Sourced from aquasecurity/trivy-action's releases.

v0.33.1

What's Changed

• Update setup-trivy action to version v0.2.4 by @​martincostello in aquasecurity/trivy-action#486

Full Changelog: https://github.com/aquasecurity/trivy-action/compare/0.33.0...0.33.1

• b6643a2 Update setup-trivy action to version v0.2.4 (#486)
• See full diff in compare view

Sourced from trufflesecurity/trufflehog's releases.

v3.90.6

What's Changed

• Added support for indeterminate verification for letter Q detectors by @​patidartanay in trufflesecurity/trufflehog#4398
• [Detector] rippling detector for phrase api tokens by @​SyedAliHamad in trufflesecurity/trufflehog#4348
• Added explicit secrets manager write flag to Bitbucket source proto and generate new files by @​casey-tran in trufflesecurity/trufflehog#4403
• [Feature] Updated Dotmailer Detector To Dotdigital by @​nabeelalam in trufflesecurity/trufflehog#4331
• Add support for AWS account allow and deny lists by @​dustin-decker in trufflesecurity/trufflehog#4407
• Enable cloning repository to a specified location with retention option by @​kashifkhan0771 in trufflesecurity/trufflehog#4408
• fix(deps): update module google.golang.org/protobuf to v1.36.8 by @​renovate[bot] in trufflesecurity/trufflehog#4397
• fix(deps): update module cloud.google.com/go/storage to v1.56.1 by @​renovate[bot] in trufflesecurity/trufflehog#4412
• added flyio detector by @​lonmarsDev in trufflesecurity/trufflehog#2381
• Added a dedicated optional flag to ignore gists during scan by @​kashifkhan0771 in trufflesecurity/trufflehog#4423
• Fix git tests if run with global commit.gpgsign=true by @​mariduv in trufflesecurity/trufflehog#4415
• Recover logger if wrapped by a non-logging context implementation by @​mcastorina in trufflesecurity/trufflehog#4406
• fix(deps): update aws-sdk-go-v2 monorepo by @​renovate[bot] in trufflesecurity/trufflehog#4422
• fix(deps): update module github.com/gabriel-vasile/mimetype to v1.4.10 by @​renovate[bot] in trufflesecurity/trufflehog#4424
• [GitHub] Add a GraphQL client to the connector by @​rgmz in trufflesecurity/trufflehog#3837
• Added support for additional validation rules in custom detector by @​kashifkhan0771 in trufflesecurity/trufflehog#4413
• Ignore known common prefix matches for Github V1 detector by @​kashifkhan0771 in trufflesecurity/trufflehog#4379
• Fix error propagation and a typo in verification logic by @​bradlarsen in trufflesecurity/trufflehog#4427
• [Feature] Added Detector for the Photoroom API by @​nabeelalam in trufflesecurity/trufflehog#4414
• Scan Github Private Repositories With Token by @​kashifkhan0771 in trufflesecurity/trufflehog#4426
• fix(deps): update module github.com/brianvoe/gofakeit/v7 to v7.5.1 by @​renovate[bot] in trufflesecurity/trufflehog#4425
• fix(deps): update module github.com/jedib0t/go-pretty/v6 to v6.6.8 by @​renovate[bot] in trufflesecurity/trufflehog#4396
• Fix legacy json flag for Github and Gitlab private repos by @​shahzadhaider1 in trufflesecurity/trufflehog#4386
• Changes to fix Enterprise UI filtering of Github Hosted Scanner Repositories to Include by @​jordanTunstill in trufflesecurity/trufflehog#4430
• pkg: fix some typos in comment by @​vetclippy in trufflesecurity/trufflehog#4440
• Added feature flag to configure projects per page in gitlab enumeration by @​kashifkhan0771 in trufflesecurity/trufflehog#4437

New Contributors

• @​patidartanay made their first contribution in trufflesecurity/trufflehog#4398
• @​bradlarsen made their first contribution in trufflesecurity/trufflehog#4427
• @​vetclippy made their first contribution in trufflesecurity/trufflehog#4440

Full Changelog: https://github.com/trufflesecurity/trufflehog/compare/v3.90.5...v3.90.6

• 18c7b1f Added feature flag to configure projects per page in gitlab enumeration (#4437)
• ce7a092 pkg: fix some typos in comment (#4440)
• a66d9e7 Changes to fix Enterprise UI filtering of Github Hosted Scanner Repositories ...
• 2114e77 Fix legacy json flag for Github and Gitlab private repos (#4386)
• 1e8671c fix(deps): update module github.com/jedib0t/go-pretty/v6 to v6.6.8 (#4396)
• 68899d3 fix(deps): update module github.com/brianvoe/gofakeit/v7 to v7.5.1 (#4425)
• 000d748 Scan Github Private Repositories With Token (#4426)
• b231e11 [Feature] Added Detector for the Photoroom API (#4414)
• 554cd79 Fix error propagation and a typo in verification logic (#4427)
• 6dd65a5 Ignore known common prefix matches for Github V1 detector (#4379)
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions