Mirrors/trufflehog
2
0
Fork 0
mirror of https://github.com/trufflesecurity/trufflehog.git synced 2024-11-10 07:04:24 +00:00
Code Issues Projects Releases Packages Wiki Activity
trufflehog/go.mod

181 lines
8.3 KiB
Modula-2
Raw Normal View History

module v3
2022-02-10 18:54:33 +00:00
module github.com/trufflesecurity/trufflehog/v3
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
Bump `go` from `1.18` to `1.20` (#1230) * Bump `go` from `1.18` to `1.20` * satisfy linter --------- Co-authored-by: Dustin Decker <dustin@trufflesec.com>
2023-03-31 21:37:03 +00:00
go 1.20
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
Log explanation of non-zero exit with found results (#431) * Log explanation of non-zero exit with found results * Change exit code and add documentation * Adjust exit code handling * Make action fail on found results * Use new overseer * Improve wording * Update README.md
2022-04-21 17:08:51 +00:00
replace github.com/jpillora/overseer => github.com/trufflesecurity/overseer v1.1.7-custom5
Remove overseer warn, and don't os.Exit on git error. (#348)
2022-04-09 01:20:19 +00:00
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
require (
Bump cloud.google.com/go/secretmanager from 1.11.0 to 1.11.1 (#1443) Bumps [cloud.google.com/go/secretmanager](https://github.com/googleapis/google-cloud-go) from 1.11.0 to 1.11.1. - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md) - [Commits](https://github.com/googleapis/google-cloud-go/compare/kms/v1.11.0...asset/v1.11.1) --- updated-dependencies: - dependency-name: cloud.google.com/go/secretmanager dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-04 17:11:49 +00:00
cloud.google.com/go/secretmanager v1.11.1
Bump cloud.google.com/go/storage from 1.30.1 to 1.31.0 (#1442) Bumps [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go) from 1.30.1 to 1.31.0. - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md) - [Commits](https://github.com/googleapis/google-cloud-go/compare/pubsub/v1.30.1...pubsub/v1.31.0) --- updated-dependencies: - dependency-name: cloud.google.com/go/storage dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Zachary Rice <zachary.rice@trufflesec.com>
2023-07-05 16:12:58 +00:00
cloud.google.com/go/storage v1.31.0
updates
2022-01-19 06:24:56 +00:00
github.com/Azure/go-autorest/autorest/azure/auth v0.5.11
Bump github.com/TheZeroSlave/zapsentry from 1.15.0 to 1.17.0 (#1470) Bumps [github.com/TheZeroSlave/zapsentry](https://github.com/TheZeroSlave/zapsentry) from 1.15.0 to 1.17.0. - [Release notes](https://github.com/TheZeroSlave/zapsentry/releases) - [Commits](https://github.com/TheZeroSlave/zapsentry/compare/v1.15.0...v1.17.0) --- updated-dependencies: - dependency-name: github.com/TheZeroSlave/zapsentry dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Zachary Rice <zachary.rice@trufflesec.com>
2023-07-10 17:56:28 +00:00
github.com/TheZeroSlave/zapsentry v1.17.0
Bump github.com/aws/aws-sdk-go from 1.44.61 to 1.44.83 (#731) Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.44.61 to 1.44.83. - [Release notes](https://github.com/aws/aws-sdk-go/releases) - [Changelog](https://github.com/aws/aws-sdk-go/blob/main/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-go/compare/v1.44.61...v1.44.83) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-23 23:27:01 +00:00
github.com/aws/aws-sdk-go v1.44.83
Bump github.com/bill-rich/disk-buffer-reader from v0.1.6 to v0.1.7 (#970)
2022-12-09 23:52:41 +00:00
github.com/bill-rich/disk-buffer-reader v0.1.7
Bump github.com/aws/aws-sdk-go from 1.44.4 to 1.44.9 (#532) Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.44.4 to 1.44.9. - [Release notes](https://github.com/aws/aws-sdk-go/releases) - [Changelog](https://github.com/aws/aws-sdk-go/blob/main/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-go/compare/v1.44.4...v1.44.9) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-05-09 15:40:17 +00:00
github.com/bill-rich/go-syslog v0.0.0-20220413021637-49edb52a574c
updates
2022-01-19 06:24:56 +00:00
github.com/bitfinexcom/bitfinex-api-go v0.0.0-20210608095005-9e0b26f200fb
Bump github.com/bradleyfalzon/ghinstallation/v2 from 2.3.0 to 2.4.0 (#1306) Bumps [github.com/bradleyfalzon/ghinstallation/v2](https://github.com/bradleyfalzon/ghinstallation) from 2.3.0 to 2.4.0. - [Release notes](https://github.com/bradleyfalzon/ghinstallation/releases) - [Commits](https://github.com/bradleyfalzon/ghinstallation/compare/v2.3.0...v2.4.0) --- updated-dependencies: - dependency-name: github.com/bradleyfalzon/ghinstallation/v2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-01 14:41:11 +00:00
github.com/bradleyfalzon/ghinstallation/v2 v2.4.0
Add Couchbase Detector (#1385) * init * add detector type * rotate leaked credentials * tighten up username pattern * isolated prefixregex as overrriding new line stuff * passwordPat working now * add username test * fix edge case * cleanup * make linter happy * make linter happy rd 2 * skip error logging * fix test * add password regex helper func * make test more robust * cleanup PR * remove comments * clarify prepend rationale
2023-06-26 18:37:10 +00:00
github.com/couchbase/gocb/v2 v2.6.3
Syslog source (#500) * Add syslog source * only load cert/key with tls * Cleanup * Linting Co-authored-by: Bill Rich <bill.rich@trufflesec.com>
2022-05-04 22:08:11 +00:00
github.com/crewjam/rfc5424 v0.1.0
Bump github.com/denisenkom/go-mssqldb from 0.12.2 to 0.12.3 (#851) Bumps [github.com/denisenkom/go-mssqldb](https://github.com/denisenkom/go-mssqldb) from 0.12.2 to 0.12.3. - [Release notes](https://github.com/denisenkom/go-mssqldb/releases) - [Commits](https://github.com/denisenkom/go-mssqldb/compare/v0.12.2...v0.12.3) --- updated-dependencies: - dependency-name: github.com/denisenkom/go-mssqldb dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-24 02:02:27 +00:00
github.com/denisenkom/go-mssqldb v0.12.3
Bump github.com/envoyproxy/protoc-gen-validate from 1.0.1 to 1.0.2 (#1445) Bumps [github.com/envoyproxy/protoc-gen-validate](https://github.com/envoyproxy/protoc-gen-validate) from 1.0.1 to 1.0.2. - [Release notes](https://github.com/envoyproxy/protoc-gen-validate/releases) - [Changelog](https://github.com/bufbuild/protoc-gen-validate/blob/main/.goreleaser.yaml) - [Commits](https://github.com/envoyproxy/protoc-gen-validate/compare/v1.0.1...v1.0.2) --- updated-dependencies: - dependency-name: github.com/envoyproxy/protoc-gen-validate dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-03 22:33:52 +00:00
github.com/envoyproxy/protoc-gen-validate v1.0.2
Bump github.com/fatih/color from 1.13.0 to 1.15.0 (#1174) Bumps [github.com/fatih/color](https://github.com/fatih/color) from 1.13.0 to 1.15.0. - [Release notes](https://github.com/fatih/color/releases) - [Commits](https://github.com/fatih/color/compare/v1.13.0...v1.15.0) --- updated-dependencies: - dependency-name: github.com/fatih/color dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-13 14:49:18 +00:00
github.com/fatih/color v1.15.0
Bump github.com/felixge/fgprof from 0.9.2 to 0.9.3 (#780) Bumps [github.com/felixge/fgprof](https://github.com/felixge/fgprof) from 0.9.2 to 0.9.3. - [Release notes](https://github.com/felixge/fgprof/releases) - [Commits](https://github.com/felixge/fgprof/compare/v0.9.2...v0.9.3) --- updated-dependencies: - dependency-name: github.com/felixge/fgprof dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-07 03:05:29 +00:00
github.com/felixge/fgprof v0.9.3
Bump github.com/getsentry/sentry-go from 0.21.0 to 0.22.0 (#1404) Bumps [github.com/getsentry/sentry-go](https://github.com/getsentry/sentry-go) from 0.21.0 to 0.22.0. - [Release notes](https://github.com/getsentry/sentry-go/releases) - [Changelog](https://github.com/getsentry/sentry-go/blob/master/CHANGELOG.md) - [Commits](https://github.com/getsentry/sentry-go/compare/v0.21.0...v0.22.0) --- updated-dependencies: - dependency-name: github.com/getsentry/sentry-go dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-20 17:27:14 +00:00
github.com/getsentry/sentry-go v0.22.0
Bump github.com/go-errors/errors from 1.4.1 to 1.4.2 Bumps [github.com/go-errors/errors](https://github.com/go-errors/errors) from 1.4.1 to 1.4.2. - [Release notes](https://github.com/go-errors/errors/releases) - [Commits](https://github.com/go-errors/errors/compare/v1.4.1...v1.4.2) --- updated-dependencies: - dependency-name: github.com/go-errors/errors dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
2022-01-20 19:26:13 +00:00
github.com/go-errors/errors v1.4.2
Bump github.com/go-git/go-git/v5 from 5.6.1 to 5.7.0 (#1389) Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.6.1 to 5.7.0. - [Release notes](https://github.com/go-git/go-git/releases) - [Commits](https://github.com/go-git/go-git/compare/v5.6.1...v5.7.0) --- updated-dependencies: - dependency-name: github.com/go-git/go-git/v5 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-13 19:51:48 +00:00
github.com/go-git/go-git/v5 v5.7.0
Bump github.com/go-ldap/ldap/v3 from 3.4.4 to 3.4.5 (#1422) Bumps [github.com/go-ldap/ldap/v3](https://github.com/go-ldap/ldap) from 3.4.4 to 3.4.5. - [Release notes](https://github.com/go-ldap/ldap/releases) - [Commits](https://github.com/go-ldap/ldap/compare/v3.4.4...v3.4.5) --- updated-dependencies: - dependency-name: github.com/go-ldap/ldap/v3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-26 15:25:53 +00:00
github.com/go-ldap/ldap/v3 v3.4.5
Bump github.com/go-logr/logr from 1.2.3 to 1.2.4 (#1226) Bumps [github.com/go-logr/logr](https://github.com/go-logr/logr) from 1.2.3 to 1.2.4. - [Release notes](https://github.com/go-logr/logr/releases) - [Changelog](https://github.com/go-logr/logr/blob/master/CHANGELOG.md) - [Commits](https://github.com/go-logr/logr/compare/v1.2.3...v1.2.4) --- updated-dependencies: - dependency-name: github.com/go-logr/logr dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-31 21:20:12 +00:00
github.com/go-logr/logr v1.2.4
Bump github.com/go-logr/zapr from 1.2.3 to 1.2.4 (#1355) Bumps [github.com/go-logr/zapr](https://github.com/go-logr/zapr) from 1.2.3 to 1.2.4. - [Release notes](https://github.com/go-logr/zapr/releases) - [Commits](https://github.com/go-logr/zapr/compare/v1.2.3...v1.2.4) --- updated-dependencies: - dependency-name: github.com/go-logr/zapr dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-22 14:30:29 +00:00
github.com/go-logr/zapr v1.2.4
Do local URI verification, while attempting to defuse SSRF (#879) * simplify monogo pattern * do URI verification locally, while attempting to defuse SSRF * test SSRF defuse * simplify err check logic per linter recommendation * split up detectors * address comments * remove unused var
2022-11-02 00:27:24 +00:00
github.com/go-redis/redis v6.15.9+incompatible
Bump github.com/go-sql-driver/mysql from 1.7.0 to 1.7.1 (#1336) Bumps [github.com/go-sql-driver/mysql](https://github.com/go-sql-driver/mysql) from 1.7.0 to 1.7.1. - [Release notes](https://github.com/go-sql-driver/mysql/releases) - [Changelog](https://github.com/go-sql-driver/mysql/blob/master/CHANGELOG.md) - [Commits](https://github.com/go-sql-driver/mysql/compare/v1.7.0...v1.7.1) --- updated-dependencies: - dependency-name: github.com/go-sql-driver/mysql dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-15 13:25:37 +00:00
github.com/go-sql-driver/mysql v1.7.1
Support globbing with ignore repos (#967)
2022-12-09 20:10:42 +00:00
github.com/gobwas/glob v0.2.3
update dependency
2022-03-09 23:49:57 +00:00
github.com/golang-jwt/jwt v3.2.2+incompatible
Bump github.com/google/go-cmp from 0.5.8 to 0.5.9 (#794) Bumps [github.com/google/go-cmp](https://github.com/google/go-cmp) from 0.5.8 to 0.5.9. - [Release notes](https://github.com/google/go-cmp/releases) - [Commits](https://github.com/google/go-cmp/compare/v0.5.8...v0.5.9) --- updated-dependencies: - dependency-name: github.com/google/go-cmp dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-16 15:50:49 +00:00
github.com/google/go-cmp v0.5.9
Bump github.com/envoyproxy/protoc-gen-validate from 1.0.1 to 1.0.2 (#1445) Bumps [github.com/envoyproxy/protoc-gen-validate](https://github.com/envoyproxy/protoc-gen-validate) from 1.0.1 to 1.0.2. - [Release notes](https://github.com/envoyproxy/protoc-gen-validate/releases) - [Changelog](https://github.com/bufbuild/protoc-gen-validate/blob/main/.goreleaser.yaml) - [Commits](https://github.com/envoyproxy/protoc-gen-validate/compare/v1.0.1...v1.0.2) --- updated-dependencies: - dependency-name: github.com/envoyproxy/protoc-gen-validate dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-03 22:33:52 +00:00
github.com/google/go-containerregistry v0.14.0
add debug pprof server and metrics server
2022-02-04 03:07:39 +00:00
github.com/google/go-github/v42 v42.0.0
Bump cloud.google.com/go/secretmanager from 1.11.0 to 1.11.1 (#1443) Bumps [cloud.google.com/go/secretmanager](https://github.com/googleapis/google-cloud-go) from 1.11.0 to 1.11.1. - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md) - [Commits](https://github.com/googleapis/google-cloud-go/compare/kms/v1.11.0...asset/v1.11.1) --- updated-dependencies: - dependency-name: cloud.google.com/go/secretmanager dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-04 17:11:49 +00:00
github.com/googleapis/gax-go/v2 v2.11.0
Bump github.com/hashicorp/go-retryablehttp from 0.7.2 to 0.7.4 (#1388) Bumps [github.com/hashicorp/go-retryablehttp](https://github.com/hashicorp/go-retryablehttp) from 0.7.2 to 0.7.4. - [Changelog](https://github.com/hashicorp/go-retryablehttp/blob/main/CHANGELOG.md) - [Commits](https://github.com/hashicorp/go-retryablehttp/compare/v0.7.2...v0.7.4) --- updated-dependencies: - dependency-name: github.com/hashicorp/go-retryablehttp dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-13 19:53:41 +00:00
github.com/hashicorp/go-retryablehttp v0.7.4
Bump github.com/jlaffaye/ftp from 0.1.0 to 0.2.0 (#1471) Bumps [github.com/jlaffaye/ftp](https://github.com/jlaffaye/ftp) from 0.1.0 to 0.2.0. - [Release notes](https://github.com/jlaffaye/ftp/releases) - [Commits](https://github.com/jlaffaye/ftp/compare/v0.1.0...v0.2.0) --- updated-dependencies: - dependency-name: github.com/jlaffaye/ftp dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Zachary Rice <zachary.rice@trufflesec.com>
2023-07-10 15:49:13 +00:00
github.com/jlaffaye/ftp v0.2.0
Bump github.com/joho/godotenv from 1.4.0 to 1.5.1 (#1075) Bumps [github.com/joho/godotenv](https://github.com/joho/godotenv) from 1.4.0 to 1.5.1. - [Release notes](https://github.com/joho/godotenv/releases) - [Commits](https://github.com/joho/godotenv/compare/v1.4.0...v1.5.1) --- updated-dependencies: - dependency-name: github.com/joho/godotenv dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-10 04:02:06 +00:00
github.com/joho/godotenv v1.5.1
Automatically update trufflehog (#121) Co-authored-by: Dustin Decker <dustin@trufflesec.com>
2022-04-03 18:51:56 +00:00
github.com/jpillora/overseer v1.1.6
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
github.com/kylelemons/godebug v1.1.0
Bump github.com/lib/pq from 1.10.8 to 1.10.9 (#1307) Bumps [github.com/lib/pq](https://github.com/lib/pq) from 1.10.8 to 1.10.9. - [Release notes](https://github.com/lib/pq/releases) - [Commits](https://github.com/lib/pq/compare/v1.10.8...v1.10.9) --- updated-dependencies: - dependency-name: github.com/lib/pq dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-01 14:55:12 +00:00
github.com/lib/pq v1.10.9
Bump github.com/mattn/go-sqlite3 from 1.14.16 to 1.14.17 (#1380) Bumps [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) from 1.14.16 to 1.14.17. - [Release notes](https://github.com/mattn/go-sqlite3/releases) - [Commits](https://github.com/mattn/go-sqlite3/compare/v1.14.16...v1.14.17) --- updated-dependencies: - dependency-name: github.com/mattn/go-sqlite3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-06 17:40:34 +00:00
github.com/mattn/go-sqlite3 v1.14.17
Bump github.com/mholt/archiver/v4 from 4.0.0-alpha.7 to 4.0.0-alpha.8 (#1305) Bumps [github.com/mholt/archiver/v4](https://github.com/mholt/archiver) from 4.0.0-alpha.7 to 4.0.0-alpha.8. - [Release notes](https://github.com/mholt/archiver/releases) - [Changelog](https://github.com/mholt/archiver/blob/master/.goreleaser.yml) - [Commits](https://github.com/mholt/archiver/compare/v4.0.0-alpha.7...v4.0.0-alpha.8) --- updated-dependencies: - dependency-name: github.com/mholt/archiver/v4 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-01 14:49:15 +00:00
github.com/mholt/archiver/v4 v4.0.0-alpha.8
Add in-memory caching pkg (#1189) * Add in-memory caching lib, used by the GCS source. * Fix static check. * Add test for NewWithData. * update comment. * update comments. * remove unused dep. * address comments. * Add exists method. * fix test.
2023-03-20 23:16:49 +00:00
github.com/patrickmn/go-cache v2.1.0+incompatible
Add snifftest
2022-03-11 05:41:35 +00:00
github.com/paulbellamy/ratecounter v0.2.0
Bump golang.org/x/crypto from 0.6.0 to 0.7.0 (#1158) Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.6.0 to 0.7.0. - [Release notes](https://github.com/golang/crypto/releases) - [Commits](https://github.com/golang/crypto/compare/v0.6.0...v0.7.0) --- updated-dependencies: - dependency-name: golang.org/x/crypto dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-07 00:11:59 +00:00
github.com/petar-dambovaliev/aho-corasick v0.0.0-20211021192214-5ab2d9280aa9
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
github.com/pkg/errors v0.9.1
🎉 Add Docker image scanning 🎉 (#1412) * Add Docker source * Add metrics * Add test * Add debugging, address PR comments, fix path output * review suggestions
2023-06-22 15:02:25 +00:00
github.com/prometheus/client_golang v1.16.0
Bump github.com/rabbitmq/amqp091-go from 1.8.0 to 1.8.1 (#1335) Bumps [github.com/rabbitmq/amqp091-go](https://github.com/rabbitmq/amqp091-go) from 1.8.0 to 1.8.1. - [Release notes](https://github.com/rabbitmq/amqp091-go/releases) - [Changelog](https://github.com/rabbitmq/amqp091-go/blob/main/CHANGELOG.md) - [Commits](https://github.com/rabbitmq/amqp091-go/compare/v1.8.0...v1.8.1) --- updated-dependencies: - dependency-name: github.com/rabbitmq/amqp091-go dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-15 13:56:00 +00:00
github.com/rabbitmq/amqp091-go v1.8.1
Bump github.com/sergi/go-diff from 1.2.0 to 1.3.1 (#1023) Bumps [github.com/sergi/go-diff](https://github.com/sergi/go-diff) from 1.2.0 to 1.3.1. - [Release notes](https://github.com/sergi/go-diff/releases) - [Commits](https://github.com/sergi/go-diff/compare/v1.2.0...v1.3.1) --- updated-dependencies: - dependency-name: github.com/sergi/go-diff dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-17 21:26:29 +00:00
github.com/sergi/go-diff v1.3.1
Bump github.com/stretchr/testify from 1.8.3 to 1.8.4 (#1377) Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.8.3 to 1.8.4. - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](https://github.com/stretchr/testify/compare/v1.8.3...v1.8.4) --- updated-dependencies: - dependency-name: github.com/stretchr/testify dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-06 17:41:01 +00:00
github.com/stretchr/testify v1.8.4
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
github.com/tailscale/depaware v0.0.0-20210622194025-720c4b409502
Bump github.com/xanzy/go-gitlab from 0.85.0 to 0.86.0 (#1425) Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab) from 0.85.0 to 0.86.0. - [Changelog](https://github.com/xanzy/go-gitlab/blob/master/releases_test.go) - [Commits](https://github.com/xanzy/go-gitlab/compare/v0.85.0...v0.86.0) --- updated-dependencies: - dependency-name: github.com/xanzy/go-gitlab dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-26 18:39:20 +00:00
github.com/xanzy/go-gitlab v0.86.0
Bump go.mongodb.org/mongo-driver from 1.11.6 to 1.12.0 (#1423) Bumps [go.mongodb.org/mongo-driver](https://github.com/mongodb/mongo-go-driver) from 1.11.6 to 1.12.0. - [Release notes](https://github.com/mongodb/mongo-go-driver/releases) - [Commits](https://github.com/mongodb/mongo-go-driver/compare/v1.11.6...v1.12.0) --- updated-dependencies: - dependency-name: go.mongodb.org/mongo-driver dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-26 15:27:09 +00:00
go.mongodb.org/mongo-driver v1.12.0
Bump go.uber.org/zap from 1.23.0 to 1.24.0 (#955) Bumps [go.uber.org/zap](https://github.com/uber-go/zap) from 1.23.0 to 1.24.0. - [Release notes](https://github.com/uber-go/zap/releases) - [Changelog](https://github.com/uber-go/zap/blob/master/CHANGELOG.md) - [Commits](https://github.com/uber-go/zap/compare/v1.23.0...v1.24.0) --- updated-dependencies: - dependency-name: go.uber.org/zap dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-06 23:38:28 +00:00
go.uber.org/zap v1.24.0
Bump golang.org/x/crypto from 0.10.0 to 0.11.0 (#1473) Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.10.0 to 0.11.0. - [Commits](https://github.com/golang/crypto/compare/v0.10.0...v0.11.0) --- updated-dependencies: - dependency-name: golang.org/x/crypto dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Zachary Rice <zachary.rice@trufflesec.com>
2023-07-10 15:42:31 +00:00
golang.org/x/crypto v0.11.0
[THOG-767] ignore gitlab repos (#853) * Add ability to ignore repos. * use std library slices.Contains. * Add tests. * Remove zero values from test.
