Mirrors/trufflehog
2
0
Fork 0
mirror of https://github.com/trufflesecurity/trufflehog.git synced 2024-11-10 07:04:24 +00:00
Code Issues Projects Releases Packages Wiki Activity
trufflehog/go.mod

153 lines
6.7 KiB
Modula-2
Raw Normal View History

module v3
2022-02-10 18:54:33 +00:00
module github.com/trufflesecurity/trufflehog/v3
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
use go 1.18 (#566) * use go 1.18 in CI * require go 1.18 * use latest linter * rename ci check * improve regex issues identified by codeql
2022-05-19 16:01:50 +00:00
go 1.18
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
Log explanation of non-zero exit with found results (#431) * Log explanation of non-zero exit with found results * Change exit code and add documentation * Adjust exit code handling * Make action fail on found results * Use new overseer * Improve wording * Update README.md
2022-04-21 17:08:51 +00:00
replace github.com/jpillora/overseer => github.com/trufflesecurity/overseer v1.1.7-custom5
Remove overseer warn, and don't os.Exit on git error. (#348)
2022-04-09 01:20:19 +00:00
Support scanning binary files in git sources (#684) * Scan binary files for git sources * Create data chunks in for loop * Linter feedback and newline commit result * Use disk buffered reader and chunker function
2022-08-10 23:10:45 +00:00
replace github.com/zricethezav/gitleaks/v8 => github.com/trufflesecurity/gitleaks/v8 v8.6.1-custom10
Automatically update trufflehog (#121) Co-authored-by: Dustin Decker <dustin@trufflesec.com>
2022-04-03 18:51:56 +00:00
Update go-gitdiff dependency to fix hanging issue (#632)
2022-06-24 21:11:35 +00:00
replace github.com/gitleaks/go-gitdiff => github.com/trufflesecurity/go-gitdiff v0.7.6-zombies2
replace dependency with patched version
2022-06-15 04:17:26 +00:00
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
require (
Bump cloud.google.com/go/secretmanager from 1.9.0 to 1.10.0 (#1006) Bumps [cloud.google.com/go/secretmanager](https://github.com/googleapis/google-cloud-go) from 1.9.0 to 1.10.0. - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md) - [Commits](https://github.com/googleapis/google-cloud-go/compare/dlp/v1.9.0...asset/v1.10.0) --- updated-dependencies: - dependency-name: cloud.google.com/go/secretmanager dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-09 17:29:26 +00:00
cloud.google.com/go/secretmanager v1.10.0
updates
2022-01-19 06:24:56 +00:00
github.com/Azure/go-autorest/autorest/azure/auth v0.5.11
Bump github.com/TheZeroSlave/zapsentry from 1.12.0 to 1.14.0 (#1118) Bumps [github.com/TheZeroSlave/zapsentry](https://github.com/TheZeroSlave/zapsentry) from 1.12.0 to 1.14.0. - [Release notes](https://github.com/TheZeroSlave/zapsentry/releases) - [Commits](https://github.com/TheZeroSlave/zapsentry/compare/v1.12.0...v1.14.0) --- updated-dependencies: - dependency-name: github.com/TheZeroSlave/zapsentry dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-21 23:36:16 +00:00
github.com/TheZeroSlave/zapsentry v1.14.0
Bump github.com/aws/aws-sdk-go from 1.44.61 to 1.44.83 (#731) Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.44.61 to 1.44.83. - [Release notes](https://github.com/aws/aws-sdk-go/releases) - [Changelog](https://github.com/aws/aws-sdk-go/blob/main/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-go/compare/v1.44.61...v1.44.83) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-23 23:27:01 +00:00
github.com/aws/aws-sdk-go v1.44.83
Bump github.com/bill-rich/disk-buffer-reader from v0.1.6 to v0.1.7 (#970)
2022-12-09 23:52:41 +00:00
github.com/bill-rich/disk-buffer-reader v0.1.7
Bump github.com/aws/aws-sdk-go from 1.44.4 to 1.44.9 (#532) Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.44.4 to 1.44.9. - [Release notes](https://github.com/aws/aws-sdk-go/releases) - [Changelog](https://github.com/aws/aws-sdk-go/blob/main/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-go/compare/v1.44.4...v1.44.9) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-05-09 15:40:17 +00:00
github.com/bill-rich/go-syslog v0.0.0-20220413021637-49edb52a574c
updates
2022-01-19 06:24:56 +00:00
github.com/bitfinexcom/bitfinex-api-go v0.0.0-20210608095005-9e0b26f200fb
Bump github.com/bradleyfalzon/ghinstallation/v2 from 2.0.4 to 2.1.0 (#661) Bumps [github.com/bradleyfalzon/ghinstallation/v2](https://github.com/bradleyfalzon/ghinstallation) from 2.0.4 to 2.1.0. - [Release notes](https://github.com/bradleyfalzon/ghinstallation/releases) - [Commits](https://github.com/bradleyfalzon/ghinstallation/compare/v2.0.4...v2.1.0) --- updated-dependencies: - dependency-name: github.com/bradleyfalzon/ghinstallation/v2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-19 00:04:12 +00:00
github.com/bradleyfalzon/ghinstallation/v2 v2.1.0
Syslog source (#500) * Add syslog source * only load cert/key with tls * Cleanup * Linting Co-authored-by: Bill Rich <bill.rich@trufflesec.com>
2022-05-04 22:08:11 +00:00
github.com/crewjam/rfc5424 v0.1.0
Bump github.com/denisenkom/go-mssqldb from 0.12.2 to 0.12.3 (#851) Bumps [github.com/denisenkom/go-mssqldb](https://github.com/denisenkom/go-mssqldb) from 0.12.2 to 0.12.3. - [Release notes](https://github.com/denisenkom/go-mssqldb/releases) - [Commits](https://github.com/denisenkom/go-mssqldb/compare/v0.12.2...v0.12.3) --- updated-dependencies: - dependency-name: github.com/denisenkom/go-mssqldb dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-24 02:02:27 +00:00
