Sourced from aquasecurity/trivy-action's releases.

v0.34.2

What's Changed

• feat: add YAML support for trivyignores by @​nikpivkin in aquasecurity/trivy-action#508
• chore: bump default Trivy version to v0.69.2 by @​nick-the-nuke in aquasecurity/trivy-action#513
• chore: bump Trivy version to v0.69.2 in test workflow and README by @​DmitriyLewen in aquasecurity/trivy-action#515

New Contributors

• @​nick-the-nuke made their first contribution in aquasecurity/trivy-action#513

Full Changelog: https://github.com/aquasecurity/trivy-action/compare/0.34.1...0.34.2

• 97e0b38 chore: bump Trivy version to v0.69.2 in test workflow and README (#515)
• 4c61e63 chore: bump default Trivy version to v0.69.2 (#513)
• 1bd0625 Merge pull request #508 from nikpivkin/feat/pass-yaml-ignore-file
• bce3086 remove unused init-cache target
• 5a9fbb1 supress progress bar when download db
• 1615450 update trivyignores input description
• df85774 add comment about fd3
• 56c8dae remove unused variable
• 6476b93 feat: support for YAML ignore file
• See full diff in compare view

Sourced from trufflesecurity/trufflehog's releases.

v3.93.6

What's Changed

• GH_TOKEN needed for gh by @​bill-rich in trufflesecurity/trufflehog#4772
• Move verify flag into detectableChunk by @​rosecodym in trufflesecurity/trufflehog#4558

Full Changelog: https://github.com/trufflesecurity/trufflehog/compare/v3.93.5...v3.93.6

v3.93.5

What's Changed

• Add workspace_id to Slack Continuous metadata by @​mariduv in trufflesecurity/trufflehog#4749
• fix(release): Disable docker provenance feature by @​mariduv in trufflesecurity/trufflehog#4752
• Base64 decoding depth assessment by @​dxa4481 in trufflesecurity/trufflehog#4744
• [INS-246] Add Google Gemini API key detector by @​mustansir14 in trufflesecurity/trufflehog#4649
• Refactor log package by @​mcastorina in trufflesecurity/trufflehog#4734
• [INS-309]updated google api version to v0.259.0 by @​MuneebUllahKhan222 in trufflesecurity/trufflehog#4736
• fix(ftp): set read deadline on connection to prevent indefinite hang by @​dylanTruffle in trufflesecurity/trufflehog#4759
• added rotation on 403s access_refused, this detector considered them indeterminate failures by @​jordanTunstill in trufflesecurity/trufflehog#4740
• [INS-283] Support following symlinks in filesystem source by @​MuneebUllahKhan222 in trufflesecurity/trufflehog#4742
• Fix typos in comments in json-enumerator source by @​bradlarsen in trufflesecurity/trufflehog#4764
• Fix race condition in release process by @​bill-rich in trufflesecurity/trufflehog#4766

Full Changelog: https://github.com/trufflesecurity/trufflehog/compare/v3.93.4...v3.93.5

• 041f07e Move verify flag into detectableChunk (#4558)
• e976603 GH_TOKEN needed for gh (#4772)
• 7cdc7ef Fix race condition in release process (#4766)
• 4f1d07f Fix typos in comments in json-enumerator source (#4764)
• 4563dde [INS-283] Support following symlinks in filesystem source (#4742)
• be889fa added rotation on 403s access_refused, this detector considered them indeterm...
• e3cbb3a fix(ftp): set read deadline on connection to prevent indefinite hang (#4759)
• 0de5855 [INS-309]updated google api version to v0.259.0 (#4736)
• ec1d9a6 Refactor log package (#4734)
• 7c84b27 [INS-246] Add Google Gemini API key detector (#4649)
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions