Mirrors/trufflehog
2
0
Fork 0
mirror of https://github.com/trufflesecurity/trufflehog.git synced 2024-11-14 17:07:31 +00:00
Code Issues Projects Releases Packages Wiki Activity
trufflehog/go.mod

317 lines
15 KiB
Modula-2
Raw Normal View History

module v3
2022-02-10 18:54:33 +00:00
module github.com/trufflesecurity/trufflehog/v3
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
build: fix 'toolchair not available' error (#2642)
2024-03-29 02:31:24 +00:00
go 1.22.0
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
chore(deps): update module github.com/trufflesecurity/overseer to v1.2.7 (#1983) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-10-24 22:34:49 +00:00
replace github.com/jpillora/overseer => github.com/trufflesecurity/overseer v1.2.7
Remove overseer warn, and don't os.Exit on git error. (#348)
2022-04-09 01:20:19 +00:00
Improve monogo and snowflake detectors (#2518) * Set timeouts on mongo connection string * use lightened snowflake driver * update param
2024-02-28 16:26:27 +00:00
replace github.com/snowflakedb/gosnowflake => github.com/trufflesecurity/gosnowflake v0.0.1
patch dependency (#2971)
2024-06-15 12:09:58 +00:00
// Coinbase archived this library and it has some vulnerable dependencies so we've forked.
replace github.com/coinbase/waas-client-library-go => github.com/trufflesecurity/waas-client-library-go v1.0.9
Pin STARRY-S/zip #2999
2024-06-24 17:26:43 +00:00
// github.com/mholt/archiver/v4 is pinned to a specific commit hash. That commit depends on STARRY-S/zip 0.1.0
// specifically - future tags won't build. So we have to pin STARRY-S/zip@v0.1.0
replace github.com/STARRY-S/zip => github.com/STARRY-S/zip v0.1.0
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
require (
fix(deps): update module cloud.google.com/go/secretmanager to v1.14.1 (#3301) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-17 15:52:00 +00:00
cloud.google.com/go/secretmanager v1.14.1
fix(deps): update module cloud.google.com/go/storage to v1.43.0 (#3043) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-07-05 14:29:11 +00:00
cloud.google.com/go/storage v1.43.0
fix(deps): update module github.com/azure/go-autorest/autorest/azure/auth to v0.5.13 (#2902) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-03 20:39:12 +00:00
github.com/Azure/go-autorest/autorest/azure/auth v0.5.13
fix(deps): update module github.com/azuread/microsoft-authentication-library-for-go to v1.2.2 (#2484) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-19 17:17:11 +00:00
github.com/AzureAD/microsoft-authentication-library-for-go v1.2.2
init (#1538)
2023-07-25 00:09:57 +00:00
github.com/BobuSumisu/aho-corasick v1.0.3
fix(deps): update module github.com/thezeroslave/zapsentry to v1.23.0 (#2667) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-04-06 18:27:03 +00:00
github.com/TheZeroSlave/zapsentry v1.23.0
Polite Verification (#2356) * draft reverify chunks * remove * remove * reduce dupe map cap * do not verify chunk * cli arg and use val for dupe lut * remove counter * skipp empty results] * working on test and normalizing val for comparison * forgot to save file * optimize normalize * reuse map * remove print * use levenshtein distance to check dupes * forgot to leave in emptying map * use slice * small tweak * comment * use bytes * praise * use ctx logger * add len check * add comments * use 8x concurrency for reverifier workers * revert worker count * use more workers * process result directly for any collisions * continue after decoder match for reverifying * use map * use map * otimization and fix the bug. * revert worker count * better option naming * handle identical secrets in chunks * update comment * update comment * fix test * use DetecotrKey * rm out of scope tests and testdata * rename all reverification elements * don't re-write map entry * use correct key * rename worker, remove log val * test likelydupe, add eq detector check in loop * add test * add comment * add test * Set verification error * Update tests --------- Co-authored-by: Zachary Rice <zachary.rice@trufflesec.com> Co-authored-by: Dustin Decker <dustin@trufflesec.com>
2024-02-02 17:29:18 +00:00
github.com/adrg/strutil v0.3.1
fix(deps): update module github.com/alecthomas/kingpin/v2 to v2.4.0 (#2151) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-12-01 19:59:14 +00:00
github.com/alecthomas/kingpin/v2 v2.4.0
fix(deps): update module github.com/aws/aws-sdk-go to v1.55.5 (#3116) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-07-30 21:54:04 +00:00
github.com/aws/aws-sdk-go v1.55.5
fix(deps): update module github.com/aymanbagabas/go-osc52 to v1.2.2 (#2460) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-14 17:40:14 +00:00
github.com/aymanbagabas/go-osc52 v1.2.2
Bump github.com/aws/aws-sdk-go from 1.44.4 to 1.44.9 (#532) Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.44.4 to 1.44.9. - [Release notes](https://github.com/aws/aws-sdk-go/releases) - [Changelog](https://github.com/aws/aws-sdk-go/blob/main/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-go/compare/v1.44.4...v1.44.9) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-05-09 15:40:17 +00:00
github.com/bill-rich/go-syslog v0.0.0-20220413021637-49edb52a574c
updates
2022-01-19 06:24:56 +00:00
github.com/bitfinexcom/bitfinex-api-go v0.0.0-20210608095005-9e0b26f200fb
fix(deps): update module github.com/bradleyfalzon/ghinstallation/v2 to v2.11.0 (#2980) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-17 15:32:52 +00:00
github.com/bradleyfalzon/ghinstallation/v2 v2.11.0
fix(deps): update module github.com/brianvoe/gofakeit/v7 to v7.0.4 (#3026) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-07-01 16:23:30 +00:00
github.com/brianvoe/gofakeit/v7 v7.0.4
fix(deps): update module github.com/charmbracelet/bubbles to v0.18.0 (#2296) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-11 20:24:23 +00:00
github.com/charmbracelet/bubbles v0.18.0
fix(deps): update module github.com/charmbracelet/bubbletea to v0.27.0 (#3229) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-20 14:58:38 +00:00
github.com/charmbracelet/bubbletea v0.27.0
fix(deps): update module github.com/charmbracelet/glamour to v0.7.0 (#2627) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-03-26 21:52:28 +00:00
github.com/charmbracelet/glamour v0.7.0
fix(deps): update module github.com/charmbracelet/lipgloss to v0.10.0 (#2542) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-03-07 22:36:28 +00:00
github.com/charmbracelet/lipgloss v0.10.0
Chore(deps): Bump google.golang.org/grpc from 1.56.2 to 1.56.3 (#2009) Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.56.2 to 1.56.3. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](https://github.com/grpc/grpc-go/compare/v1.56.2...v1.56.3) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-27 22:50:13 +00:00
github.com/coinbase/waas-client-library-go v1.0.8
fix(deps): update module github.com/couchbase/gocb/v2 to v2.9.1 (#3078) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-07-20 20:39:04 +00:00
github.com/couchbase/gocb/v2 v2.9.1
Syslog source (#500) * Add syslog source * only load cert/key with tls * Cleanup * Linting Co-authored-by: Bill Rich <bill.rich@trufflesec.com>
2022-05-04 22:08:11 +00:00
github.com/crewjam/rfc5424 v0.1.0
Analyze (#3099) * Add POC analyze sub-command * Address lint errors * [chore] Embed scopes at compile time * [chore] Move subcommand check up to prevent printing metrics * added http logging to most analyzers * Use custom RoundTripper with default http.Client * Create framework of interfaces, structs, and protos * Merge main * Add AnalysisInfo to detectors.Result * Hide analyze subcommand * Update gen_proto.sh * Update protos * Make protos * Update analyzer data types * Rename argument to credentialInfo --------- Co-authored-by: Joe Leon <joe.leon@trufflesec.com>
2024-07-25 19:06:05 +00:00
github.com/dustin/go-humanize v1.0.1
fix(deps): update module github.com/elastic/go-elasticsearch/v8 to v8.15.0 (#3309) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-21 17:54:20 +00:00
github.com/elastic/go-elasticsearch/v8 v8.15.0
fix(deps): update module github.com/envoyproxy/protoc-gen-validate to v1.1.0 (#3176) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-05 20:29:28 +00:00
github.com/envoyproxy/protoc-gen-validate v1.1.0
fix(deps): update module github.com/fatih/color to v1.17.0 (#2837) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-05-13 21:45:25 +00:00
github.com/fatih/color v1.17.0
fix(deps): update module github.com/felixge/fgprof to v0.9.5 (#3277) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-09 16:05:12 +00:00
github.com/felixge/fgprof v0.9.5
fix(deps): update module github.com/gabriel-vasile/mimetype to v1.4.5 (#3108) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-07-26 16:45:23 +00:00
github.com/gabriel-vasile/mimetype v1.4.5
fix(deps): update module github.com/getsentry/sentry-go to v0.29.0 (#3310) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-21 20:12:41 +00:00
github.com/getsentry/sentry-go v0.29.0
fix(deps): update module github.com/go-errors/errors to v1.5.1 (#1972) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-10-24 18:27:07 +00:00
github.com/go-errors/errors v1.5.1
fix(deps): update module github.com/go-git/go-git/v5 to v5.12.0 (#2649) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-03-31 18:01:16 +00:00
github.com/go-git/go-git/v5 v5.12.0
fix(deps): update module github.com/go-ldap/ldap/v3 to v3.4.8 (#2707) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-04-16 19:08:56 +00:00
github.com/go-ldap/ldap/v3 v3.4.8
fix(deps): update module github.com/go-logr/logr to v1.4.2 (#2869) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-05-26 15:23:01 +00:00
github.com/go-logr/logr v1.4.2
fix(deps): update module github.com/go-logr/zapr to v1.3.0 (#2158) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-12-03 16:51:42 +00:00
github.com/go-logr/zapr v1.3.0
Do local URI verification, while attempting to defuse SSRF (#879) * simplify monogo pattern * do URI verification locally, while attempting to defuse SSRF * test SSRF defuse * simplify err check logic per linter recommendation * split up detectors * address comments * remove unused var
2022-11-02 00:27:24 +00:00
github.com/go-redis/redis v6.15.9+incompatible
fix(deps): update module github.com/go-sql-driver/mysql to v1.8.1 (#2626) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-03-26 21:51:57 +00:00
github.com/go-sql-driver/mysql v1.8.1
Support globbing with ignore repos (#967)
2022-12-09 20:10:42 +00:00
github.com/gobwas/glob v0.2.3
update dependency
2022-03-09 23:49:57 +00:00
github.com/golang-jwt/jwt v3.2.2+incompatible
Improve fp ignore logic (#2351) * forgot field change * use aho corasick for filter * reduce wordlist sensitivity
2024-01-29 19:28:46 +00:00
github.com/golang-jwt/jwt/v4 v4.5.0
fix(deps): update module github.com/google/go-cmp to v0.6.0 (#1973) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-10-24 22:35:14 +00:00
github.com/google/go-cmp v0.6.0
fix(deps): update module github.com/google/go-containerregistry to v0.20.2 (#3184) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-09 15:02:50 +00:00
github.com/google/go-containerregistry v0.20.2
fix dep versions (#3106)
2024-07-27 00:44:23 +00:00
github.com/google/go-github/v63 v63.0.0
fix(deps): update module github.com/google/uuid to v1.6.0 (#2427) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-12 17:04:20 +00:00
github.com/google/uuid v1.6.0
fix(deps): update module github.com/googleapis/gax-go/v2 to v2.13.0 (#3085) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-07-22 17:20:20 +00:00
github.com/googleapis/gax-go/v2 v2.13.0
fix(deps): update module github.com/hashicorp/go-retryablehttp to v0.7.7 (#2904) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-03 19:37:39 +00:00
github.com/hashicorp/go-retryablehttp v0.7.7
fix(deps): update module github.com/hashicorp/golang-lru to v2 (#2486) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-20 17:41:34 +00:00
github.com/hashicorp/golang-lru/v2 v2.0.7
Analyze (#3099) * Add POC analyze sub-command * Address lint errors * [chore] Embed scopes at compile time * [chore] Move subcommand check up to prevent printing metrics * added http logging to most analyzers * Use custom RoundTripper with default http.Client * Create framework of interfaces, structs, and protos * Merge main * Add AnalysisInfo to detectors.Result * Hide analyze subcommand * Update gen_proto.sh * Update protos * Make protos * Update analyzer data types * Rename argument to credentialInfo --------- Co-authored-by: Joe Leon <joe.leon@trufflesec.com>
2024-07-25 19:06:05 +00:00
github.com/jedib0t/go-pretty v4.3.0+incompatible
github.com/jedib0t/go-pretty/v6 v6.5.9
Bump github.com/jlaffaye/ftp from 0.1.0 to 0.2.0 (#1471) Bumps [github.com/jlaffaye/ftp](https://github.com/jlaffaye/ftp) from 0.1.0 to 0.2.0. - [Release notes](https://github.com/jlaffaye/ftp/releases) - [Commits](https://github.com/jlaffaye/ftp/compare/v0.1.0...v0.2.0) --- updated-dependencies: - dependency-name: github.com/jlaffaye/ftp dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Zachary Rice <zachary.rice@trufflesec.com>
2023-07-10 15:49:13 +00:00
github.com/jlaffaye/ftp v0.2.0
Bump github.com/joho/godotenv from 1.4.0 to 1.5.1 (#1075) Bumps [github.com/joho/godotenv](https://github.com/joho/godotenv) from 1.4.0 to 1.5.1. - [Release notes](https://github.com/joho/godotenv/releases) - [Commits](https://github.com/joho/godotenv/compare/v1.4.0...v1.5.1) --- updated-dependencies: - dependency-name: github.com/joho/godotenv dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-10 04:02:06 +00:00
github.com/joho/godotenv v1.5.1
Automatically update trufflehog (#121) Co-authored-by: Dustin Decker <dustin@trufflesec.com>
2022-04-03 18:51:56 +00:00
github.com/jpillora/overseer v1.1.6
Add progress bar to CFOR (#3151) * Add progress bar to CFOR * unused vars * explicitly ignore progress errors * removed print statements * use stderr --------- Co-authored-by: joeleonjr <20135619+joeleonjr@users.noreply.github.com> Co-authored-by: Joe Leon <joe.leon@trufflesec.com>
2024-08-02 14:43:59 +00:00
github.com/k0kubun/go-ansi v0.0.0-20180517002512-3bf9e2903213
fix(deps): update module github.com/schollz/progressbar/v3 to v3.14.6 (#3158) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-02 21:19:23 +00:00
github.com/klauspost/pgzip v1.2.6
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
github.com/kylelemons/godebug v1.1.0
Bump github.com/lib/pq from 1.10.8 to 1.10.9 (#1307) Bumps [github.com/lib/pq](https://github.com/lib/pq) from 1.10.8 to 1.10.9. - [Release notes](https://github.com/lib/pq/releases) - [Commits](https://github.com/lib/pq/compare/v1.10.8...v1.10.9) --- updated-dependencies: - dependency-name: github.com/lib/pq dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-01 14:55:12 +00:00
github.com/lib/pq v1.10.9
fix(deps): update github.com/lrstanley/bubblezone digest to b7bafc4 (#2411) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-11 20:26:02 +00:00
github.com/lrstanley/bubblezone v0.0.0-20240125042004-b7bafc493195
Add ability to dynamically scale concurrently running sources (#1790) * Add ability to dynamically scale concurrently running sources Refactor SourceManager to use a counting semaphore to allow for dymanically changing limits. This complicated `Wait() error` which needs to return the first error encountered. We previously got that for free using `errgroup.Group`, however now we need to handle that ourselves. `Wait()` needs to return an error for use in the engine to set the correct exit code. * Group third party imports together
2023-09-20 23:49:56 +00:00
github.com/marusama/semaphore/v2 v2.5.0
fix(deps): update module github.com/mattn/go-isatty to v0.0.20 (#1980) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-10-24 22:33:03 +00:00
github.com/mattn/go-isatty v0.0.20
use @master (#2959)
2024-06-11 17:44:12 +00:00
github.com/mholt/archiver/v4 v4.0.0-alpha.8.0.20240408183022-de08bfa4c558
fix(deps): update module github.com/microsoft/go-mssqldb to v1.7.2 (#2912) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-04 19:25:26 +00:00
github.com/microsoft/go-mssqldb v1.7.2
Add temp directory management (#1878) * adds func to get scannerPIDs * add cleanup and call to get pids * move pid handling to git module * remove PID logic from main * refactor testing code to handle different exec name * cleanup linting errors * add better logging, fix dir if clause * some PR fixups * mod fixup * add interfaces for helper funcs * refactor cleanup into main, getPID into git * lint and test fixups, remove fail on n<2 pids * simplify pid sorting * use filepath.Join * use Args[0] for exec name, fix logger * formatting fixup * move functionality into cleantemp pkg * go mod fixup * remove redundant testing comment * fix go.sum issues * add 15m ticker loop for cleanup * enclose ticker in function for goroutine defer fix cleantemp interface * make time more readable * add check for non-local Trufflehog PIDs * allow deletion even if no non-local pids found * bundle intial cleanup into runCleanup func * add explicit regex check for tempdir format
2023-10-26 16:28:56 +00:00
github.com/mitchellh/go-ps v1.0.0
Add terminal UI (#1593) * Init attempt at tui with bubble tea. Co-authored-by: mcastorina <m.castorina93@gmail.com> * Add starting and source selection options Co-authored-by: mcastorina <m.castorina93@gmail.com> * Rewrite models into a state machine * Update source descriptions * Make subpages implement tea.Model * Rename page0 and page1 to be more descriptive * Adjust styling and adding color consts Co-authored-by: mcastorina <m.castorina93@gmail.com> * Add helper generic function to call Update and type cast * Setup plumbing for source configuration page * Use CLI introspection for source configuration (WIP) * Experiment with table view * Replace table with form fields Co-authored-by: mcastorina <m.castorina93@gmail.com> * Change 🔒 to 💸 * Copy components from soft-serve Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Copy styles from soft-serve Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Copy common from soft-serve Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Refactor into pages This is still a WIP, but the main structure is there. Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Trying out selector for wizard intro Co-authored-by: mcastorina <m.castorina93@gmail.com> * Use selector with custom View Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Change Item to be an enum Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Add link pages Co-authored-by: mcastorina <m.castorina93@gmail.com> * Update source select to use selector Co-authored-by: mcastorina <m.castorina93@gmail.com> * Delete source configure page and add blank tabs Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Add tab placeholder pages for configurationi Co-authored-by: mcastorina <m.castorina93@gmail.com> * Added headers and style to each tab Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Update with new sources * Remove kingpin attribute from SourceItem * Add basic form field and source structuring * Hookup git form fields with an underlying textinput component Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Update forms for git and github Co-authored-by: mcastorina <m.castorina93@gmail.com> * Add labels per text input * Add sources and adjust styling * add basic trufflehog configuration page * Add skip button to textinputs component * Emit and handle textinputs skip/submit button commands * Don't quit when q is pressed on the sourceConfigurePage * Build trufflehog command based on source config vals Co-authored-by: mcastorina <m.castorina93@gmail.com> * Build flags based on truffle config inputs * Update summary section * Add generated truffle fields Co-authored-by: mcastorina <m.castorina93@gmail.com> * update summary to correctly print info * Go back a page when escape key is pressed * WIP run page list Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Allow running trufflehog from the run page Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Add option to view help docs Co-authored-by: mcastorina <m.castorina93@gmail.com> * comment out unused styles and remove unused types * Capitalize H in TruffleHog * remove unneeded fmt.Sprintf --------- Co-authored-by: mcastorina <m.castorina93@gmail.com>
2023-08-09 20:13:55 +00:00
github.com/muesli/reflow v0.3.0
Add in-memory caching pkg (#1189) * Add in-memory caching lib, used by the GCS source. * Fix static check. * Add test for NewWithData. * update comment. * update comments. * remove unused dep. * address comments. * Add exists method. * fix test.
2023-03-20 23:16:49 +00:00
github.com/patrickmn/go-cache v2.1.0+incompatible
Add snifftest
2022-03-11 05:41:35 +00:00
github.com/paulbellamy/ratecounter v0.2.0
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
github.com/pkg/errors v0.9.1
fix(deps): update module github.com/prometheus/client_golang to v1.20.4 (#3303) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-17 16:03:13 +00:00
github.com/prometheus/client_golang v1.20.4
fix(deps): update module github.com/rabbitmq/amqp091-go to v1.10.0 (#2809) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-05-10 01:13:47 +00:00
github.com/rabbitmq/amqp091-go v1.10.0
fix(deps): update module github.com/sassoftware/go-rpmutils to v0.4.0 (#2831) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-05-11 14:18:13 +00:00
github.com/sassoftware/go-rpmutils v0.4.0
fix(deps): update module github.com/schollz/progressbar/v3 to v3.16.0 (#3315) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-23 16:16:37 +00:00
github.com/schollz/progressbar/v3 v3.16.0
fix(deps): update module github.com/sendgrid/sendgrid-go to v3.16.0+incompatible (#3312) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-22 17:57:58 +00:00
github.com/sendgrid/sendgrid-go v3.16.0+incompatible
fix(deps): update module github.com/go-git/go-git/v5 to v5.12.0 (#2649) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-03-31 18:01:16 +00:00
github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3
Add TravisCI source (#1877) * Add TravisCI source * update test to use sourcestest * Remove jobPage loop ListByBuild does not support pagination, so this was infinitely repeating. https://developer.travis-ci.com/resource/jobs#find * Continue chunking on error * review updates * update readme --------- Co-authored-by: Miccah Castorina <m.castorina93@gmail.com>
2023-10-30 14:28:25 +00:00
github.com/shuheiktgw/go-travis v0.3.1
fix(deps): update module github.com/snowflakedb/gosnowflake to v1.11.1 (#3313) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-23 14:46:07 +00:00
github.com/snowflakedb/gosnowflake v1.11.1
fix(deps): update module github.com/stretchr/testify to v1.9.0 (#2534) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-03-03 19:55:08 +00:00
github.com/stretchr/testify v1.9.0
fix(deps): update github.com/tailscale/depaware digest to 585336c (#3166) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-04 17:17:22 +00:00
github.com/tailscale/depaware v0.0.0-20240804103531-585336c3e1b3
fix(deps): update testcontainers-go monorepo to v0.33.0 (#3239) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-20 20:18:54 +00:00
github.com/testcontainers/testcontainers-go v0.33.0
github.com/testcontainers/testcontainers-go/modules/elasticsearch v0.33.0
github.com/testcontainers/testcontainers-go/modules/mongodb v0.33.0
github.com/testcontainers/testcontainers-go/modules/mssql v0.33.0
github.com/testcontainers/testcontainers-go/modules/mysql v0.33.0
github.com/testcontainers/testcontainers-go/modules/postgres v0.33.0
fix(deps): update module github.com/trufflesecurity/disk-buffer-reader to v0.2.1 (#2163) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-12-04 19:25:52 +00:00
github.com/trufflesecurity/disk-buffer-reader v0.2.1
fix(deps): update module github.com/wasilibs/go-re2 to v1.7.0 (#3317) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-23 16:29:31 +00:00
github.com/wasilibs/go-re2 v1.7.0
fix(deps): update module github.com/xanzy/go-gitlab to v0.109.0 (#3318) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-23 21:31:55 +00:00
github.com/xanzy/go-gitlab v0.109.0
Analyze (#3099) * Add POC analyze sub-command * Address lint errors * [chore] Embed scopes at compile time * [chore] Move subcommand check up to prevent printing metrics * added http logging to most analyzers * Use custom RoundTripper with default http.Client * Create framework of interfaces, structs, and protos * Merge main * Add AnalysisInfo to detectors.Result * Hide analyze subcommand * Update gen_proto.sh * Update protos * Make protos * Update analyzer data types * Rename argument to credentialInfo --------- Co-authored-by: Joe Leon <joe.leon@trufflesec.com>
2024-07-25 19:06:05 +00:00
github.com/xo/dburl v0.23.2
fix(deps): update module go.mongodb.org/mongo-driver to v1.17.0 (#3319) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-24 02:18:48 +00:00
go.mongodb.org/mongo-driver v1.17.0
fix(deps): update module go.uber.org/automaxprocs to v1.6.0 (#3321) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-24 02:40:37 +00:00
go.uber.org/automaxprocs v1.6.0
fix(deps): update module go.uber.org/mock to v0.4.0 (#2437) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-12 23:25:30 +00:00
go.uber.org/mock v0.4.0
fix(deps): update module go.uber.org/zap to v1.27.0 (#2498) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-21 17:05:09 +00:00
go.uber.org/zap v1.27.0
fix(deps): update golang.org/x/exp digest to 701f63a (#3291) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-15 19:00:03 +00:00
golang.org/x/crypto v0.27.0
golang.org/x/exp v0.0.0-20240909161429-701f63a606c0
golang.org/x/net v0.29.0
fix(deps): update module golang.org/x/oauth2 to v0.22.0 (#3168) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-04 16:32:13 +00:00
golang.org/x/oauth2 v0.22.0
fix(deps): update module golang.org/x/sync to v0.8.0 (#3169) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-04 17:16:49 +00:00
golang.org/x/sync v0.8.0
fix(deps): update golang.org/x/exp digest to 701f63a (#3291) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-15 19:00:03 +00:00
golang.org/x/text v0.18.0
fix(deps): update module cloud.google.com/go/secretmanager to v1.14.1 (#3301) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-17 15:52:00 +00:00
google.golang.org/api v0.196.0
patch dependency (#2971)
2024-06-15 12:09:58 +00:00
google.golang.org/protobuf v1.34.2
Move GitHub integration tests behind a build flag and add unit tests (#527) * Add unit tests and refactor some logic * Move integration tests to a separate file behind a build flag * Fix bugs in normalizeRepos * Address lint errors * Sort slices before comparing because order doesn't matter
2022-05-09 15:31:00 +00:00
gopkg.in/h2non/gock.v1 v1.1.2
Analyzer partial implementations (#3114) * Add POC analyze sub-command * Address lint errors * added http logging to most analyzers * Use custom RoundTripper with default http.Client * [chore] Embed scopes at compile time * [chore] Move subcommand check up to prevent printing metrics * Create framework of interfaces, structs, and protos * Implement Analyzer for airbrake * Add FullAccess permission constant * Implement Analyzer for asana * Implement Analyzer for bitbucket * Implement Analyzer for github * Implement Analyzer for gitlab * Implemente Analyzer for huggingface * Implement Analyzer for mailchimp * implement analyzer for mailgun * update cli cmd * Implement analyzer for openai * fix timing issue on scopes * print permissions only if restricted key * Implement Analyzer for mysql * enable loggin check * fixed the formatting issue to wrap sub-errors * implemented analyzer for opsgenie * implemented analyzer for postgres * use format string * implemented analyzer for sendgrid * simplify returning the error * implemented analyzer for postman * added handling of workspace error * Update protos to match OSS * Generate protos * Update data structures to match OSS * Update airbrake implementation * Remove asana implementation * Remove mailchimp implementation * Update openai implementation to match OSS * Remove gitlab implementation * Remove huggingface implementation * Remove bitbucket implementation * Fix permission in airbrake * Remove github implementation * Remove mailgun implementation * Cleanup compiler errors * Implement Analyzer interface for github * Add parents to github resources * Add fine_grained to github metadata * Update with changes from main * Remove unused function stubs --------- Co-authored-by: Joe Leon <joe.leon@trufflesec.com> Co-authored-by: Hon <8292703+hxnyk@users.noreply.github.com> Co-authored-by: Abdul Basit <abasit@folio3.com> Co-authored-by: Abdul Basit <basit.mussani@gmail.com>
