/trufflehog#4440
• Added feature flag to configure projects per page in gitlab enumeration by @​kashifkhan0771 in trufflesecurity/trufflehog#4437

New Contributors

• @​patidartanay made their first contribution in trufflesecurity/trufflehog#4398
• @​bradlarsen made their first contribution in trufflesecurity/trufflehog#4427
• @​vetclippy made their first contribution in trufflesecurity/trufflehog#4440

Full Changelog: https://github.com/trufflesecurity/trufflehog/compare/v3.90.5...v3.90.6

• 18c7b1f Added feature flag to configure projects per page in gitlab enumeration (#4437)
• ce7a092 pkg: fix some typos in comment (#4440)
• a66d9e7 Changes to fix Enterprise UI filtering of Github Hosted Scanner Repositories ...
• 2114e77 Fix legacy json flag for Github and Gitlab private repos (#4386)
• 1e8671c fix(deps): update module github.com/jedib0t/go-pretty/v6 to v6.6.8 (#4396)
• 68899d3 fix(deps): update module github.com/brianvoe/gofakeit/v7 to v7.5.1 (#4425)
• 000d748 Scan Github Private Repositories With Token (#4426)
• b231e11 [Feature] Added Detector for the Photoroom API (#4414)
• 554cd79 Fix error propagation and a typo in verification logic (#4427)
• 6dd65a5 Ignore known common prefix matches for Github V1 detector (#4379)
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)