github.com/denisenkom/go-mssqldb v0.12.3
Bump github.com/envoyproxy/protoc-gen-validate from 0.6.13 to 0.9.1 (#963) Bumps [github.com/envoyproxy/protoc-gen-validate](https://github.com/envoyproxy/protoc-gen-validate) from 0.6.13 to 0.9.1. - [Release notes](https://github.com/envoyproxy/protoc-gen-validate/releases) - [Changelog](https://github.com/bufbuild/protoc-gen-validate/blob/main/.goreleaser.yaml) - [Commits](https://github.com/envoyproxy/protoc-gen-validate/compare/v0.6.13...v0.9.1) --- updated-dependencies: - dependency-name: github.com/envoyproxy/protoc-gen-validate dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-13 00:02:35 +00:00
github.com/envoyproxy/protoc-gen-validate v0.9.1
improve plain output
2022-01-20 23:54:35 +00:00
github.com/fatih/color v1.13.0
Bump github.com/felixge/fgprof from 0.9.2 to 0.9.3 (#780) Bumps [github.com/felixge/fgprof](https://github.com/felixge/fgprof) from 0.9.2 to 0.9.3. - [Release notes](https://github.com/felixge/fgprof/releases) - [Commits](https://github.com/felixge/fgprof/compare/v0.9.2...v0.9.3) --- updated-dependencies: - dependency-name: github.com/felixge/fgprof dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-07 03:05:29 +00:00
github.com/felixge/fgprof v0.9.3
Bump github.com/getsentry/sentry-go from 0.17.0 to 0.18.0 (#1102) Bumps [github.com/getsentry/sentry-go](https://github.com/getsentry/sentry-go) from 0.17.0 to 0.18.0. - [Release notes](https://github.com/getsentry/sentry-go/releases) - [Changelog](https://github.com/getsentry/sentry-go/blob/master/CHANGELOG.md) - [Commits](https://github.com/getsentry/sentry-go/compare/v0.17.0...v0.18.0) --- updated-dependencies: - dependency-name: github.com/getsentry/sentry-go dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-15 02:56:35 +00:00
github.com/getsentry/sentry-go v0.18.0
Bump github.com/go-errors/errors from 1.4.1 to 1.4.2 Bumps [github.com/go-errors/errors](https://github.com/go-errors/errors) from 1.4.1 to 1.4.2. - [Release notes](https://github.com/go-errors/errors/releases) - [Commits](https://github.com/go-errors/errors/compare/v1.4.1...v1.4.2) --- updated-dependencies: - dependency-name: github.com/go-errors/errors dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
2022-01-20 19:26:13 +00:00
github.com/go-errors/errors v1.4.2
Bump github.com/go-git/go-git/v5 from 5.5.2 to 5.6.0 (#1147) Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.5.2 to 5.6.0. - [Release notes](https://github.com/go-git/go-git/releases) - [Commits](https://github.com/go-git/go-git/compare/v5.5.2...v5.6.0) --- updated-dependencies: - dependency-name: github.com/go-git/go-git/v5 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-07 01:07:14 +00:00
github.com/go-git/go-git/v5 v5.6.0
add LDAP detector (#896)
2022-11-19 03:45:11 +00:00
github.com/go-ldap/ldap/v3 v3.4.4
Move context and log libraries to trufflehog (#718) * Move context and log libraries to trufflehog * Fix lint errors
2022-08-17 20:03:35 +00:00
github.com/go-logr/logr v1.2.3
github.com/go-logr/zapr v1.2.3
Do local URI verification, while attempting to defuse SSRF (#879) * simplify monogo pattern * do URI verification locally, while attempting to defuse SSRF * test SSRF defuse * simplify err check logic per linter recommendation * split up detectors * address comments * remove unused var
2022-11-02 00:27:24 +00:00
github.com/go-redis/redis v6.15.9+incompatible
Bump github.com/go-sql-driver/mysql from 1.6.0 to 1.7.0 (#954) Bumps [github.com/go-sql-driver/mysql](https://github.com/go-sql-driver/mysql) from 1.6.0 to 1.7.0. - [Release notes](https://github.com/go-sql-driver/mysql/releases) - [Changelog](https://github.com/go-sql-driver/mysql/blob/master/CHANGELOG.md) - [Commits](https://github.com/go-sql-driver/mysql/compare/v1.6.0...v1.7.0) --- updated-dependencies: - dependency-name: github.com/go-sql-driver/mysql dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-06 23:37:32 +00:00
github.com/go-sql-driver/mysql v1.7.0
Support globbing with ignore repos (#967)
2022-12-09 20:10:42 +00:00
github.com/gobwas/glob v0.2.3
update dependency
2022-03-09 23:49:57 +00:00
github.com/golang-jwt/jwt v3.2.2+incompatible
Bump github.com/google/go-cmp from 0.5.8 to 0.5.9 (#794) Bumps [github.com/google/go-cmp](https://github.com/google/go-cmp) from 0.5.8 to 0.5.9. - [Release notes](https://github.com/google/go-cmp/releases) - [Commits](https://github.com/google/go-cmp/compare/v0.5.8...v0.5.9) --- updated-dependencies: - dependency-name: github.com/google/go-cmp dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-16 15:50:49 +00:00
github.com/google/go-cmp v0.5.9
add debug pprof server and metrics server
2022-02-04 03:07:39 +00:00
github.com/google/go-github/v42 v42.0.0
Record avg detector time
2022-02-07 18:29:06 +00:00
github.com/gorilla/mux v1.8.0
Bump github.com/hashicorp/go-retryablehttp from 0.7.1 to 0.7.2 (#1008) Bumps [github.com/hashicorp/go-retryablehttp](https://github.com/hashicorp/go-retryablehttp) from 0.7.1 to 0.7.2. - [Release notes](https://github.com/hashicorp/go-retryablehttp/releases) - [Commits](https://github.com/hashicorp/go-retryablehttp/compare/v0.7.1...v0.7.2) --- updated-dependencies: - dependency-name: github.com/hashicorp/go-retryablehttp dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-09 17:31:23 +00:00
github.com/hashicorp/go-retryablehttp v0.7.2
Do local URI verification, while attempting to defuse SSRF (#879) * simplify monogo pattern * do URI verification locally, while attempting to defuse SSRF * test SSRF defuse * simplify err check logic per linter recommendation * split up detectors * address comments * remove unused var
2022-11-02 00:27:24 +00:00
github.com/jlaffaye/ftp v0.1.0
Bump github.com/joho/godotenv from 1.4.0 to 1.5.1 (#1075) Bumps [github.com/joho/godotenv](https://github.com/joho/godotenv) from 1.4.0 to 1.5.1. - [Release notes](https://github.com/joho/godotenv/releases) - [Commits](https://github.com/joho/godotenv/compare/v1.4.0...v1.5.1) --- updated-dependencies: - dependency-name: github.com/joho/godotenv dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-10 04:02:06 +00:00
github.com/joho/godotenv v1.5.1
Automatically update trufflehog (#121) Co-authored-by: Dustin Decker <dustin@trufflesec.com>
2022-04-03 18:51:56 +00:00
github.com/jpillora/overseer v1.1.6
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
github.com/kylelemons/godebug v1.1.0
[THOG-162] Implement JDBC verification for select drivers (#792) * [THOG-162] Implement JDBC verification for select drivers Also includes integration tests for postgres and mysql via docker. To run, execute the following (untested what will happen if the docker images aren't installed): go test -tags=detectors,integration ./pkg/detectors/jdbc * Make jdbc regex a bit more strict * Surface the context to allow the caller to set a timeout
2022-09-21 15:50:48 +00:00
github.com/lib/pq v1.10.7
Bump github.com/mattn/go-sqlite3 from 1.14.15 to 1.14.16 (#889) Bumps [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) from 1.14.15 to 1.14.16. - [Release notes](https://github.com/mattn/go-sqlite3/releases) - [Commits](https://github.com/mattn/go-sqlite3/compare/v1.14.15...v1.14.16) --- updated-dependencies: - dependency-name: github.com/mattn/go-sqlite3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-31 15:59:36 +00:00
github.com/mattn/go-sqlite3 v1.14.16
Archive decoder (#683) * Archive decoder * Fix reader handling * Seek error handling * Add tests * Fix extra empty chunk * Sync chunk size
2022-08-03 03:36:21 +00:00
github.com/mholt/archiver/v4 v4.0.0-alpha.7
Add snifftest
2022-03-11 05:41:35 +00:00
github.com/paulbellamy/ratecounter v0.2.0
Bump golang.org/x/crypto from 0.6.0 to 0.7.0 (#1158) Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.6.0 to 0.7.0. - [Release notes](https://github.com/golang/crypto/releases) - [Commits](https://github.com/golang/crypto/compare/v0.6.0...v0.7.0) --- updated-dependencies: - dependency-name: golang.org/x/crypto dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-07 00:11:59 +00:00
github.com/petar-dambovaliev/aho-corasick v0.0.0-20211021192214-5ab2d9280aa9
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
github.com/pkg/errors v0.9.1
Bump github.com/rabbitmq/amqp091-go from 1.6.0 to 1.7.0 (#1103) Bumps [github.com/rabbitmq/amqp091-go](https://github.com/rabbitmq/amqp091-go) from 1.6.0 to 1.7.0. - [Release notes](https://github.com/rabbitmq/amqp091-go/releases) - [Changelog](https://github.com/rabbitmq/amqp091-go/blob/main/CHANGELOG.md) - [Commits](https://github.com/rabbitmq/amqp091-go/compare/v1.6.0...v1.7.0) --- updated-dependencies: - dependency-name: github.com/rabbitmq/amqp091-go dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-21 23:36:46 +00:00
github.com/rabbitmq/amqp091-go v1.7.0
Bump github.com/sergi/go-diff from 1.2.0 to 1.3.1 (#1023) Bumps [github.com/sergi/go-diff](https://github.com/sergi/go-diff) from 1.2.0 to 1.3.1. - [Release notes](https://github.com/sergi/go-diff/releases) - [Commits](https://github.com/sergi/go-diff/compare/v1.2.0...v1.3.1) --- updated-dependencies: - dependency-name: github.com/sergi/go-diff dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-17 21:26:29 +00:00
github.com/sergi/go-diff v1.3.1
Bump github.com/stretchr/testify from 1.8.1 to 1.8.2 (#1130) Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.8.1 to 1.8.2. - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](https://github.com/stretchr/testify/compare/v1.8.1...v1.8.2) --- updated-dependencies: - dependency-name: github.com/stretchr/testify dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-28 16:46:04 +00:00
github.com/stretchr/testify v1.8.2
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
github.com/tailscale/depaware v0.0.0-20210622194025-720c4b409502
Bump github.com/xanzy/go-gitlab from 0.78.0 to 0.80.2 (#1117) Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab) from 0.78.0 to 0.80.2. - [Release notes](https://github.com/xanzy/go-gitlab/releases) - [Changelog](https://github.com/xanzy/go-gitlab/blob/master/releases_test.go) - [Commits](https://github.com/xanzy/go-gitlab/compare/v0.78.0...v0.80.2) --- updated-dependencies: - dependency-name: github.com/xanzy/go-gitlab dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-22 17:33:16 +00:00
github.com/xanzy/go-gitlab v0.80.2
Bump go.mongodb.org/mongo-driver from 1.11.1 to 1.11.2 (#1119) Bumps [go.mongodb.org/mongo-driver](https://github.com/mongodb/mongo-go-driver) from 1.11.1 to 1.11.2. - [Release notes](https://github.com/mongodb/mongo-go-driver/releases) - [Commits](https://github.com/mongodb/mongo-go-driver/compare/v1.11.1...v1.11.2) --- updated-dependencies: - dependency-name: go.mongodb.org/mongo-driver dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-21 23:35:53 +00:00
go.mongodb.org/mongo-driver v1.11.2
Bump go.uber.org/zap from 1.23.0 to 1.24.0 (#955) Bumps [go.uber.org/zap](https://github.com/uber-go/zap) from 1.23.0 to 1.24.0. - [Release notes](https://github.com/uber-go/zap/releases) - [Changelog](https://github.com/uber-go/zap/blob/master/CHANGELOG.md) - [Commits](https://github.com/uber-go/zap/compare/v1.23.0...v1.24.0) --- updated-dependencies: - dependency-name: go.uber.org/zap dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-06 23:38:28 +00:00
go.uber.org/zap v1.24.0
Bump golang.org/x/crypto from 0.6.0 to 0.7.0 (#1158) Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.6.0 to 0.7.0. - [Release notes](https://github.com/golang/crypto/releases) - [Commits](https://github.com/golang/crypto/compare/v0.6.0...v0.7.0) --- updated-dependencies: - dependency-name: golang.org/x/crypto dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-07 00:11:59 +00:00
golang.org/x/crypto v0.7.0
[THOG-767] ignore gitlab repos (#853) * Add ability to ignore repos. * use std library slices.Contains. * Add tests. * Remove zero values from test.
2022-10-19 20:55:44 +00:00
golang.org/x/exp v0.0.0-20221018205818-5c77f4b2bbd7
Bump golang.org/x/oauth2 from 0.4.0 to 0.5.0 (#1116) Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from 0.4.0 to 0.5.0. - [Release notes](https://github.com/golang/oauth2/releases) - [Commits](https://github.com/golang/oauth2/compare/v0.4.0...v0.5.0) --- updated-dependencies: - dependency-name: golang.org/x/oauth2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-21 21:42:36 +00:00
golang.org/x/oauth2 v0.5.0
Bump cloud.google.com/go/secretmanager from 1.8.0 to 1.9.0 (#906) Bumps [cloud.google.com/go/secretmanager](https://github.com/googleapis/google-cloud-go) from 1.8.0 to 1.9.0. - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md) - [Commits](https://github.com/googleapis/google-cloud-go/compare/asset/v1.8.0...asset/v1.9.0) --- updated-dependencies: - dependency-name: cloud.google.com/go/secretmanager dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-16 16:48:45 +00:00
golang.org/x/sync v0.1.0
Bump golang.org/x/crypto from 0.6.0 to 0.7.0 (#1158) Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.6.0 to 0.7.0. - [Release notes](https://github.com/golang/crypto/releases) - [Commits](https://github.com/golang/crypto/compare/v0.6.0...v0.7.0) --- updated-dependencies: - dependency-name: golang.org/x/crypto dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-07 00:11:59 +00:00
golang.org/x/text v0.8.0
Bump google.golang.org/protobuf from 1.28.0 to 1.28.1 (#681) Bumps [google.golang.org/protobuf](https://github.com/protocolbuffers/protobuf-go) from 1.28.0 to 1.28.1. - [Release notes](https://github.com/protocolbuffers/protobuf-go/releases) - [Changelog](https://github.com/protocolbuffers/protobuf-go/blob/master/release.bash) - [Commits](https://github.com/protocolbuffers/protobuf-go/compare/v1.28.0...v1.28.1) --- updated-dependencies: - dependency-name: google.golang.org/protobuf dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-02 18:53:33 +00:00
google.golang.org/protobuf v1.28.1
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
gopkg.in/alecthomas/kingpin.v2 v2.2.6
Move GitHub integration tests behind a build flag and add unit tests (#527) * Add unit tests and refactor some logic * Move integration tests to a separate file behind a build flag * Fix bugs in normalizeRepos * Address lint errors * Sort slices before comparing because order doesn't matter
2022-05-09 15:31:00 +00:00
gopkg.in/h2non/gock.v1 v1.1.2
Add custom detectors configuration parsing (#927) * Add custom_detectors proto * Generate proto code * Create custom_detectors package Also create protoyaml package to test YAML unmarshalling the configuration. * Simplify custom_detectors proto by removing connection * Generate proto code * Update custom_detectors parsing tests
2022-11-21 21:10:38 +00:00
sigs.k8s.io/yaml v1.3.0
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
)
require (
Bump cloud.google.com/go/secretmanager from 1.8.0 to 1.9.0 (#906) Bumps [cloud.google.com/go/secretmanager](https://github.com/googleapis/google-cloud-go) from 1.8.0 to 1.9.0. - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md) - [Commits](https://github.com/googleapis/google-cloud-go/compare/asset/v1.8.0...asset/v1.9.0) --- updated-dependencies: - dependency-name: cloud.google.com/go/secretmanager dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-16 16:48:45 +00:00
cloud.google.com/go/compute v1.12.1 // indirect
cloud.google.com/go/compute/metadata v0.2.1 // indirect
Bump cloud.google.com/go/secretmanager from 1.9.0 to 1.10.0 (#1006) Bumps [cloud.google.com/go/secretmanager](https://github.com/googleapis/google-cloud-go) from 1.9.0 to 1.10.0. - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md) - [Commits](https://github.com/googleapis/google-cloud-go/compare/dlp/v1.9.0...asset/v1.10.0) --- updated-dependencies: - dependency-name: cloud.google.com/go/secretmanager dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-09 17:29:26 +00:00
cloud.google.com/go/iam v0.8.0 // indirect
updates
2022-01-19 06:24:56 +00:00
github.com/Azure/go-autorest v14.2.0+incompatible // indirect
github.com/Azure/go-autorest/autorest v0.11.24 // indirect
github.com/Azure/go-autorest/autorest/adal v0.9.18 // indirect
github.com/Azure/go-autorest/autorest/azure/cli v0.4.5 // indirect
github.com/Azure/go-autorest/autorest/date v0.3.0 // indirect
github.com/Azure/go-autorest/logger v0.2.1 // indirect
github.com/Azure/go-autorest/tracing v0.6.0 // indirect
add LDAP detector (#896)
2022-11-19 03:45:11 +00:00
github.com/Azure/go-ntlmssp v0.0.0-20220621081337-cb9428e4ac1e // indirect
Bump github.com/go-git/go-git/v5 from 5.4.2 to 5.5.1 (#972) Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.4.2 to 5.5.1. - [Release notes](https://github.com/go-git/go-git/releases) - [Commits](https://github.com/go-git/go-git/compare/v5.4.2...v5.5.1) --- updated-dependencies: - dependency-name: github.com/go-git/go-git/v5 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-12 23:56:26 +00:00
github.com/Microsoft/go-winio v0.5.2 // indirect
github.com/ProtonMail/go-crypto v0.0.0-20221026131551-cf6655e29de4 // indirect
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
github.com/acomagu/bufpipe v1.0.3 // indirect
github.com/alecthomas/template v0.0.0-20190718012654-fb15b899a751 // indirect
github.com/alecthomas/units v0.0.0-20211218093645-b94a6e3cc137 // indirect
Archive decoder (#683) * Archive decoder * Fix reader handling * Seek error handling * Add tests * Fix extra empty chunk * Sync chunk size
2022-08-03 03:36:21 +00:00
github.com/andybalholm/brotli v1.0.4 // indirect
Move context and log libraries to trufflehog (#718) * Move context and log libraries to trufflehog * Fix lint errors
2022-08-17 20:03:35 +00:00
github.com/benbjohnson/clock v1.1.0 // indirect
Bump github.com/go-git/go-git/v5 from 5.4.2 to 5.5.1 (#972) Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.4.2 to 5.5.1. - [Release notes](https://github.com/go-git/go-git/releases) - [Commits](https://github.com/go-git/go-git/compare/v5.4.2...v5.5.1) --- updated-dependencies: - dependency-name: github.com/go-git/go-git/v5 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-12 23:56:26 +00:00
github.com/cloudflare/circl v1.1.0 // indirect
Move GitHub integration tests behind a build flag and add unit tests (#527) * Add unit tests and refactor some logic * Move integration tests to a separate file behind a build flag * Fix bugs in normalizeRepos * Address lint errors * Sort slices before comparing because order doesn't matter
2022-05-09 15:31:00 +00:00
github.com/davecgh/go-spew v1.1.1 // indirect
updates
2022-01-19 06:24:56 +00:00
github.com/dimchansky/utfbom v1.1.1 // indirect
Archive decoder (#683) * Archive decoder * Fix reader handling * Seek error handling * Add tests * Fix extra empty chunk * Sync chunk size
2022-08-03 03:36:21 +00:00
github.com/dsnet/compress v0.0.1 // indirect
Bump github.com/go-git/go-git/v5 from 5.4.2 to 5.5.1 (#972) Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.4.2 to 5.5.1. - [Release notes](https://github.com/go-git/go-git/releases) - [Commits](https://github.com/go-git/go-git/compare/v5.4.2...v5.5.1) --- updated-dependencies: - dependency-name: github.com/go-git/go-git/v5 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-12 23:56:26 +00:00
github.com/emirpasic/gods v1.18.1 // indirect
add LDAP detector (#896)
2022-11-19 03:45:11 +00:00
github.com/go-asn1-ber/asn1-ber v1.5.4 // indirect
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
github.com/go-git/gcfg v1.5.0 // indirect
Bump github.com/go-git/go-git/v5 from 5.5.1 to 5.5.2 (#1007) Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.5.1 to 5.5.2. - [Release notes](https://github.com/go-git/go-git/releases) - [Commits](https://github.com/go-git/go-git/compare/v5.5.1...v5.5.2) --- updated-dependencies: - dependency-name: github.com/go-git/go-git/v5 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-09 17:30:56 +00:00
github.com/go-git/go-billy/v5 v5.4.0 // indirect
Automatically update trufflehog (#121) Co-authored-by: Dustin Decker <dustin@trufflesec.com>
2022-04-03 18:51:56 +00:00
github.com/go-ole/go-ole v1.2.6 // indirect
Bump github.com/bradleyfalzon/ghinstallation/v2 from 2.0.4 to 2.1.0 (#661) Bumps [github.com/bradleyfalzon/ghinstallation/v2](https://github.com/bradleyfalzon/ghinstallation) from 2.0.4 to 2.1.0. - [Release notes](https://github.com/bradleyfalzon/ghinstallation/releases) - [Commits](https://github.com/bradleyfalzon/ghinstallation/compare/v2.0.4...v2.1.0) --- updated-dependencies: - dependency-name: github.com/bradleyfalzon/ghinstallation/v2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-19 00:04:12 +00:00
github.com/golang-jwt/jwt/v4 v4.4.1 // indirect
[THOG-162] Implement JDBC verification for select drivers (#792) * [THOG-162] Implement JDBC verification for select drivers Also includes integration tests for postgres and mysql via docker. To run, execute the following (untested what will happen if the docker images aren't installed): go test -tags=detectors,integration ./pkg/detectors/jdbc * Make jdbc regex a bit more strict * Surface the context to allow the caller to set a timeout
2022-09-21 15:50:48 +00:00
github.com/golang-sql/civil v0.0.0-20190719163853-cb61b32ac6fe // indirect
github.com/golang-sql/sqlexp v0.1.0 // indirect
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
github.com/golang/groupcache v0.0.0-20200121045136-8c9f03a8e57e // indirect
github.com/golang/protobuf v1.5.2 // indirect
Archive decoder (#683) * Archive decoder * Fix reader handling * Seek error handling * Add tests * Fix extra empty chunk * Sync chunk size
2022-08-03 03:36:21 +00:00
github.com/golang/snappy v0.0.4 // indirect
Bump github.com/bradleyfalzon/ghinstallation/v2 from 2.0.4 to 2.1.0 (#661) Bumps [github.com/bradleyfalzon/ghinstallation/v2](https://github.com/bradleyfalzon/ghinstallation) from 2.0.4 to 2.1.0. - [Release notes](https://github.com/bradleyfalzon/ghinstallation/releases) - [Commits](https://github.com/bradleyfalzon/ghinstallation/compare/v2.0.4...v2.1.0) --- updated-dependencies: - dependency-name: github.com/bradleyfalzon/ghinstallation/v2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-19 00:04:12 +00:00
github.com/google/go-github/v45 v45.2.0 // indirect
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
github.com/google/go-querystring v1.1.0 // indirect
Record avg detector time
2022-02-07 18:29:06 +00:00
github.com/google/pprof v0.0.0-20211214055906-6f57359322fd // indirect
Bump cloud.google.com/go/secretmanager from 1.7.0 to 1.8.0 (#888) Bumps [cloud.google.com/go/secretmanager](https://github.com/googleapis/google-cloud-go) from 1.7.0 to 1.8.0. - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md) - [Commits](https://github.com/googleapis/google-cloud-go/compare/asset/v1.7.0...asset/v1.8.0) --- updated-dependencies: - dependency-name: cloud.google.com/go/secretmanager dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-31 15:59:58 +00:00
github.com/googleapis/enterprise-certificate-proxy v0.2.0 // indirect
Bump cloud.google.com/go/secretmanager from 1.9.0 to 1.10.0 (#1006) Bumps [cloud.google.com/go/secretmanager](https://github.com/googleapis/google-cloud-go) from 1.9.0 to 1.10.0. - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md) - [Commits](https://github.com/googleapis/google-cloud-go/compare/dlp/v1.9.0...asset/v1.10.0) --- updated-dependencies: - dependency-name: cloud.google.com/go/secretmanager dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-09 17:29:26 +00:00
github.com/googleapis/gax-go/v2 v2.7.0 // indirect
Move GitHub integration tests behind a build flag and add unit tests (#527) * Add unit tests and refactor some logic * Move integration tests to a separate file behind a build flag * Fix bugs in normalizeRepos * Address lint errors * Sort slices before comparing because order doesn't matter
2022-05-09 15:31:00 +00:00
github.com/h2non/parth v0.0.0-20190131123155-b4df798d6542 // indirect
Do local URI verification, while attempting to defuse SSRF (#879) * simplify monogo pattern * do URI verification locally, while attempting to defuse SSRF * test SSRF defuse * simplify err check logic per linter recommendation * split up detectors * address comments * remove unused var
2022-11-02 00:27:24 +00:00
github.com/hashicorp/errwrap v1.0.0 // indirect
Bump github.com/xanzy/go-gitlab from 0.65.0 to 0.69.0 (#660) Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab) from 0.65.0 to 0.69.0. - [Release notes](https://github.com/xanzy/go-gitlab/releases) - [Changelog](https://github.com/xanzy/go-gitlab/blob/master/releases_test.go) - [Commits](https://github.com/xanzy/go-gitlab/compare/v0.65.0...v0.69.0) --- updated-dependencies: - dependency-name: github.com/xanzy/go-gitlab dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-19 00:02:27 +00:00
github.com/hashicorp/go-cleanhttp v0.5.2 // indirect
Do local URI verification, while attempting to defuse SSRF (#879) * simplify monogo pattern * do URI verification locally, while attempting to defuse SSRF * test SSRF defuse * simplify err check logic per linter recommendation * split up detectors * address comments * remove unused var
2022-11-02 00:27:24 +00:00
github.com/hashicorp/go-multierror v1.1.1 // indirect
Bump github.com/go-git/go-git/v5 from 5.4.2 to 5.5.1 (#972) Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.4.2 to 5.5.1. - [Release notes](https://github.com/go-git/go-git/releases) - [Commits](https://github.com/go-git/go-git/compare/v5.4.2...v5.5.1) --- updated-dependencies: - dependency-name: github.com/go-git/go-git/v5 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-12 23:56:26 +00:00
github.com/imdario/mergo v0.3.13 // indirect
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 // indirect
updates
2022-01-19 06:24:56 +00:00
github.com/jmespath/go-jmespath v0.4.0 // indirect
Automatically update trufflehog (#121) Co-authored-by: Dustin Decker <dustin@trufflesec.com>
2022-04-03 18:51:56 +00:00
github.com/jpillora/s3 v1.1.4 // indirect
Bump github.com/go-git/go-git/v5 from 5.4.2 to 5.5.1 (#972) Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.4.2 to 5.5.1. - [Release notes](https://github.com/go-git/go-git/releases) - [Commits](https://github.com/go-git/go-git/compare/v5.4.2...v5.5.1) --- updated-dependencies: - dependency-name: github.com/go-git/go-git/v5 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-12 23:56:26 +00:00
github.com/kevinburke/ssh_config v1.2.0 // indirect
Bump github.com/getsentry/sentry-go from 0.13.0 to 0.14.0 (#839) Bumps [github.com/getsentry/sentry-go](https://github.com/getsentry/sentry-go) from 0.13.0 to 0.14.0. - [Release notes](https://github.com/getsentry/sentry-go/releases) - [Changelog](https://github.com/getsentry/sentry-go/blob/master/CHANGELOG.md) - [Commits](https://github.com/getsentry/sentry-go/compare/v0.13.0...v0.14.0) --- updated-dependencies: - dependency-name: github.com/getsentry/sentry-go dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-24 02:03:18 +00:00
github.com/klauspost/compress v1.15.11 // indirect
Archive decoder (#683) * Archive decoder * Fix reader handling * Seek error handling * Add tests * Fix extra empty chunk * Sync chunk size
2022-08-03 03:36:21 +00:00
github.com/klauspost/pgzip v1.2.5 // indirect
[chore] Remove logrus from trufflehog (#1095) * [chore] Remove logrus from trufflehog * Minor fixes * Fix logFatal call * Fix logrus call
2023-02-14 23:00:07 +00:00
github.com/mattn/go-colorable v0.1.13 // indirect
Bump github.com/mattn/go-colorable from 0.1.12 to 0.1.13 (#713) Bumps [github.com/mattn/go-colorable](https://github.com/mattn/go-colorable) from 0.1.12 to 0.1.13. - [Release notes](https://github.com/mattn/go-colorable/releases) - [Commits](https://github.com/mattn/go-colorable/compare/v0.1.12...v0.1.13) --- updated-dependencies: - dependency-name: github.com/mattn/go-colorable dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-15 16:15:24 +00:00
github.com/mattn/go-isatty v0.0.16 // indirect
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
github.com/mitchellh/go-homedir v1.1.0 // indirect
Add support for MongoDB detector. (#793) * Add support for MongoDB detector. * Remove extra line. * Remove unused arg. * Add context around found secret test. * Remove unused arg.
2022-09-15 12:47:09 +00:00
github.com/montanaflynn/stats v0.0.0-20171201202039-1bf9dbcd8cbe // indirect
Archive decoder (#683) * Archive decoder * Fix reader handling * Seek error handling * Add tests * Fix extra empty chunk * Sync chunk size
2022-08-03 03:36:21 +00:00
github.com/nwaples/rardecode/v2 v2.0.0-beta.2 // indirect
Do local URI verification, while attempting to defuse SSRF (#879) * simplify monogo pattern * do URI verification locally, while attempting to defuse SSRF * test SSRF defuse * simplify err check logic per linter recommendation * split up detectors * address comments * remove unused var
2022-11-02 00:27:24 +00:00
github.com/onsi/ginkgo v1.16.5 // indirect
github.com/onsi/gomega v1.23.0 // indirect
Archive decoder (#683) * Archive decoder * Fix reader handling * Seek error handling * Add tests * Fix extra empty chunk * Sync chunk size
2022-08-03 03:36:21 +00:00
github.com/pierrec/lz4/v4 v4.1.14 // indirect
Bump github.com/go-git/go-git/v5 from 5.5.2 to 5.6.0 (#1147) Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.5.2 to 5.6.0. - [Release notes](https://github.com/go-git/go-git/releases) - [Commits](https://github.com/go-git/go-git/compare/v5.5.2...v5.6.0) --- updated-dependencies: - dependency-name: github.com/go-git/go-git/v5 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-07 01:07:14 +00:00
github.com/pjbgf/sha1cd v0.3.0 // indirect
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
github.com/pkg/diff v0.0.0-20200914180035-5b29258ca4f7 // indirect
Move GitHub integration tests behind a build flag and add unit tests (#527) * Add unit tests and refactor some logic * Move integration tests to a separate file behind a build flag * Fix bugs in normalizeRepos * Address lint errors * Sort slices before comparing because order doesn't matter
2022-05-09 15:31:00 +00:00
github.com/pmezard/go-difflib v1.0.0 // indirect
Bump github.com/go-git/go-git/v5 from 5.4.2 to 5.5.1 (#972) Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.4.2 to 5.5.1. - [Release notes](https://github.com/go-git/go-git/releases) - [Commits](https://github.com/go-git/go-git/compare/v5.4.2...v5.5.1) --- updated-dependencies: - dependency-name: github.com/go-git/go-git/v5 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-12 23:56:26 +00:00
github.com/skeema/knownhosts v1.1.0 // indirect
Archive decoder (#683) * Archive decoder * Fix reader handling * Seek error handling * Add tests * Fix extra empty chunk * Sync chunk size
2022-08-03 03:36:21 +00:00
github.com/therootcompany/xz v1.0.1 // indirect
github.com/ulikunitz/xz v0.5.10 // indirect
Bump github.com/go-git/go-git/v5 from 5.4.2 to 5.5.1 (#972) Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.4.2 to 5.5.1. - [Release notes](https://github.com/go-git/go-git/releases) - [Commits](https://github.com/go-git/go-git/compare/v5.4.2...v5.5.1) --- updated-dependencies: - dependency-name: github.com/go-git/go-git/v5 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-12 23:56:26 +00:00
github.com/xanzy/ssh-agent v0.3.3 // indirect
Add support for MongoDB detector. (#793) * Add support for MongoDB detector. * Remove extra line. * Remove unused arg. * Add context around found secret test. * Remove unused arg.
2022-09-15 12:47:09 +00:00
github.com/xdg-go/pbkdf2 v1.0.0 // indirect
github.com/xdg-go/scram v1.1.1 // indirect
github.com/xdg-go/stringprep v1.0.3 // indirect
github.com/youmark/pkcs8 v0.0.0-20181117223130-1be2e3e5546d // indirect
Automatically update trufflehog (#121) Co-authored-by: Dustin Decker <dustin@trufflesec.com>
2022-04-03 18:51:56 +00:00
github.com/yusufpapurcu/wmi v1.2.2 // indirect
Bump cloud.google.com/go/secretmanager from 1.9.0 to 1.10.0 (#1006) Bumps [cloud.google.com/go/secretmanager](https://github.com/googleapis/google-cloud-go) from 1.9.0 to 1.10.0. - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md) - [Commits](https://github.com/googleapis/google-cloud-go/compare/dlp/v1.9.0...asset/v1.10.0) --- updated-dependencies: - dependency-name: cloud.google.com/go/secretmanager dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-09 17:29:26 +00:00
go.opencensus.io v0.24.0 // indirect
Move context and log libraries to trufflehog (#718) * Move context and log libraries to trufflehog * Fix lint errors
2022-08-17 20:03:35 +00:00
go.uber.org/atomic v1.7.0 // indirect
go.uber.org/multierr v1.6.0 // indirect
Bump golang.org/x/crypto from 0.6.0 to 0.7.0 (#1158) Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.6.0 to 0.7.0. - [Release notes](https://github.com/golang/crypto/releases) - [Commits](https://github.com/golang/crypto/compare/v0.6.0...v0.7.0) --- updated-dependencies: - dependency-name: golang.org/x/crypto dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-07 00:11:59 +00:00
golang.org/x/mod v0.8.0 // indirect
golang.org/x/net v0.8.0 // indirect
golang.org/x/sys v0.6.0 // indirect
Bump github.com/xanzy/go-gitlab from 0.77.0 to 0.78.0 (#1024) Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab) from 0.77.0 to 0.78.0. - [Release notes](https://github.com/xanzy/go-gitlab/releases) - [Changelog](https://github.com/xanzy/go-gitlab/blob/master/releases_test.go) - [Commits](https://github.com/xanzy/go-gitlab/compare/v0.77.0...v0.78.0) --- updated-dependencies: - dependency-name: github.com/xanzy/go-gitlab dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-17 21:25:04 +00:00
golang.org/x/time v0.3.0 // indirect
Bump golang.org/x/crypto from 0.6.0 to 0.7.0 (#1158) Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.6.0 to 0.7.0. - [Release notes](https://github.com/golang/crypto/releases) - [Commits](https://github.com/golang/crypto/compare/v0.6.0...v0.7.0) --- updated-dependencies: - dependency-name: golang.org/x/crypto dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-07 00:11:59 +00:00
golang.org/x/tools v0.6.0 // indirect
Bump cloud.google.com/go/secretmanager from 1.9.0 to 1.10.0 (#1006) Bumps [cloud.google.com/go/secretmanager](https://github.com/googleapis/google-cloud-go) from 1.9.0 to 1.10.0. - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md) - [Commits](https://github.com/googleapis/google-cloud-go/compare/dlp/v1.9.0...asset/v1.10.0) --- updated-dependencies: - dependency-name: cloud.google.com/go/secretmanager dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-09 17:29:26 +00:00
google.golang.org/api v0.103.0 // indirect
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
google.golang.org/appengine v1.6.7 // indirect
[chore] Address lint errors (#1133) * Update strings.Title to cases.Title * Migrate go-genproto to google-cloud-go See: https://github.com/googleapis/google-cloud-go/blob/main/migration.md * Check error in test * Check error from sem.Acquire * Remove unused code
2023-02-28 03:03:47 +00:00
google.golang.org/genproto v0.0.0-20221201164419-0e50fba7f41c // indirect
Bump cloud.google.com/go/secretmanager from 1.9.0 to 1.10.0 (#1006) Bumps [cloud.google.com/go/secretmanager](https://github.com/googleapis/google-cloud-go) from 1.9.0 to 1.10.0. - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md) - [Commits](https://github.com/googleapis/google-cloud-go/compare/dlp/v1.9.0...asset/v1.10.0) --- updated-dependencies: - dependency-name: cloud.google.com/go/secretmanager dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-09 17:29:26 +00:00
google.golang.org/grpc v1.51.0 // indirect
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
gopkg.in/warnings.v0 v0.1.2 // indirect
Add custom detectors configuration parsing (#927) * Add custom_detectors proto * Generate proto code * Create custom_detectors package Also create protoyaml package to test YAML unmarshalling the configuration. * Simplify custom_detectors proto by removing connection * Generate proto code * Update custom_detectors parsing tests
2022-11-21 21:10:38 +00:00
gopkg.in/yaml.v2 v2.4.0 // indirect
Bump github.com/stretchr/testify from 1.7.1 to 1.7.2 (#606) Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.7.1 to 1.7.2. - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](https://github.com/stretchr/testify/compare/v1.7.1...v1.7.2) --- updated-dependencies: - dependency-name: github.com/stretchr/testify dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-06 22:19:47 +00:00
gopkg.in/yaml.v3 v3.0.1 // indirect
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
)
Reference in a new issue Copy permalink