2024-07-30 16:13:48 +00:00
gopkg.in/yaml.v2 v2.4.0
[chore] - Set GOMAXPROCS (#3136) * use automaxprocs * remove newline
2024-08-01 00:10:03 +00:00
gopkg.in/yaml.v3 v3.0.1
[refactor] - Refactor Archive Handling Logic (#2703) * Remove specialized handler and archive struct and restructure handlers pkg. * Refactor RPM archive handlers to use a library instead of shelling out * make rpm handling context aware * update test * Refactor AR/deb archive handler to use an existing library instead of shelling out * Update tests * add max size check * add filename and size to context kvp * move skip file check and is binary check before opening file * fix test * preserve existing funcitonality of not handling non-archive files in HandleFile * Adjust check for rpm/deb archive type * add additional deb mime type * update comment * Remove specialized handler and archive struct and restructure handlers pkg. * Refactor RPM archive handlers to use a library instead of shelling out * make rpm handling context aware * update test * Refactor AR/deb archive handler to use an existing library instead of shelling out * Update tests * add max size check * add filename and size to context kvp * move skip file check and is binary check before opening file * fix test * preserve existing funcitonality of not handling non-archive files in HandleFile * Adjust check for rpm/deb archive type * add additional deb mime type * update comment * go mod tidy * update go mod * go mod tidy * add comment * update max depth check to > * go mod tidy * rename * [refactor] - Refactor Archive Handling Logic - Part 4: Non-Archive Data Handling and Cleanup (#2704) * Handle non-archive data within the DefaultHandler * make structs and methods private * Remove non-archive data handling within sources * Handle non-archive data within the DefaultHandler * rebase * Remove non-archive data handling within sources * add gzip * move diskbuffered rereader setup into handler pkg * remove DiskBuffereReader creation logic within sources * move rewind closer * reduce log verbosity * make defaultBufferSize a const * use correct reader * address comments * update test * [feat] - Add Prometheus Metrics for File Handlers (#2705) * add metrics for file handling * add metrics for errors * add metrics for file handling * add metrics for errors * fix tests * add metrics for max archive depth and skipped files * update error * skip symlinks and dirs * update err * fix err assignment * add metrics for file handling * add metrics for errors * fix tests * rebase * add metrics for errors * add metrics for max archive depth and skipped files * update error * skip symlinks and dirs * update err * fix err assignment * rebase * remove * update metric to ms * update comments * address comments * reduce indentations * add metrics for archive depth * [bug] - Enhanced Archive Handling to Address Interface Constraints (#2710) * add metrics for file handling * add metrics for errors * add metrics for file handling * add metrics for errors * fix tests * add metrics for max archive depth and skipped files * update error * skip symlinks and dirs * update err * Address incompatible reader to openArchive * remove nil check * fix err assignment * wrap compReader with DiskbufferReader * add metrics for file handling * add metrics for errors * fix tests * rebase * add metrics for errors * add metrics for max archive depth and skipped files * update error * skip symlinks and dirs * update err * fix err assignment * rebase * remove * update metric to ms * update comments * address comments * reduce indentations * replace diskbuffereader with bufferedfilereader * updtes * add metric back * [bug] - Fix bug and simplify git cat-file command execution and output handling (#2719) * add metrics for file handling * add metrics for errors * add metrics for file handling * add metrics for errors * fix tests * add metrics for max archive depth and skipped files * update error * skip symlinks and dirs * update err * Address incompatible reader to openArchive * remove nil check * fix err assignment * Allow git cat-file blob to complete before trying to handle the file * wrap compReader with DiskbufferReader * Allow git cat-file blob to complete before trying to handle the file * updates * revert stuff * update test * remove * add metrics for file handling * add metrics for errors * fix tests * rebase * add metrics for errors * add metrics for max archive depth and skipped files * update error * skip symlinks and dirs * update err * fix err assignment * rebase * remove * update metric to ms * update comments * address comments * reduce indentations * inline
2024-05-10 18:36:06 +00:00
pault.ag/go/debian v0.16.0
Add generic glob filter (#1858) * Add generic glob filter * Make nil filters safe * Include glob in error * Use better example for exclude and include test * Allow user to configure the ambiguous case * Rename Pass to ShouldInclude and invert logic * Test default *Filter and Filter have the same behavior of allow * Add property based tests * Remove configuration for the not found ambiguous case
2023-10-18 18:48:31 +00:00
pgregory.net/rapid v1.1.0
fix(deps): update module sigs.k8s.io/yaml to v1.4.0 (#2047) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-10-30 00:42:18 +00:00
sigs.k8s.io/yaml v1.4.0
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
)
require (
fix(deps): update module google.golang.org/api to v0.193.0 (#3238) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-20 16:58:10 +00:00
cloud.google.com/go v0.115.1 // indirect
fix(deps): update module cloud.google.com/go/secretmanager to v1.14.1 (#3301) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-17 15:52:00 +00:00
cloud.google.com/go/auth v0.9.3 // indirect
fix(deps): update module google.golang.org/api to v0.193.0 (#3238) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-20 16:58:10 +00:00
cloud.google.com/go/auth/oauth2adapt v0.2.4 // indirect
fix(deps): update module google.golang.org/api to v0.189.0 (#3086) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-07-22 18:54:11 +00:00
cloud.google.com/go/compute/metadata v0.5.0 // indirect
fix(deps): update module cloud.google.com/go/secretmanager to v1.14.1 (#3301) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-17 15:52:00 +00:00
cloud.google.com/go/iam v1.2.0 // indirect
cloud.google.com/go/longrunning v0.6.0 // indirect
initial support for bare repositories (#1499) * feat: initial support for bare repositories * feat: use concatenation instead of formatting and os.Getenv instead of os.Environ Signed-off-by: Savely Krasovsky <savely@krasovs.ky> * fix: go-git update with pre-receive hooks fix Signed-off-by: Savely Krasovsky <savely@krasovs.ky> * fix: remove info about pre-receive hook from README.md for now Signed-off-by: Savely Krasovsky <savely@krasovs.ky> * fix: don't scan staged while using --bare option, fixes to make it work with the latest master Signed-off-by: Savely Krasovsky <savely@krasovs.ky> * fix: small refactor according to #1518 Signed-off-by: Savely Krasovsky <savely@krasovs.ky> --------- Signed-off-by: Savely Krasovsky <savely@krasovs.ky>
2023-08-03 16:23:41 +00:00
dario.cat/mergo v1.0.0 // indirect
fix(deps): update module github.com/go-sql-driver/mysql to v1.8.0 (#2561) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-03-09 18:08:43 +00:00
filippo.io/edwards25519 v1.1.0 // indirect
add snowflake detector (#1653) Detect Snowflake secrets (compound URI of account, username, password) and enrich Secret Result with account and databases that the secret has access to.
2023-08-24 17:29:58 +00:00
github.com/99designs/go-keychain v0.0.0-20191008050251-8e49817e8af4 // indirect
github.com/99designs/keyring v1.2.2 // indirect
JDBC test and parsing improvements (#2516) * JDBC test and parsing improvements - Uses net/url for more robust URI parsing - Supports common JDBC formats for MySQL - Supports URI format for MSSQL - Uses allowlist for params across all drivers - Uses testcontainers-go for integration testing - much faster, more robust, no port collisions - Uses gofakeit for random data (db, user, password) generation in integration tests - Adds connection timeouts - Use Microsoft's driver for MSSQL * go mod tidy
2024-02-28 16:51:37 +00:00
github.com/Azure/go-ansiterm v0.0.0-20210617225240-d185dfc1b5a1 // indirect
updates
2022-01-19 06:24:56 +00:00
github.com/Azure/go-autorest v14.2.0+incompatible // indirect
fix(deps): update module github.com/azure/go-autorest/autorest/azure/auth to v0.5.13 (#2902) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-03 20:39:12 +00:00
github.com/Azure/go-autorest/autorest v0.11.28 // indirect
github.com/Azure/go-autorest/autorest/adal v0.9.22 // indirect
github.com/Azure/go-autorest/autorest/azure/cli v0.4.6 // indirect
updates
2022-01-19 06:24:56 +00:00
github.com/Azure/go-autorest/autorest/date v0.3.0 // indirect
github.com/Azure/go-autorest/logger v0.2.1 // indirect
github.com/Azure/go-autorest/tracing v0.6.0 // indirect
Bump github.com/go-ldap/ldap/v3 from 3.4.4 to 3.4.5 (#1422) Bumps [github.com/go-ldap/ldap/v3](https://github.com/go-ldap/ldap) from 3.4.4 to 3.4.5. - [Release notes](https://github.com/go-ldap/ldap/releases) - [Commits](https://github.com/go-ldap/ldap/compare/v3.4.4...v3.4.5) --- updated-dependencies: - dependency-name: github.com/go-ldap/ldap/v3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-26 15:25:53 +00:00
github.com/Azure/go-ntlmssp v0.0.0-20221128193559-754e69321358 // indirect
[refactor] - Refactor Archive Handling Logic (#2703) * Remove specialized handler and archive struct and restructure handlers pkg. * Refactor RPM archive handlers to use a library instead of shelling out * make rpm handling context aware * update test * Refactor AR/deb archive handler to use an existing library instead of shelling out * Update tests * add max size check * add filename and size to context kvp * move skip file check and is binary check before opening file * fix test * preserve existing funcitonality of not handling non-archive files in HandleFile * Adjust check for rpm/deb archive type * add additional deb mime type * update comment * Remove specialized handler and archive struct and restructure handlers pkg. * Refactor RPM archive handlers to use a library instead of shelling out * make rpm handling context aware * update test * Refactor AR/deb archive handler to use an existing library instead of shelling out * Update tests * add max size check * add filename and size to context kvp * move skip file check and is binary check before opening file * fix test * preserve existing funcitonality of not handling non-archive files in HandleFile * Adjust check for rpm/deb archive type * add additional deb mime type * update comment * go mod tidy * update go mod * go mod tidy * add comment * update max depth check to > * go mod tidy * rename * [refactor] - Refactor Archive Handling Logic - Part 4: Non-Archive Data Handling and Cleanup (#2704) * Handle non-archive data within the DefaultHandler * make structs and methods private * Remove non-archive data handling within sources * Handle non-archive data within the DefaultHandler * rebase * Remove non-archive data handling within sources * add gzip * move diskbuffered rereader setup into handler pkg * remove DiskBuffereReader creation logic within sources * move rewind closer * reduce log verbosity * make defaultBufferSize a const * use correct reader * address comments * update test * [feat] - Add Prometheus Metrics for File Handlers (#2705) * add metrics for file handling * add metrics for errors * add metrics for file handling * add metrics for errors * fix tests * add metrics for max archive depth and skipped files * update error * skip symlinks and dirs * update err * fix err assignment * add metrics for file handling * add metrics for errors * fix tests * rebase * add metrics for errors * add metrics for max archive depth and skipped files * update error * skip symlinks and dirs * update err * fix err assignment * rebase * remove * update metric to ms * update comments * address comments * reduce indentations * add metrics for archive depth * [bug] - Enhanced Archive Handling to Address Interface Constraints (#2710) * add metrics for file handling * add metrics for errors * add metrics for file handling * add metrics for errors * fix tests * add metrics for max archive depth and skipped files * update error * skip symlinks and dirs * update err * Address incompatible reader to openArchive * remove nil check * fix err assignment * wrap compReader with DiskbufferReader * add metrics for file handling * add metrics for errors * fix tests * rebase * add metrics for errors * add metrics for max archive depth and skipped files * update error * skip symlinks and dirs * update err * fix err assignment * rebase * remove * update metric to ms * update comments * address comments * reduce indentations * replace diskbuffereader with bufferedfilereader * updtes * add metric back * [bug] - Fix bug and simplify git cat-file command execution and output handling (#2719) * add metrics for file handling * add metrics for errors * add metrics for file handling * add metrics for errors * fix tests * add metrics for max archive depth and skipped files * update error * skip symlinks and dirs * update err * Address incompatible reader to openArchive * remove nil check * fix err assignment * Allow git cat-file blob to complete before trying to handle the file * wrap compReader with DiskbufferReader * Allow git cat-file blob to complete before trying to handle the file * updates * revert stuff * update test * remove * add metrics for file handling * add metrics for errors * fix tests * rebase * add metrics for errors * add metrics for max archive depth and skipped files * update error * skip symlinks and dirs * update err * fix err assignment * rebase * remove * update metric to ms * update comments * address comments * reduce indentations * inline
2024-05-10 18:36:06 +00:00
github.com/DataDog/zstd v1.5.5 // indirect
add snowflake detector (#1653) Detect Snowflake secrets (compound URI of account, username, password) and enrich Secret Result with account and databases that the secret has access to.
2023-08-24 17:29:58 +00:00
github.com/JohnCGriffin/overflow v0.0.0-20211019200055-46fa312c352c // indirect
fix(deps): update testcontainers-go monorepo to v0.32.0 (#3050) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-07-07 15:57:49 +00:00
github.com/Microsoft/go-winio v0.6.2 // indirect
fix(deps): update module github.com/go-git/go-git/v5 to v5.12.0 (#2649) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-03-31 18:01:16 +00:00
github.com/ProtonMail/go-crypto v1.0.0 // indirect
pin archiver dependency (#2958)
2024-06-11 17:18:52 +00:00
github.com/STARRY-S/zip v0.1.0 // indirect
fix(deps): update module github.com/charmbracelet/glamour to v0.7.0 (#2627) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-03-26 21:52:28 +00:00
github.com/alecthomas/chroma/v2 v2.8.0 // indirect
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
github.com/alecthomas/units v0.0.0-20211218093645-b94a6e3cc137 // indirect
fix(deps): update module github.com/getsentry/sentry-go to v0.28.1 (#2986) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-18 15:15:02 +00:00
github.com/andybalholm/brotli v1.1.0 // indirect
fix(deps): update module github.com/snowflakedb/gosnowflake to v1.7.2 (#2430) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-12 18:29:51 +00:00
github.com/apache/arrow/go/v14 v14.0.2 // indirect
Analyze (#3099) * Add POC analyze sub-command * Address lint errors * [chore] Embed scopes at compile time * [chore] Move subcommand check up to prevent printing metrics * added http logging to most analyzers * Use custom RoundTripper with default http.Client * Create framework of interfaces, structs, and protos * Merge main * Add AnalysisInfo to detectors.Result * Hide analyze subcommand * Update gen_proto.sh * Update protos * Make protos * Update analyzer data types * Rename argument to credentialInfo --------- Co-authored-by: Joe Leon <joe.leon@trufflesec.com>
2024-07-25 19:06:05 +00:00
github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect
Add terminal UI (#1593) * Init attempt at tui with bubble tea. Co-authored-by: mcastorina <m.castorina93@gmail.com> * Add starting and source selection options Co-authored-by: mcastorina <m.castorina93@gmail.com> * Rewrite models into a state machine * Update source descriptions * Make subpages implement tea.Model * Rename page0 and page1 to be more descriptive * Adjust styling and adding color consts Co-authored-by: mcastorina <m.castorina93@gmail.com> * Add helper generic function to call Update and type cast * Setup plumbing for source configuration page * Use CLI introspection for source configuration (WIP) * Experiment with table view * Replace table with form fields Co-authored-by: mcastorina <m.castorina93@gmail.com> * Change 🔒 to 💸 * Copy components from soft-serve Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Copy styles from soft-serve Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Copy common from soft-serve Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Refactor into pages This is still a WIP, but the main structure is there. Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Trying out selector for wizard intro Co-authored-by: mcastorina <m.castorina93@gmail.com> * Use selector with custom View Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Change Item to be an enum Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Add link pages Co-authored-by: mcastorina <m.castorina93@gmail.com> * Update source select to use selector Co-authored-by: mcastorina <m.castorina93@gmail.com> * Delete source configure page and add blank tabs Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Add tab placeholder pages for configurationi Co-authored-by: mcastorina <m.castorina93@gmail.com> * Added headers and style to each tab Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Update with new sources * Remove kingpin attribute from SourceItem * Add basic form field and source structuring * Hookup git form fields with an underlying textinput component Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Update forms for git and github Co-authored-by: mcastorina <m.castorina93@gmail.com> * Add labels per text input * Add sources and adjust styling * add basic trufflehog configuration page * Add skip button to textinputs component * Emit and handle textinputs skip/submit button commands * Don't quit when q is pressed on the sourceConfigurePage * Build trufflehog command based on source config vals Co-authored-by: mcastorina <m.castorina93@gmail.com> * Build flags based on truffle config inputs * Update summary section * Add generated truffle fields Co-authored-by: mcastorina <m.castorina93@gmail.com> * update summary to correctly print info * Go back a page when escape key is pressed * WIP run page list Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Allow running trufflehog from the run page Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Add option to view help docs Co-authored-by: mcastorina <m.castorina93@gmail.com> * comment out unused styles and remove unused types * Capitalize H in TruffleHog * remove unneeded fmt.Sprintf --------- Co-authored-by: mcastorina <m.castorina93@gmail.com>
2023-08-09 20:13:55 +00:00
github.com/atotto/clipboard v0.1.4 // indirect
Canary verification (#2531) * verify canaries against SNS; get ARN * clean comments * Update tests and logic * added test for invalid canary secret * added verify logic for canaries * go mod tidy --------- Co-authored-by: Dustin Decker <dustin@trufflesec.com>
2024-03-08 02:18:18 +00:00
github.com/aws/smithy-go v1.20.1 // indirect
Clean up some detectors (#2501)
2024-02-23 23:04:02 +00:00
github.com/aymanbagabas/go-osc52/v2 v2.0.1 // indirect
Add terminal UI (#1593) * Init attempt at tui with bubble tea. Co-authored-by: mcastorina <m.castorina93@gmail.com> * Add starting and source selection options Co-authored-by: mcastorina <m.castorina93@gmail.com> * Rewrite models into a state machine * Update source descriptions * Make subpages implement tea.Model * Rename page0 and page1 to be more descriptive * Adjust styling and adding color consts Co-authored-by: mcastorina <m.castorina93@gmail.com> * Add helper generic function to call Update and type cast * Setup plumbing for source configuration page * Use CLI introspection for source configuration (WIP) * Experiment with table view * Replace table with form fields Co-authored-by: mcastorina <m.castorina93@gmail.com> * Change 🔒 to 💸 * Copy components from soft-serve Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Copy styles from soft-serve Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Copy common from soft-serve Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Refactor into pages This is still a WIP, but the main structure is there. Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Trying out selector for wizard intro Co-authored-by: mcastorina <m.castorina93@gmail.com> * Use selector with custom View Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Change Item to be an enum Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Add link pages Co-authored-by: mcastorina <m.castorina93@gmail.com> * Update source select to use selector Co-authored-by: mcastorina <m.castorina93@gmail.com> * Delete source configure page and add blank tabs Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Add tab placeholder pages for configurationi Co-authored-by: mcastorina <m.castorina93@gmail.com> * Added headers and style to each tab Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Update with new sources * Remove kingpin attribute from SourceItem * Add basic form field and source structuring * Hookup git form fields with an underlying textinput component Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Update forms for git and github Co-authored-by: mcastorina <m.castorina93@gmail.com> * Add labels per text input * Add sources and adjust styling * add basic trufflehog configuration page * Add skip button to textinputs component * Emit and handle textinputs skip/submit button commands * Don't quit when q is pressed on the sourceConfigurePage * Build trufflehog command based on source config vals Co-authored-by: mcastorina <m.castorina93@gmail.com> * Build flags based on truffle config inputs * Update summary section * Add generated truffle fields Co-authored-by: mcastorina <m.castorina93@gmail.com> * update summary to correctly print info * Go back a page when escape key is pressed * WIP run page list Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Allow running trufflehog from the run page Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Add option to view help docs Co-authored-by: mcastorina <m.castorina93@gmail.com> * comment out unused styles and remove unused types * Capitalize H in TruffleHog * remove unneeded fmt.Sprintf --------- Co-authored-by: mcastorina <m.castorina93@gmail.com>
2023-08-09 20:13:55 +00:00
github.com/aymerick/douceur v0.2.0 // indirect
🎉 Add Docker image scanning 🎉 (#1412) * Add Docker source * Add metrics * Add test * Add debugging, address PR comments, fix path output * review suggestions
2023-06-22 15:02:25 +00:00
github.com/beorn7/perks v1.0.1 // indirect
Update github.com/bodgit/sevenzip to v1.4.3 (#2039)
2023-10-29 22:42:17 +00:00
github.com/bodgit/plumbing v1.3.0 // indirect
build: upgrade bodgit/sevenzip to v1.4.5 (#2215)
2023-12-14 15:48:39 +00:00
github.com/bodgit/sevenzip v1.4.5 // indirect
Update github.com/bodgit/sevenzip to v1.4.3 (#2039)
2023-10-29 22:42:17 +00:00
github.com/bodgit/windows v1.0.1 // indirect
JDBC test and parsing improvements (#2516) * JDBC test and parsing improvements - Uses net/url for more robust URI parsing - Supports common JDBC formats for MySQL - Supports URI format for MSSQL - Uses allowlist for params across all drivers - Uses testcontainers-go for integration testing - much faster, more robust, no port collisions - Uses gofakeit for random data (db, user, password) generation in integration tests - Adds connection timeouts - Use Microsoft's driver for MSSQL * go mod tidy
2024-02-28 16:51:37 +00:00
github.com/cenkalti/backoff/v4 v4.2.1 // indirect
fix(deps): update module github.com/prometheus/client_golang to v1.20.1 (#3236) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-20 15:59:15 +00:00
github.com/cespare/xxhash/v2 v2.3.0 // indirect
fix(deps): update module github.com/charmbracelet/bubbletea to v0.27.0 (#3229) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-20 14:58:38 +00:00
github.com/charmbracelet/x/ansi v0.1.4 // indirect
fix(deps): update module github.com/charmbracelet/bubbletea to v0.26.4 (#2885) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-05-31 14:56:33 +00:00
github.com/charmbracelet/x/input v0.1.0 // indirect
github.com/charmbracelet/x/term v0.1.1 // indirect
github.com/charmbracelet/x/windows v0.1.0 // indirect
fix(deps): update module github.com/sassoftware/go-rpmutils to v0.4.0 (#2831) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-05-11 14:18:13 +00:00
github.com/cloudflare/circl v1.3.8 // indirect
fix(deps): update testcontainers-go monorepo to v0.32.0 (#3050) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-07-07 15:57:49 +00:00
github.com/containerd/containerd v1.7.18 // indirect
JDBC test and parsing improvements (#2516) * JDBC test and parsing improvements - Uses net/url for more robust URI parsing - Supports common JDBC formats for MySQL - Supports URI format for MSSQL - Uses allowlist for params across all drivers - Uses testcontainers-go for integration testing - much faster, more robust, no port collisions - Uses gofakeit for random data (db, user, password) generation in integration tests - Adds connection timeouts - Use Microsoft's driver for MSSQL * go mod tidy
2024-02-28 16:51:37 +00:00
github.com/containerd/log v0.1.0 // indirect
fix(deps): update testcontainers-go monorepo to v0.33.0 (#3239) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-20 20:18:54 +00:00
github.com/containerd/platforms v0.2.1 // indirect
🎉 Add Docker image scanning 🎉 (#1412) * Add Docker source * Add metrics * Add test * Add debugging, address PR comments, fix path output * review suggestions
2023-06-22 15:02:25 +00:00
github.com/containerd/stargz-snapshotter/estargz v0.14.3 // indirect
fix(deps): update module github.com/couchbase/gocb/v2 to v2.9.1 (#3078) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-07-20 20:39:04 +00:00
github.com/couchbase/gocbcore/v10 v10.5.1 // indirect
fix(deps): update module github.com/couchbase/gocb/v2 to v2.9.0 (#3030) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-07-01 18:23:21 +00:00
github.com/couchbase/gocbcoreps v0.1.3 // indirect
fix(deps): update module github.com/couchbase/gocb/v2 to v2.7.2 (#2493) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-21 16:31:16 +00:00
github.com/couchbase/goprotostellar v1.0.2 // indirect
fix(deps): update module github.com/couchbase/gocb/v2 to v2.9.0 (#3030) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-07-01 18:23:21 +00:00
github.com/couchbaselabs/gocbconnstr/v2 v2.0.0-20240607131231-fb385523de28 // indirect
JDBC test and parsing improvements (#2516) * JDBC test and parsing improvements - Uses net/url for more robust URI parsing - Supports common JDBC formats for MySQL - Supports URI format for MSSQL - Uses allowlist for params across all drivers - Uses testcontainers-go for integration testing - much faster, more robust, no port collisions - Uses gofakeit for random data (db, user, password) generation in integration tests - Adds connection timeouts - Use Microsoft's driver for MSSQL * go mod tidy
2024-02-28 16:51:37 +00:00
github.com/cpuguy83/dockercfg v0.3.1 // indirect
Update module github.com/go-git/go-git/v5 to v5.10.0 (#2023) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-10-30 01:01:01 +00:00
github.com/cyphar/filepath-securejoin v0.2.4 // indirect
add snowflake detector (#1653) Detect Snowflake secrets (compound URI of account, username, password) and enrich Secret Result with account and databases that the secret has access to.
2023-08-24 17:29:58 +00:00
github.com/danieljoos/wincred v1.1.2 // indirect
Move GitHub integration tests behind a build flag and add unit tests (#527) * Add unit tests and refactor some logic * Move integration tests to a separate file behind a build flag * Fix bugs in normalizeRepos * Address lint errors * Sort slices before comparing because order doesn't matter
2022-05-09 15:31:00 +00:00
github.com/davecgh/go-spew v1.1.1 // indirect
updates
2022-01-19 06:24:56 +00:00
github.com/dimchansky/utfbom v1.1.1 // indirect
fix(deps): update testcontainers-go monorepo to v0.32.0 (#3050) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-07-07 15:57:49 +00:00
github.com/distribution/reference v0.6.0 // indirect
Add terminal UI (#1593) * Init attempt at tui with bubble tea. Co-authored-by: mcastorina <m.castorina93@gmail.com> * Add starting and source selection options Co-authored-by: mcastorina <m.castorina93@gmail.com> * Rewrite models into a state machine * Update source descriptions * Make subpages implement tea.Model * Rename page0 and page1 to be more descriptive * Adjust styling and adding color consts Co-authored-by: mcastorina <m.castorina93@gmail.com> * Add helper generic function to call Update and type cast * Setup plumbing for source configuration page * Use CLI introspection for source configuration (WIP) * Experiment with table view * Replace table with form fields Co-authored-by: mcastorina <m.castorina93@gmail.com> * Change 🔒 to 💸 * Copy components from soft-serve Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Copy styles from soft-serve Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Copy common from soft-serve Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Refactor into pages This is still a WIP, but the main structure is there. Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Trying out selector for wizard intro Co-authored-by: mcastorina <m.castorina93@gmail.com> * Use selector with custom View Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Change Item to be an enum Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Add link pages Co-authored-by: mcastorina <m.castorina93@gmail.com> * Update source select to use selector Co-authored-by: mcastorina <m.castorina93@gmail.com> * Delete source configure page and add blank tabs Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Add tab placeholder pages for configurationi Co-authored-by: mcastorina <m.castorina93@gmail.com> * Added headers and style to each tab Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Update with new sources * Remove kingpin attribute from SourceItem * Add basic form field and source structuring * Hookup git form fields with an underlying textinput component Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Update forms for git and github Co-authored-by: mcastorina <m.castorina93@gmail.com> * Add labels per text input * Add sources and adjust styling * add basic trufflehog configuration page * Add skip button to textinputs component * Emit and handle textinputs skip/submit button commands * Don't quit when q is pressed on the sourceConfigurePage * Build trufflehog command based on source config vals Co-authored-by: mcastorina <m.castorina93@gmail.com> * Build flags based on truffle config inputs * Update summary section * Add generated truffle fields Co-authored-by: mcastorina <m.castorina93@gmail.com> * update summary to correctly print info * Go back a page when escape key is pressed * WIP run page list Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Allow running trufflehog from the run page Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Add option to view help docs Co-authored-by: mcastorina <m.castorina93@gmail.com> * comment out unused styles and remove unused types * Capitalize H in TruffleHog * remove unneeded fmt.Sprintf --------- Co-authored-by: mcastorina <m.castorina93@gmail.com>
2023-08-09 20:13:55 +00:00
github.com/dlclark/regexp2 v1.4.0 // indirect
fix(deps): update module github.com/google/go-containerregistry to v0.20.2 (#3184) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-09 15:02:50 +00:00
github.com/docker/cli v27.1.1+incompatible // indirect
Bump github.com/docker/distribution (#1415) Bumps [github.com/docker/distribution](https://github.com/docker/distribution) from 2.8.1+incompatible to 2.8.2+incompatible. - [Release notes](https://github.com/docker/distribution/releases) - [Commits](https://github.com/docker/distribution/compare/v2.8.1...v2.8.2) --- updated-dependencies: - dependency-name: github.com/docker/distribution dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-22 16:14:47 +00:00
github.com/docker/distribution v2.8.2+incompatible // indirect
fix(deps): update testcontainers-go monorepo to v0.33.0 (#3239) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-20 20:18:54 +00:00
github.com/docker/docker v27.1.1+incompatible // indirect
🎉 Add Docker image scanning 🎉 (#1412) * Add Docker source * Add metrics * Add test * Add debugging, address PR comments, fix path output * review suggestions
2023-06-22 15:02:25 +00:00
github.com/docker/docker-credential-helpers v0.7.0 // indirect
JDBC test and parsing improvements (#2516) * JDBC test and parsing improvements - Uses net/url for more robust URI parsing - Supports common JDBC formats for MySQL - Supports URI format for MSSQL - Uses allowlist for params across all drivers - Uses testcontainers-go for integration testing - much faster, more robust, no port collisions - Uses gofakeit for random data (db, user, password) generation in integration tests - Adds connection timeouts - Use Microsoft's driver for MSSQL * go mod tidy
2024-02-28 16:51:37 +00:00
github.com/docker/go-connections v0.5.0 // indirect
github.com/docker/go-units v0.5.0 // indirect
Archive decoder (#683) * Archive decoder * Fix reader handling * Seek error handling * Add tests * Fix extra empty chunk * Sync chunk size
2022-08-03 03:36:21 +00:00
github.com/dsnet/compress v0.0.1 // indirect
Bump github.com/dvsekhvalnov/jose2go from 1.5.0 to 1.6.0 (#2279) Bumps [github.com/dvsekhvalnov/jose2go](https://github.com/dvsekhvalnov/jose2go) from 1.5.0 to 1.6.0. - [Commits](https://github.com/dvsekhvalnov/jose2go/compare/v1.5...v1.6.0) --- updated-dependencies: - dependency-name: github.com/dvsekhvalnov/jose2go dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-08 17:45:49 +00:00
github.com/dvsekhvalnov/jose2go v1.6.0 // indirect
fix(deps): update module github.com/elastic/go-elasticsearch/v8 to v8.14.0 (#2981) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-18 12:04:57 +00:00
github.com/elastic/elastic-transport-go/v8 v8.6.0 // indirect
Bump github.com/go-git/go-git/v5 from 5.4.2 to 5.5.1 (#972) Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.4.2 to 5.5.1. - [Release notes](https://github.com/go-git/go-git/releases) - [Commits](https://github.com/go-git/go-git/compare/v5.4.2...v5.5.1) --- updated-dependencies: - dependency-name: github.com/go-git/go-git/v5 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-12 23:56:26 +00:00
github.com/emirpasic/gods v1.18.1 // indirect
fix(deps): update module github.com/charmbracelet/bubbletea to v0.26.1 (#2777) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-05-05 14:52:13 +00:00
github.com/erikgeiser/coninput v0.0.0-20211004153227-1c3628e74d0f // indirect
fix(deps): update module cloud.google.com/go/secretmanager to v1.11.5 (#2414) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-11 21:59:31 +00:00
github.com/felixge/httpsnoop v1.0.4 // indirect
add snowflake detector (#1653) Detect Snowflake secrets (compound URI of account, username, password) and enrich Secret Result with account and databases that the secret has access to.
2023-08-24 17:29:58 +00:00
github.com/form3tech-oss/jwt-go v3.2.5+incompatible // indirect
Bump github.com/go-ldap/ldap/v3 from 3.4.5 to 3.4.6 (#1796) Bumps [github.com/go-ldap/ldap/v3](https://github.com/go-ldap/ldap) from 3.4.5 to 3.4.6. - [Release notes](https://github.com/go-ldap/ldap/releases) - [Commits](https://github.com/go-ldap/ldap/compare/v3.4.5...v3.4.6) --- updated-dependencies: - dependency-name: github.com/go-ldap/ldap/v3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-21 00:58:21 +00:00
github.com/go-asn1-ber/asn1-ber v1.5.5 // indirect
Bump github.com/go-git/go-git/v5 from 5.6.1 to 5.7.0 (#1389) Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.6.1 to 5.7.0. - [Release notes](https://github.com/go-git/go-git/releases) - [Commits](https://github.com/go-git/go-git/compare/v5.6.1...v5.7.0) --- updated-dependencies: - dependency-name: github.com/go-git/go-git/v5 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-13 19:51:48 +00:00
github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect
Update module github.com/go-git/go-git/v5 to v5.10.0 (#2023) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-10-30 01:01:01 +00:00
github.com/go-git/go-billy/v5 v5.5.0 // indirect
patch dependency (#2971)
2024-06-15 12:09:58 +00:00
github.com/go-jose/go-jose/v4 v4.0.2 // indirect
fix(deps): update module github.com/couchbase/gocb/v2 to v2.7.1 (#2320) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-01-21 21:04:07 +00:00
github.com/go-logr/stdr v1.2.2 // indirect
Automatically update trufflehog (#121) Co-authored-by: Dustin Decker <dustin@trufflesec.com>
2022-04-03 18:51:56 +00:00
github.com/go-ole/go-ole v1.2.6 // indirect
Analyze (#3099) * Add POC analyze sub-command * Address lint errors * [chore] Embed scopes at compile time * [chore] Move subcommand check up to prevent printing metrics * added http logging to most analyzers * Use custom RoundTripper with default http.Client * Create framework of interfaces, structs, and protos * Merge main * Add AnalysisInfo to detectors.Result * Hide analyze subcommand * Update gen_proto.sh * Update protos * Make protos * Update analyzer data types * Rename argument to credentialInfo --------- Co-authored-by: Joe Leon <joe.leon@trufflesec.com>
2024-07-25 19:06:05 +00:00
github.com/go-openapi/errors v0.22.0 // indirect
github.com/go-openapi/strfmt v0.23.0 // indirect
fix(deps): update module github.com/snowflakedb/gosnowflake to v1.7.2 (#2430) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-12 18:29:51 +00:00
github.com/goccy/go-json v0.10.2 // indirect
add snowflake detector (#1653) Detect Snowflake secrets (compound URI of account, username, password) and enrich Secret Result with account and databases that the secret has access to.