2022-10-19 20:55:44 +00:00
golang.org/x/exp v0.0.0-20221018205818-5c77f4b2bbd7
Bump golang.org/x/oauth2 from 0.8.0 to 0.9.0 (#1407) Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from 0.8.0 to 0.9.0. - [Commits](https://github.com/golang/oauth2/compare/v0.8.0...v0.9.0) --- updated-dependencies: - dependency-name: golang.org/x/oauth2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-20 17:28:00 +00:00
golang.org/x/oauth2 v0.9.0
Bump golang.org/x/sync from 0.2.0 to 0.3.0 (#1426) Bumps [golang.org/x/sync](https://github.com/golang/sync) from 0.2.0 to 0.3.0. - [Commits](https://github.com/golang/sync/compare/v0.2.0...v0.3.0) --- updated-dependencies: - dependency-name: golang.org/x/sync dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-26 15:27:48 +00:00
golang.org/x/sync v0.3.0
Bump golang.org/x/crypto from 0.10.0 to 0.11.0 (#1473) Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.10.0 to 0.11.0. - [Commits](https://github.com/golang/crypto/compare/v0.10.0...v0.11.0) --- updated-dependencies: - dependency-name: golang.org/x/crypto dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Zachary Rice <zachary.rice@trufflesec.com>
2023-07-10 15:42:31 +00:00
golang.org/x/text v0.11.0
Bump google.golang.org/api from 0.128.0 to 0.129.0 (#1441) Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.128.0 to 0.129.0. - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.128.0...v0.129.0) --- updated-dependencies: - dependency-name: google.golang.org/api dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-05 16:12:48 +00:00
google.golang.org/api v0.129.0
Bump google.golang.org/protobuf from 1.30.0 to 1.31.0 (#1444) Bumps google.golang.org/protobuf from 1.30.0 to 1.31.0. --- updated-dependencies: - dependency-name: google.golang.org/protobuf dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-05 14:53:56 +00:00
google.golang.org/protobuf v1.31.0
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
gopkg.in/alecthomas/kingpin.v2 v2.2.6
Move GitHub integration tests behind a build flag and add unit tests (#527) * Add unit tests and refactor some logic * Move integration tests to a separate file behind a build flag * Fix bugs in normalizeRepos * Address lint errors * Sort slices before comparing because order doesn't matter
2022-05-09 15:31:00 +00:00
gopkg.in/h2non/gock.v1 v1.1.2
Add custom detectors configuration parsing (#927) * Add custom_detectors proto * Generate proto code * Create custom_detectors package Also create protoyaml package to test YAML unmarshalling the configuration. * Simplify custom_detectors proto by removing connection * Generate proto code * Update custom_detectors parsing tests
2022-11-21 21:10:38 +00:00
sigs.k8s.io/yaml v1.3.0
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
)
require (
Bump cloud.google.com/go/secretmanager from 1.11.0 to 1.11.1 (#1443) Bumps [cloud.google.com/go/secretmanager](https://github.com/googleapis/google-cloud-go) from 1.11.0 to 1.11.1. - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md) - [Commits](https://github.com/googleapis/google-cloud-go/compare/kms/v1.11.0...asset/v1.11.1) --- updated-dependencies: - dependency-name: cloud.google.com/go/secretmanager dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-04 17:11:49 +00:00
cloud.google.com/go v0.110.2 // indirect
cloud.google.com/go/compute v1.19.3 // indirect
Add gcs scanning integration (#1153) * Setup for GCS scanning. * Update GCS engine w/ projectID req. * Add concurrency field to gcsManager. * add errgroup to gcsManager. * Update gcs manager. * Use defautl ADC. * use ADC.' * Add TOOD. * add log to iterator completion. * use a BinaryReader instead of concrete object for channel type. * initial test for Chunks. * Add tests for chunking objects. * Add concurrency. * update metadata to include content type and acls. * Add object reading code. * Add integration test. * Add entrypoint. * Add removed wg.Wait(). * remove dead code. * remove build. * Remove period from file extension. * remove used. * Add comment. * Setup for GCS scanning. * Update GCS engine w/ projectID req. * Add concurrency field to gcsManager. * add errgroup to gcsManager. * Update gcs manager. * Use defautl ADC. * use ADC.' * Add TOOD. * add log to iterator completion. * use a BinaryReader instead of concrete object for channel type. * initial test for Chunks. * Add tests for chunking objects. * Add concurrency. * update metadata to include content type and acls. * Add object reading code. * Add integration test. * Add entrypoint. * Add removed wg.Wait(). * remove dead code. * remove build. * remove used. * Add file type for objects. * Add check for file type and size. * Add default file size. * Add additinoal auth options and remaining CLI flags. * Handle errors in go routines. * Handle resuming for buckets. * Remove redundant words in comment. * remove ok check on bool check. * remove extra blank line. * Add return if handler handles chunk. * Add comment. * remove extra blank line. * cleanup comment. * Add comment. * move up fxn. * go mod tidy. * Add exclusion to perf testing buckets. * Handle blocking the channel. * remove unused const. * fix tests. * fix tests. * Handle gcs manger options better. * update fxn name. * Remove arg name. * ignore buckets in gcsManager test. * fix test. * propulate gsManagerOpts. * inline err check. * Add readme. * update readme spelling. * fix test.
2023-03-08 01:32:04 +00:00
cloud.google.com/go/compute/metadata v0.2.3 // indirect
Bump cloud.google.com/go/secretmanager from 1.11.0 to 1.11.1 (#1443) Bumps [cloud.google.com/go/secretmanager](https://github.com/googleapis/google-cloud-go) from 1.11.0 to 1.11.1. - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md) - [Commits](https://github.com/googleapis/google-cloud-go/compare/kms/v1.11.0...asset/v1.11.1) --- updated-dependencies: - dependency-name: cloud.google.com/go/secretmanager dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-04 17:11:49 +00:00
cloud.google.com/go/iam v1.1.0 // indirect
updates
2022-01-19 06:24:56 +00:00
github.com/Azure/go-autorest v14.2.0+incompatible // indirect
github.com/Azure/go-autorest/autorest v0.11.24 // indirect
github.com/Azure/go-autorest/autorest/adal v0.9.18 // indirect
github.com/Azure/go-autorest/autorest/azure/cli v0.4.5 // indirect
github.com/Azure/go-autorest/autorest/date v0.3.0 // indirect
github.com/Azure/go-autorest/logger v0.2.1 // indirect
github.com/Azure/go-autorest/tracing v0.6.0 // indirect
Bump github.com/go-ldap/ldap/v3 from 3.4.4 to 3.4.5 (#1422) Bumps [github.com/go-ldap/ldap/v3](https://github.com/go-ldap/ldap) from 3.4.4 to 3.4.5. - [Release notes](https://github.com/go-ldap/ldap/releases) - [Commits](https://github.com/go-ldap/ldap/compare/v3.4.4...v3.4.5) --- updated-dependencies: - dependency-name: github.com/go-ldap/ldap/v3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-26 15:25:53 +00:00
github.com/Azure/go-ntlmssp v0.0.0-20221128193559-754e69321358 // indirect
🎉 Add Docker image scanning 🎉 (#1412) * Add Docker source * Add metrics * Add test * Add debugging, address PR comments, fix path output * review suggestions
2023-06-22 15:02:25 +00:00
github.com/Microsoft/go-winio v0.6.1 // indirect
Bump github.com/go-git/go-git/v5 from 5.6.1 to 5.7.0 (#1389) Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.6.1 to 5.7.0. - [Release notes](https://github.com/go-git/go-git/releases) - [Commits](https://github.com/go-git/go-git/compare/v5.6.1...v5.7.0) --- updated-dependencies: - dependency-name: github.com/go-git/go-git/v5 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-13 19:51:48 +00:00
github.com/ProtonMail/go-crypto v0.0.0-20230518184743-7afd39499903 // indirect
Bump github.com/go-git/go-git/v5 from 5.6.0 to 5.6.1 (#1194) Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.6.0 to 5.6.1. - [Release notes](https://github.com/go-git/go-git/releases) - [Commits](https://github.com/go-git/go-git/compare/v5.6.0...v5.6.1) --- updated-dependencies: - dependency-name: github.com/go-git/go-git/v5 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-20 18:09:35 +00:00
github.com/acomagu/bufpipe v1.0.4 // indirect
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
github.com/alecthomas/template v0.0.0-20190718012654-fb15b899a751 // indirect
github.com/alecthomas/units v0.0.0-20211218093645-b94a6e3cc137 // indirect
Bump github.com/getsentry/sentry-go from 0.19.0 to 0.20.0 (#1231) Bumps [github.com/getsentry/sentry-go](https://github.com/getsentry/sentry-go) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/getsentry/sentry-go/releases) - [Changelog](https://github.com/getsentry/sentry-go/blob/master/CHANGELOG.md) - [Commits](https://github.com/getsentry/sentry-go/compare/v0.19.0...v0.20.0) --- updated-dependencies: - dependency-name: github.com/getsentry/sentry-go dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-31 21:43:10 +00:00
github.com/andybalholm/brotli v1.0.5 // indirect
Move context and log libraries to trufflehog (#718) * Move context and log libraries to trufflehog * Fix lint errors
2022-08-17 20:03:35 +00:00
github.com/benbjohnson/clock v1.1.0 // indirect
🎉 Add Docker image scanning 🎉 (#1412) * Add Docker source * Add metrics * Add test * Add debugging, address PR comments, fix path output * review suggestions
2023-06-22 15:02:25 +00:00
github.com/beorn7/perks v1.0.1 // indirect
Bump github.com/mholt/archiver/v4 from 4.0.0-alpha.7 to 4.0.0-alpha.8 (#1305) Bumps [github.com/mholt/archiver/v4](https://github.com/mholt/archiver) from 4.0.0-alpha.7 to 4.0.0-alpha.8. - [Release notes](https://github.com/mholt/archiver/releases) - [Changelog](https://github.com/mholt/archiver/blob/master/.goreleaser.yml) - [Commits](https://github.com/mholt/archiver/compare/v4.0.0-alpha.7...v4.0.0-alpha.8) --- updated-dependencies: - dependency-name: github.com/mholt/archiver/v4 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-01 14:49:15 +00:00
github.com/bodgit/plumbing v1.2.0 // indirect
github.com/bodgit/sevenzip v1.3.0 // indirect
github.com/bodgit/windows v1.0.0 // indirect
🎉 Add Docker image scanning 🎉 (#1412) * Add Docker source * Add metrics * Add test * Add debugging, address PR comments, fix path output * review suggestions
2023-06-22 15:02:25 +00:00
github.com/cespare/xxhash/v2 v2.2.0 // indirect
Bump github.com/cloudflare/circl from 1.1.0 to 1.3.3 (#1339) Bumps [github.com/cloudflare/circl](https://github.com/cloudflare/circl) from 1.1.0 to 1.3.3. - [Release notes](https://github.com/cloudflare/circl/releases) - [Commits](https://github.com/cloudflare/circl/compare/v1.1.0...v1.3.3) --- updated-dependencies: - dependency-name: github.com/cloudflare/circl dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-15 13:21:39 +00:00
github.com/cloudflare/circl v1.3.3 // indirect
Bump github.com/mholt/archiver/v4 from 4.0.0-alpha.7 to 4.0.0-alpha.8 (#1305) Bumps [github.com/mholt/archiver/v4](https://github.com/mholt/archiver) from 4.0.0-alpha.7 to 4.0.0-alpha.8. - [Release notes](https://github.com/mholt/archiver/releases) - [Changelog](https://github.com/mholt/archiver/blob/master/.goreleaser.yml) - [Commits](https://github.com/mholt/archiver/compare/v4.0.0-alpha.7...v4.0.0-alpha.8) --- updated-dependencies: - dependency-name: github.com/mholt/archiver/v4 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-01 14:49:15 +00:00
github.com/connesc/cipherio v0.2.1 // indirect
🎉 Add Docker image scanning 🎉 (#1412) * Add Docker source * Add metrics * Add test * Add debugging, address PR comments, fix path output * review suggestions
2023-06-22 15:02:25 +00:00
github.com/containerd/stargz-snapshotter/estargz v0.14.3 // indirect
Bump github.com/envoyproxy/protoc-gen-validate from 1.0.1 to 1.0.2 (#1445) Bumps [github.com/envoyproxy/protoc-gen-validate](https://github.com/envoyproxy/protoc-gen-validate) from 1.0.1 to 1.0.2. - [Release notes](https://github.com/envoyproxy/protoc-gen-validate/releases) - [Changelog](https://github.com/bufbuild/protoc-gen-validate/blob/main/.goreleaser.yaml) - [Commits](https://github.com/envoyproxy/protoc-gen-validate/compare/v1.0.1...v1.0.2) --- updated-dependencies: - dependency-name: github.com/envoyproxy/protoc-gen-validate dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-03 22:33:52 +00:00
github.com/couchbase/gocbcore/v10 v10.2.3 // indirect
Move GitHub integration tests behind a build flag and add unit tests (#527) * Add unit tests and refactor some logic * Move integration tests to a separate file behind a build flag * Fix bugs in normalizeRepos * Address lint errors * Sort slices before comparing because order doesn't matter
2022-05-09 15:31:00 +00:00
github.com/davecgh/go-spew v1.1.1 // indirect
updates
2022-01-19 06:24:56 +00:00
github.com/dimchansky/utfbom v1.1.1 // indirect
🎉 Add Docker image scanning 🎉 (#1412) * Add Docker source * Add metrics * Add test * Add debugging, address PR comments, fix path output * review suggestions
2023-06-22 15:02:25 +00:00
github.com/docker/cli v23.0.5+incompatible // indirect
Bump github.com/docker/distribution (#1415) Bumps [github.com/docker/distribution](https://github.com/docker/distribution) from 2.8.1+incompatible to 2.8.2+incompatible. - [Release notes](https://github.com/docker/distribution/releases) - [Commits](https://github.com/docker/distribution/compare/v2.8.1...v2.8.2) --- updated-dependencies: - dependency-name: github.com/docker/distribution dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-22 16:14:47 +00:00
github.com/docker/distribution v2.8.2+incompatible // indirect
🎉 Add Docker image scanning 🎉 (#1412) * Add Docker source * Add metrics * Add test * Add debugging, address PR comments, fix path output * review suggestions
2023-06-22 15:02:25 +00:00
github.com/docker/docker v23.0.5+incompatible // indirect
github.com/docker/docker-credential-helpers v0.7.0 // indirect
Archive decoder (#683) * Archive decoder * Fix reader handling * Seek error handling * Add tests * Fix extra empty chunk * Sync chunk size
2022-08-03 03:36:21 +00:00
github.com/dsnet/compress v0.0.1 // indirect
Bump github.com/go-git/go-git/v5 from 5.4.2 to 5.5.1 (#972) Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.4.2 to 5.5.1. - [Release notes](https://github.com/go-git/go-git/releases) - [Commits](https://github.com/go-git/go-git/compare/v5.4.2...v5.5.1) --- updated-dependencies: - dependency-name: github.com/go-git/go-git/v5 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-12 23:56:26 +00:00
github.com/emirpasic/gods v1.18.1 // indirect
add LDAP detector (#896)
2022-11-19 03:45:11 +00:00
github.com/go-asn1-ber/asn1-ber v1.5.4 // indirect
Bump github.com/go-git/go-git/v5 from 5.6.1 to 5.7.0 (#1389) Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.6.1 to 5.7.0. - [Release notes](https://github.com/go-git/go-git/releases) - [Commits](https://github.com/go-git/go-git/compare/v5.6.1...v5.7.0) --- updated-dependencies: - dependency-name: github.com/go-git/go-git/v5 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-13 19:51:48 +00:00
github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect
Bump github.com/go-git/go-git/v5 from 5.6.0 to 5.6.1 (#1194) Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.6.0 to 5.6.1. - [Release notes](https://github.com/go-git/go-git/releases) - [Commits](https://github.com/go-git/go-git/compare/v5.6.0...v5.6.1) --- updated-dependencies: - dependency-name: github.com/go-git/go-git/v5 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-20 18:09:35 +00:00
github.com/go-git/go-billy/v5 v5.4.1 // indirect
Automatically update trufflehog (#121) Co-authored-by: Dustin Decker <dustin@trufflesec.com>
2022-04-03 18:51:56 +00:00
github.com/go-ole/go-ole v1.2.6 // indirect
Bump github.com/bradleyfalzon/ghinstallation/v2 from 2.1.0 to 2.2.0 (#1148) Bumps [github.com/bradleyfalzon/ghinstallation/v2](https://github.com/bradleyfalzon/ghinstallation) from 2.1.0 to 2.2.0. - [Release notes](https://github.com/bradleyfalzon/ghinstallation/releases) - [Commits](https://github.com/bradleyfalzon/ghinstallation/compare/v2.1.0...v2.2.0) --- updated-dependencies: - dependency-name: github.com/bradleyfalzon/ghinstallation/v2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-07 01:07:44 +00:00
github.com/golang-jwt/jwt/v4 v4.5.0 // indirect
[THOG-162] Implement JDBC verification for select drivers (#792) * [THOG-162] Implement JDBC verification for select drivers Also includes integration tests for postgres and mysql via docker. To run, execute the following (untested what will happen if the docker images aren't installed): go test -tags=detectors,integration ./pkg/detectors/jdbc * Make jdbc regex a bit more strict * Surface the context to allow the caller to set a timeout
2022-09-21 15:50:48 +00:00
github.com/golang-sql/civil v0.0.0-20190719163853-cb61b32ac6fe // indirect
github.com/golang-sql/sqlexp v0.1.0 // indirect
Bump cloud.google.com/go/secretmanager from 1.10.0 to 1.10.1 (#1365) Bumps [cloud.google.com/go/secretmanager](https://github.com/googleapis/google-cloud-go) from 1.10.0 to 1.10.1. - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md) - [Commits](https://github.com/googleapis/google-cloud-go/compare/kms/v1.10.0...kms/v1.10.1) --- updated-dependencies: - dependency-name: cloud.google.com/go/secretmanager dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-30 17:04:09 +00:00
github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
Bump github.com/xanzy/go-gitlab from 0.80.2 to 0.81.0 (#1172) Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab) from 0.80.2 to 0.81.0. - [Release notes](https://github.com/xanzy/go-gitlab/releases) - [Changelog](https://github.com/xanzy/go-gitlab/blob/master/releases_test.go) - [Commits](https://github.com/xanzy/go-gitlab/compare/v0.80.2...v0.81.0) --- updated-dependencies: - dependency-name: github.com/xanzy/go-gitlab dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-13 15:59:49 +00:00
github.com/golang/protobuf v1.5.3 // indirect
Archive decoder (#683) * Archive decoder * Fix reader handling * Seek error handling * Add tests * Fix extra empty chunk * Sync chunk size
2022-08-03 03:36:21 +00:00
github.com/golang/snappy v0.0.4 // indirect
Bump github.com/bradleyfalzon/ghinstallation/v2 from 2.3.0 to 2.4.0 (#1306) Bumps [github.com/bradleyfalzon/ghinstallation/v2](https://github.com/bradleyfalzon/ghinstallation) from 2.3.0 to 2.4.0. - [Release notes](https://github.com/bradleyfalzon/ghinstallation/releases) - [Commits](https://github.com/bradleyfalzon/ghinstallation/compare/v2.3.0...v2.4.0) --- updated-dependencies: - dependency-name: github.com/bradleyfalzon/ghinstallation/v2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-01 14:41:11 +00:00
github.com/google/go-github/v52 v52.0.0 // indirect
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
github.com/google/go-querystring v1.1.0 // indirect
Record avg detector time
2022-02-07 18:29:06 +00:00
github.com/google/pprof v0.0.0-20211214055906-6f57359322fd // indirect
Bump cloud.google.com/go/secretmanager from 1.11.0 to 1.11.1 (#1443) Bumps [cloud.google.com/go/secretmanager](https://github.com/googleapis/google-cloud-go) from 1.11.0 to 1.11.1. - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md) - [Commits](https://github.com/googleapis/google-cloud-go/compare/kms/v1.11.0...asset/v1.11.1) --- updated-dependencies: - dependency-name: cloud.google.com/go/secretmanager dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-04 17:11:49 +00:00
github.com/google/s2a-go v0.1.4 // indirect
Add gcs scanning integration (#1153) * Setup for GCS scanning. * Update GCS engine w/ projectID req. * Add concurrency field to gcsManager. * add errgroup to gcsManager. * Update gcs manager. * Use defautl ADC. * use ADC.' * Add TOOD. * add log to iterator completion. * use a BinaryReader instead of concrete object for channel type. * initial test for Chunks. * Add tests for chunking objects. * Add concurrency. * update metadata to include content type and acls. * Add object reading code. * Add integration test. * Add entrypoint. * Add removed wg.Wait(). * remove dead code. * remove build. * Remove period from file extension. * remove used. * Add comment. * Setup for GCS scanning. * Update GCS engine w/ projectID req. * Add concurrency field to gcsManager. * add errgroup to gcsManager. * Update gcs manager. * Use defautl ADC. * use ADC.' * Add TOOD. * add log to iterator completion. * use a BinaryReader instead of concrete object for channel type. * initial test for Chunks. * Add tests for chunking objects. * Add concurrency. * update metadata to include content type and acls. * Add object reading code. * Add integration test. * Add entrypoint. * Add removed wg.Wait(). * remove dead code. * remove build. * remove used. * Add file type for objects. * Add check for file type and size. * Add default file size. * Add additinoal auth options and remaining CLI flags. * Handle errors in go routines. * Handle resuming for buckets. * Remove redundant words in comment. * remove ok check on bool check. * remove extra blank line. * Add return if handler handles chunk. * Add comment. * remove extra blank line. * cleanup comment. * Add comment. * move up fxn. * go mod tidy. * Add exclusion to perf testing buckets. * Handle blocking the channel. * remove unused const. * fix tests. * fix tests. * Handle gcs manger options better. * update fxn name. * Remove arg name. * ignore buckets in gcsManager test. * fix test. * propulate gsManagerOpts. * inline err check. * Add readme. * update readme spelling. * fix test.
2023-03-08 01:32:04 +00:00
github.com/google/uuid v1.3.0 // indirect
Bump google.golang.org/api from 0.128.0 to 0.129.0 (#1441) Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.128.0 to 0.129.0. - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.128.0...v0.129.0) --- updated-dependencies: - dependency-name: google.golang.org/api dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-05 16:12:48 +00:00
github.com/googleapis/enterprise-certificate-proxy v0.2.5 // indirect
Move GitHub integration tests behind a build flag and add unit tests (#527) * Add unit tests and refactor some logic * Move integration tests to a separate file behind a build flag * Fix bugs in normalizeRepos * Address lint errors * Sort slices before comparing because order doesn't matter
2022-05-09 15:31:00 +00:00
github.com/h2non/parth v0.0.0-20190131123155-b4df798d6542 // indirect
Do local URI verification, while attempting to defuse SSRF (#879) * simplify monogo pattern * do URI verification locally, while attempting to defuse SSRF * test SSRF defuse * simplify err check logic per linter recommendation * split up detectors * address comments * remove unused var
2022-11-02 00:27:24 +00:00
github.com/hashicorp/errwrap v1.0.0 // indirect
Bump github.com/xanzy/go-gitlab from 0.65.0 to 0.69.0 (#660) Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab) from 0.65.0 to 0.69.0. - [Release notes](https://github.com/xanzy/go-gitlab/releases) - [Changelog](https://github.com/xanzy/go-gitlab/blob/master/releases_test.go) - [Commits](https://github.com/xanzy/go-gitlab/compare/v0.65.0...v0.69.0) --- updated-dependencies: - dependency-name: github.com/xanzy/go-gitlab dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-19 00:02:27 +00:00
github.com/hashicorp/go-cleanhttp v0.5.2 // indirect
Do local URI verification, while attempting to defuse SSRF (#879) * simplify monogo pattern * do URI verification locally, while attempting to defuse SSRF * test SSRF defuse * simplify err check logic per linter recommendation * split up detectors * address comments * remove unused var
2022-11-02 00:27:24 +00:00
github.com/hashicorp/go-multierror v1.1.1 // indirect
Bump github.com/go-git/go-git/v5 from 5.6.1 to 5.7.0 (#1389) Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.6.1 to 5.7.0. - [Release notes](https://github.com/go-git/go-git/releases) - [Commits](https://github.com/go-git/go-git/compare/v5.6.1...v5.7.0) --- updated-dependencies: - dependency-name: github.com/go-git/go-git/v5 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-13 19:51:48 +00:00
github.com/imdario/mergo v0.3.15 // indirect
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 // indirect
updates
2022-01-19 06:24:56 +00:00
github.com/jmespath/go-jmespath v0.4.0 // indirect
Automatically update trufflehog (#121) Co-authored-by: Dustin Decker <dustin@trufflesec.com>
2022-04-03 18:51:56 +00:00
github.com/jpillora/s3 v1.1.4 // indirect
Bump github.com/go-git/go-git/v5 from 5.4.2 to 5.5.1 (#972) Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.4.2 to 5.5.1. - [Release notes](https://github.com/go-git/go-git/releases) - [Commits](https://github.com/go-git/go-git/compare/v5.4.2...v5.5.1) --- updated-dependencies: - dependency-name: github.com/go-git/go-git/v5 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-12 23:56:26 +00:00
github.com/kevinburke/ssh_config v1.2.0 // indirect
🎉 Add Docker image scanning 🎉 (#1412) * Add Docker source * Add metrics * Add test * Add debugging, address PR comments, fix path output * review suggestions
2023-06-22 15:02:25 +00:00
github.com/klauspost/compress v1.16.5 // indirect
Archive decoder (#683) * Archive decoder * Fix reader handling * Seek error handling * Add tests * Fix extra empty chunk * Sync chunk size
2022-08-03 03:36:21 +00:00
github.com/klauspost/pgzip v1.2.5 // indirect
[chore] Remove logrus from trufflehog (#1095) * [chore] Remove logrus from trufflehog * Minor fixes * Fix logFatal call * Fix logrus call
2023-02-14 23:00:07 +00:00
github.com/mattn/go-colorable v0.1.13 // indirect
Bump github.com/fatih/color from 1.13.0 to 1.15.0 (#1174) Bumps [github.com/fatih/color](https://github.com/fatih/color) from 1.13.0 to 1.15.0. - [Release notes](https://github.com/fatih/color/releases) - [Commits](https://github.com/fatih/color/compare/v1.13.0...v1.15.0) --- updated-dependencies: - dependency-name: github.com/fatih/color dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-13 14:49:18 +00:00
github.com/mattn/go-isatty v0.0.17 // indirect
🎉 Add Docker image scanning 🎉 (#1412) * Add Docker source * Add metrics * Add test * Add debugging, address PR comments, fix path output * review suggestions
2023-06-22 15:02:25 +00:00
github.com/matttproud/golang_protobuf_extensions v1.0.4 // indirect
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
github.com/mitchellh/go-homedir v1.1.0 // indirect
Add support for MongoDB detector. (#793) * Add support for MongoDB detector. * Remove extra line. * Remove unused arg. * Add context around found secret test. * Remove unused arg.
2022-09-15 12:47:09 +00:00
github.com/montanaflynn/stats v0.0.0-20171201202039-1bf9dbcd8cbe // indirect
Archive decoder (#683) * Archive decoder * Fix reader handling * Seek error handling * Add tests * Fix extra empty chunk * Sync chunk size
2022-08-03 03:36:21 +00:00
github.com/nwaples/rardecode/v2 v2.0.0-beta.2 // indirect
Do local URI verification, while attempting to defuse SSRF (#879) * simplify monogo pattern * do URI verification locally, while attempting to defuse SSRF * test SSRF defuse * simplify err check logic per linter recommendation * split up detectors * address comments * remove unused var
2022-11-02 00:27:24 +00:00
github.com/onsi/ginkgo v1.16.5 // indirect
github.com/onsi/gomega v1.23.0 // indirect
🎉 Add Docker image scanning 🎉 (#1412) * Add Docker source * Add metrics * Add test * Add debugging, address PR comments, fix path output * review suggestions
2023-06-22 15:02:25 +00:00
github.com/opencontainers/go-digest v1.0.0 // indirect
github.com/opencontainers/image-spec v1.1.0-rc3 // indirect
Bump github.com/mholt/archiver/v4 from 4.0.0-alpha.7 to 4.0.0-alpha.8 (#1305) Bumps [github.com/mholt/archiver/v4](https://github.com/mholt/archiver) from 4.0.0-alpha.7 to 4.0.0-alpha.8. - [Release notes](https://github.com/mholt/archiver/releases) - [Changelog](https://github.com/mholt/archiver/blob/master/.goreleaser.yml) - [Commits](https://github.com/mholt/archiver/compare/v4.0.0-alpha.7...v4.0.0-alpha.8) --- updated-dependencies: - dependency-name: github.com/mholt/archiver/v4 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-01 14:49:15 +00:00
github.com/pierrec/lz4/v4 v4.1.15 // indirect
Bump github.com/go-git/go-git/v5 from 5.5.2 to 5.6.0 (#1147) Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.5.2 to 5.6.0. - [Release notes](https://github.com/go-git/go-git/releases) - [Commits](https://github.com/go-git/go-git/compare/v5.5.2...v5.6.0) --- updated-dependencies: - dependency-name: github.com/go-git/go-git/v5 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-07 01:07:14 +00:00
github.com/pjbgf/sha1cd v0.3.0 // indirect
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
github.com/pkg/diff v0.0.0-20200914180035-5b29258ca4f7 // indirect
Move GitHub integration tests behind a build flag and add unit tests (#527) * Add unit tests and refactor some logic * Move integration tests to a separate file behind a build flag * Fix bugs in normalizeRepos * Address lint errors * Sort slices before comparing because order doesn't matter
2022-05-09 15:31:00 +00:00
github.com/pmezard/go-difflib v1.0.0 // indirect
🎉 Add Docker image scanning 🎉 (#1412) * Add Docker source * Add metrics * Add test * Add debugging, address PR comments, fix path output * review suggestions
2023-06-22 15:02:25 +00:00
github.com/prometheus/client_model v0.3.0 // indirect
github.com/prometheus/common v0.42.0 // indirect
github.com/prometheus/procfs v0.10.1 // indirect
github.com/rogpeppe/go-internal v1.10.0 // indirect
github.com/sirupsen/logrus v1.9.0 // indirect
Bump github.com/go-git/go-git/v5 from 5.6.1 to 5.7.0 (#1389) Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.6.1 to 5.7.0. - [Release notes](https://github.com/go-git/go-git/releases) - [Commits](https://github.com/go-git/go-git/compare/v5.6.1...v5.7.0) --- updated-dependencies: - dependency-name: github.com/go-git/go-git/v5 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-13 19:51:48 +00:00
github.com/skeema/knownhosts v1.1.1 // indirect
Archive decoder (#683) * Archive decoder * Fix reader handling * Seek error handling * Add tests * Fix extra empty chunk * Sync chunk size
2022-08-03 03:36:21 +00:00
github.com/therootcompany/xz v1.0.1 // indirect
github.com/ulikunitz/xz v0.5.10 // indirect
🎉 Add Docker image scanning 🎉 (#1412) * Add Docker source * Add metrics * Add test * Add debugging, address PR comments, fix path output * review suggestions
2023-06-22 15:02:25 +00:00
github.com/vbatts/tar-split v0.11.3 // indirect
Bump github.com/go-git/go-git/v5 from 5.4.2 to 5.5.1 (#972) Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.4.2 to 5.5.1. - [Release notes](https://github.com/go-git/go-git/releases) - [Commits](https://github.com/go-git/go-git/compare/v5.4.2...v5.5.1) --- updated-dependencies: - dependency-name: github.com/go-git/go-git/v5 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-12 23:56:26 +00:00
github.com/xanzy/ssh-agent v0.3.3 // indirect
Add support for MongoDB detector. (#793) * Add support for MongoDB detector. * Remove extra line. * Remove unused arg. * Add context around found secret test. * Remove unused arg.
2022-09-15 12:47:09 +00:00
github.com/xdg-go/pbkdf2 v1.0.0 // indirect
Bump go.mongodb.org/mongo-driver from 1.11.6 to 1.12.0 (#1423) Bumps [go.mongodb.org/mongo-driver](https://github.com/mongodb/mongo-go-driver) from 1.11.6 to 1.12.0. - [Release notes](https://github.com/mongodb/mongo-go-driver/releases) - [Commits](https://github.com/mongodb/mongo-go-driver/compare/v1.11.6...v1.12.0) --- updated-dependencies: - dependency-name: go.mongodb.org/mongo-driver dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-26 15:27:09 +00:00
github.com/xdg-go/scram v1.1.2 // indirect
github.com/xdg-go/stringprep v1.0.4 // indirect
Add support for MongoDB detector. (#793) * Add support for MongoDB detector. * Remove extra line. * Remove unused arg. * Add context around found secret test. * Remove unused arg.
2022-09-15 12:47:09 +00:00
github.com/youmark/pkcs8 v0.0.0-20181117223130-1be2e3e5546d // indirect
Automatically update trufflehog (#121) Co-authored-by: Dustin Decker <dustin@trufflesec.com>
2022-04-03 18:51:56 +00:00
github.com/yusufpapurcu/wmi v1.2.2 // indirect
Bump cloud.google.com/go/secretmanager from 1.9.0 to 1.10.0 (#1006) Bumps [cloud.google.com/go/secretmanager](https://github.com/googleapis/google-cloud-go) from 1.9.0 to 1.10.0. - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md) - [Commits](https://github.com/googleapis/google-cloud-go/compare/dlp/v1.9.0...asset/v1.10.0) --- updated-dependencies: - dependency-name: cloud.google.com/go/secretmanager dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-09 17:29:26 +00:00
go.opencensus.io v0.24.0 // indirect
Move context and log libraries to trufflehog (#718) * Move context and log libraries to trufflehog * Fix lint errors
2022-08-17 20:03:35 +00:00
go.uber.org/atomic v1.7.0 // indirect
go.uber.org/multierr v1.6.0 // indirect
Bump github.com/mholt/archiver/v4 from 4.0.0-alpha.7 to 4.0.0-alpha.8 (#1305) Bumps [github.com/mholt/archiver/v4](https://github.com/mholt/archiver) from 4.0.0-alpha.7 to 4.0.0-alpha.8. - [Release notes](https://github.com/mholt/archiver/releases) - [Changelog](https://github.com/mholt/archiver/blob/master/.goreleaser.yml) - [Commits](https://github.com/mholt/archiver/compare/v4.0.0-alpha.7...v4.0.0-alpha.8) --- updated-dependencies: - dependency-name: github.com/mholt/archiver/v4 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-01 14:49:15 +00:00
go4.org v0.0.0-20200411211856-f5505b9728dd // indirect
Bump github.com/envoyproxy/protoc-gen-validate from 1.0.1 to 1.0.2 (#1445) Bumps [github.com/envoyproxy/protoc-gen-validate](https://github.com/envoyproxy/protoc-gen-validate) from 1.0.1 to 1.0.2. - [Release notes](https://github.com/envoyproxy/protoc-gen-validate/releases) - [Changelog](https://github.com/bufbuild/protoc-gen-validate/blob/main/.goreleaser.yaml) - [Commits](https://github.com/envoyproxy/protoc-gen-validate/compare/v1.0.1...v1.0.2) --- updated-dependencies: - dependency-name: github.com/envoyproxy/protoc-gen-validate dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-03 22:33:52 +00:00
golang.org/x/mod v0.11.0 // indirect
Bump golang.org/x/oauth2 from 0.8.0 to 0.9.0 (#1407) Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from 0.8.0 to 0.9.0. - [Commits](https://github.com/golang/oauth2/compare/v0.8.0...v0.9.0) --- updated-dependencies: - dependency-name: golang.org/x/oauth2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-20 17:28:00 +00:00
golang.org/x/net v0.11.0 // indirect
Bump golang.org/x/crypto from 0.10.0 to 0.11.0 (#1473) Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.10.0 to 0.11.0. - [Commits](https://github.com/golang/crypto/compare/v0.10.0...v0.11.0) --- updated-dependencies: - dependency-name: golang.org/x/crypto dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Zachary Rice <zachary.rice@trufflesec.com>
2023-07-10 15:42:31 +00:00
golang.org/x/sys v0.10.0 // indirect
Bump github.com/xanzy/go-gitlab from 0.77.0 to 0.78.0 (#1024) Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab) from 0.77.0 to 0.78.0. - [Release notes](https://github.com/xanzy/go-gitlab/releases) - [Changelog](https://github.com/xanzy/go-gitlab/blob/master/releases_test.go) - [Commits](https://github.com/xanzy/go-gitlab/compare/v0.77.0...v0.78.0) --- updated-dependencies: - dependency-name: github.com/xanzy/go-gitlab dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-17 21:25:04 +00:00
golang.org/x/time v0.3.0 // indirect
Bump github.com/envoyproxy/protoc-gen-validate from 1.0.1 to 1.0.2 (#1445) Bumps [github.com/envoyproxy/protoc-gen-validate](https://github.com/envoyproxy/protoc-gen-validate) from 1.0.1 to 1.0.2. - [Release notes](https://github.com/envoyproxy/protoc-gen-validate/releases) - [Changelog](https://github.com/bufbuild/protoc-gen-validate/blob/main/.goreleaser.yaml) - [Commits](https://github.com/envoyproxy/protoc-gen-validate/compare/v1.0.1...v1.0.2) --- updated-dependencies: - dependency-name: github.com/envoyproxy/protoc-gen-validate dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-03 22:33:52 +00:00
golang.org/x/tools v0.10.0 // indirect
Add gcs scanning integration (#1153) * Setup for GCS scanning. * Update GCS engine w/ projectID req. * Add concurrency field to gcsManager. * add errgroup to gcsManager. * Update gcs manager. * Use defautl ADC. * use ADC.' * Add TOOD. * add log to iterator completion. * use a BinaryReader instead of concrete object for channel type. * initial test for Chunks. * Add tests for chunking objects. * Add concurrency. * update metadata to include content type and acls. * Add object reading code. * Add integration test. * Add entrypoint. * Add removed wg.Wait(). * remove dead code. * remove build. * Remove period from file extension. * remove used. * Add comment. * Setup for GCS scanning. * Update GCS engine w/ projectID req. * Add concurrency field to gcsManager. * add errgroup to gcsManager. * Update gcs manager. * Use defautl ADC. * use ADC.' * Add TOOD. * add log to iterator completion. * use a BinaryReader instead of concrete object for channel type. * initial test for Chunks. * Add tests for chunking objects. * Add concurrency. * update metadata to include content type and acls. * Add object reading code. * Add integration test. * Add entrypoint. * Add removed wg.Wait(). * remove dead code. * remove build. * remove used. * Add file type for objects. * Add check for file type and size. * Add default file size. * Add additinoal auth options and remaining CLI flags. * Handle errors in go routines. * Handle resuming for buckets. * Remove redundant words in comment. * remove ok check on bool check. * remove extra blank line. * Add return if handler handles chunk. * Add comment. * remove extra blank line. * cleanup comment. * Add comment. * move up fxn. * go mod tidy. * Add exclusion to perf testing buckets. * Handle blocking the channel. * remove unused const. * fix tests. * fix tests. * Handle gcs manger options better. * update fxn name. * Remove arg name. * ignore buckets in gcsManager test. * fix test. * propulate gsManagerOpts. * inline err check. * Add readme. * update readme spelling. * fix test.
2023-03-08 01:32:04 +00:00
golang.org/x/xerrors v0.0.0-20220907171357-04be3eba64a2 // indirect
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
google.golang.org/appengine v1.6.7 // indirect
Bump cloud.google.com/go/secretmanager from 1.11.0 to 1.11.1 (#1443) Bumps [cloud.google.com/go/secretmanager](https://github.com/googleapis/google-cloud-go) from 1.11.0 to 1.11.1. - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md) - [Commits](https://github.com/googleapis/google-cloud-go/compare/kms/v1.11.0...asset/v1.11.1) --- updated-dependencies: - dependency-name: cloud.google.com/go/secretmanager dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-04 17:11:49 +00:00
google.golang.org/genproto v0.0.0-20230530153820-e85fd2cbaebc // indirect
google.golang.org/genproto/googleapis/api v0.0.0-20230530153820-e85fd2cbaebc // indirect
google.golang.org/genproto/googleapis/rpc v0.0.0-20230530153820-e85fd2cbaebc // indirect
Bump google.golang.org/api from 0.128.0 to 0.129.0 (#1441) Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.128.0 to 0.129.0. - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.128.0...v0.129.0) --- updated-dependencies: - dependency-name: google.golang.org/api dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-05 16:12:48 +00:00
google.golang.org/grpc v1.56.1 // indirect
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
gopkg.in/warnings.v0 v0.1.2 // indirect
Add custom detectors configuration parsing (#927) * Add custom_detectors proto * Generate proto code * Create custom_detectors package Also create protoyaml package to test YAML unmarshalling the configuration. * Simplify custom_detectors proto by removing connection * Generate proto code * Update custom_detectors parsing tests
2022-11-21 21:10:38 +00:00
gopkg.in/yaml.v2 v2.4.0 // indirect
Bump github.com/stretchr/testify from 1.7.1 to 1.7.2 (#606) Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.7.1 to 1.7.2. - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](https://github.com/stretchr/testify/compare/v1.7.1...v1.7.2) --- updated-dependencies: - dependency-name: github.com/stretchr/testify dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-06 22:19:47 +00:00
gopkg.in/yaml.v3 v3.0.1 // indirect
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
)
Reference in a new issue Copy permalink