2023-08-24 17:29:58 +00:00
github.com/godbus/dbus v0.0.0-20190726142602-4481cbc300e2 // indirect
JDBC test and parsing improvements (#2516) * JDBC test and parsing improvements - Uses net/url for more robust URI parsing - Supports common JDBC formats for MySQL - Supports URI format for MSSQL - Uses allowlist for params across all drivers - Uses testcontainers-go for integration testing - much faster, more robust, no port collisions - Uses gofakeit for random data (db, user, password) generation in integration tests - Adds connection timeouts - Use Microsoft's driver for MSSQL * go mod tidy
2024-02-28 16:51:37 +00:00
github.com/gogo/protobuf v1.3.2 // indirect
Bump github.com/docker/docker (#2603) Bumps [github.com/docker/docker](https://github.com/docker/docker) from 25.0.3+incompatible to 25.0.5+incompatible. - [Release notes](https://github.com/docker/docker/releases) - [Commits](https://github.com/docker/docker/compare/v25.0.3...v25.0.5) --- updated-dependencies: - dependency-name: github.com/docker/docker dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-03-21 15:34:02 +00:00
github.com/golang-jwt/jwt/v5 v5.2.1 // indirect
JDBC test and parsing improvements (#2516) * JDBC test and parsing improvements - Uses net/url for more robust URI parsing - Supports common JDBC formats for MySQL - Supports URI format for MSSQL - Uses allowlist for params across all drivers - Uses testcontainers-go for integration testing - much faster, more robust, no port collisions - Uses gofakeit for random data (db, user, password) generation in integration tests - Adds connection timeouts - Use Microsoft's driver for MSSQL * go mod tidy
2024-02-28 16:51:37 +00:00
github.com/golang-sql/civil v0.0.0-20220223132316-b832511892a9 // indirect
[THOG-162] Implement JDBC verification for select drivers (#792) * [THOG-162] Implement JDBC verification for select drivers Also includes integration tests for postgres and mysql via docker. To run, execute the following (untested what will happen if the docker images aren't installed): go test -tags=detectors,integration ./pkg/detectors/jdbc * Make jdbc regex a bit more strict * Surface the context to allow the caller to set a timeout
2022-09-21 15:50:48 +00:00
github.com/golang-sql/sqlexp v0.1.0 // indirect
Bump cloud.google.com/go/secretmanager from 1.10.0 to 1.10.1 (#1365) Bumps [cloud.google.com/go/secretmanager](https://github.com/googleapis/google-cloud-go) from 1.10.0 to 1.10.1. - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md) - [Commits](https://github.com/googleapis/google-cloud-go/compare/kms/v1.10.0...kms/v1.10.1) --- updated-dependencies: - dependency-name: cloud.google.com/go/secretmanager dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-30 17:04:09 +00:00
github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
Archive decoder (#683) * Archive decoder * Fix reader handling * Seek error handling * Add tests * Fix extra empty chunk * Sync chunk size
2022-08-03 03:36:21 +00:00
github.com/golang/snappy v0.0.4 // indirect
fix(deps): update module github.com/snowflakedb/gosnowflake to v1.7.2 (#2430) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-12 18:29:51 +00:00
github.com/google/flatbuffers v23.5.26+incompatible // indirect
fix dep versions (#3106)
2024-07-27 00:44:23 +00:00
github.com/google/go-github/v62 v62.0.0 // indirect
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
github.com/google/go-querystring v1.1.0 // indirect
fix(deps): update module github.com/felixge/fgprof to v0.9.4 (#2532) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-03-03 19:11:51 +00:00
github.com/google/pprof v0.0.0-20240227163752-401108e1b7e7 // indirect
fix(deps): update module google.golang.org/api to v0.190.0 (#3146) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-02 15:09:40 +00:00
github.com/google/s2a-go v0.1.8 // indirect
fix(deps): update module cloud.google.com/go/secretmanager to v1.14.1 (#3301) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-17 15:52:00 +00:00
github.com/googleapis/enterprise-certificate-proxy v0.3.3 // indirect
Add terminal UI (#1593) * Init attempt at tui with bubble tea. Co-authored-by: mcastorina <m.castorina93@gmail.com> * Add starting and source selection options Co-authored-by: mcastorina <m.castorina93@gmail.com> * Rewrite models into a state machine * Update source descriptions * Make subpages implement tea.Model * Rename page0 and page1 to be more descriptive * Adjust styling and adding color consts Co-authored-by: mcastorina <m.castorina93@gmail.com> * Add helper generic function to call Update and type cast * Setup plumbing for source configuration page * Use CLI introspection for source configuration (WIP) * Experiment with table view * Replace table with form fields Co-authored-by: mcastorina <m.castorina93@gmail.com> * Change 🔒 to 💸 * Copy components from soft-serve Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Copy styles from soft-serve Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Copy common from soft-serve Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Refactor into pages This is still a WIP, but the main structure is there. Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Trying out selector for wizard intro Co-authored-by: mcastorina <m.castorina93@gmail.com> * Use selector with custom View Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Change Item to be an enum Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Add link pages Co-authored-by: mcastorina <m.castorina93@gmail.com> * Update source select to use selector Co-authored-by: mcastorina <m.castorina93@gmail.com> * Delete source configure page and add blank tabs Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Add tab placeholder pages for configurationi Co-authored-by: mcastorina <m.castorina93@gmail.com> * Added headers and style to each tab Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Update with new sources * Remove kingpin attribute from SourceItem * Add basic form field and source structuring * Hookup git form fields with an underlying textinput component Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Update forms for git and github Co-authored-by: mcastorina <m.castorina93@gmail.com> * Add labels per text input * Add sources and adjust styling * add basic trufflehog configuration page * Add skip button to textinputs component * Emit and handle textinputs skip/submit button commands * Don't quit when q is pressed on the sourceConfigurePage * Build trufflehog command based on source config vals Co-authored-by: mcastorina <m.castorina93@gmail.com> * Build flags based on truffle config inputs * Update summary section * Add generated truffle fields Co-authored-by: mcastorina <m.castorina93@gmail.com> * update summary to correctly print info * Go back a page when escape key is pressed * WIP run page list Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Allow running trufflehog from the run page Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Add option to view help docs Co-authored-by: mcastorina <m.castorina93@gmail.com> * comment out unused styles and remove unused types * Capitalize H in TruffleHog * remove unneeded fmt.Sprintf --------- Co-authored-by: mcastorina <m.castorina93@gmail.com>
2023-08-09 20:13:55 +00:00
github.com/gorilla/css v1.0.0 // indirect
fix(deps): update module github.com/couchbase/gocb/v2 to v2.7.0 (#2153) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-12-02 17:16:24 +00:00
github.com/grpc-ecosystem/go-grpc-middleware v1.4.0 // indirect
JDBC test and parsing improvements (#2516) * JDBC test and parsing improvements - Uses net/url for more robust URI parsing - Supports common JDBC formats for MySQL - Supports URI format for MSSQL - Uses allowlist for params across all drivers - Uses testcontainers-go for integration testing - much faster, more robust, no port collisions - Uses gofakeit for random data (db, user, password) generation in integration tests - Adds connection timeouts - Use Microsoft's driver for MSSQL * go mod tidy
2024-02-28 16:51:37 +00:00
github.com/grpc-ecosystem/grpc-gateway/v2 v2.16.0 // indirect
Update to Go 1.21 (#1733) * Update to Go 1.21 * go mod tidy
2023-08-31 15:46:43 +00:00
github.com/gsterjov/go-libsecret v0.0.0-20161001094733-a6f4afe4910c // indirect
Move GitHub integration tests behind a build flag and add unit tests (#527) * Add unit tests and refactor some logic * Move integration tests to a separate file behind a build flag * Fix bugs in normalizeRepos * Address lint errors * Sort slices before comparing because order doesn't matter
2022-05-09 15:31:00 +00:00
github.com/h2non/parth v0.0.0-20190131123155-b4df798d6542 // indirect
JDBC test and parsing improvements (#2516) * JDBC test and parsing improvements - Uses net/url for more robust URI parsing - Supports common JDBC formats for MySQL - Supports URI format for MSSQL - Uses allowlist for params across all drivers - Uses testcontainers-go for integration testing - much faster, more robust, no port collisions - Uses gofakeit for random data (db, user, password) generation in integration tests - Adds connection timeouts - Use Microsoft's driver for MSSQL * go mod tidy
2024-02-28 16:51:37 +00:00
github.com/hashicorp/errwrap v1.1.0 // indirect
Bump github.com/xanzy/go-gitlab from 0.65.0 to 0.69.0 (#660) Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab) from 0.65.0 to 0.69.0. - [Release notes](https://github.com/xanzy/go-gitlab/releases) - [Changelog](https://github.com/xanzy/go-gitlab/blob/master/releases_test.go) - [Commits](https://github.com/xanzy/go-gitlab/compare/v0.65.0...v0.69.0) --- updated-dependencies: - dependency-name: github.com/xanzy/go-gitlab dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-19 00:02:27 +00:00
github.com/hashicorp/go-cleanhttp v0.5.2 // indirect
Do local URI verification, while attempting to defuse SSRF (#879) * simplify monogo pattern * do URI verification locally, while attempting to defuse SSRF * test SSRF defuse * simplify err check logic per linter recommendation * split up detectors * address comments * remove unused var
2022-11-02 00:27:24 +00:00
github.com/hashicorp/go-multierror v1.1.1 // indirect
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 // indirect
updates
2022-01-19 06:24:56 +00:00
github.com/jmespath/go-jmespath v0.4.0 // indirect
Automatically update trufflehog (#121) Co-authored-by: Dustin Decker <dustin@trufflesec.com>
2022-04-03 18:51:56 +00:00
github.com/jpillora/s3 v1.1.4 // indirect
Bump github.com/go-git/go-git/v5 from 5.4.2 to 5.5.1 (#972) Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.4.2 to 5.5.1. - [Release notes](https://github.com/go-git/go-git/releases) - [Commits](https://github.com/go-git/go-git/compare/v5.4.2...v5.5.1) --- updated-dependencies: - dependency-name: github.com/go-git/go-git/v5 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-12 23:56:26 +00:00
github.com/kevinburke/ssh_config v1.2.0 // indirect
[refactor] - Refactor Archive Handling Logic (#2703) * Remove specialized handler and archive struct and restructure handlers pkg. * Refactor RPM archive handlers to use a library instead of shelling out * make rpm handling context aware * update test * Refactor AR/deb archive handler to use an existing library instead of shelling out * Update tests * add max size check * add filename and size to context kvp * move skip file check and is binary check before opening file * fix test * preserve existing funcitonality of not handling non-archive files in HandleFile * Adjust check for rpm/deb archive type * add additional deb mime type * update comment * Remove specialized handler and archive struct and restructure handlers pkg. * Refactor RPM archive handlers to use a library instead of shelling out * make rpm handling context aware * update test * Refactor AR/deb archive handler to use an existing library instead of shelling out * Update tests * add max size check * add filename and size to context kvp * move skip file check and is binary check before opening file * fix test * preserve existing funcitonality of not handling non-archive files in HandleFile * Adjust check for rpm/deb archive type * add additional deb mime type * update comment * go mod tidy * update go mod * go mod tidy * add comment * update max depth check to > * go mod tidy * rename * [refactor] - Refactor Archive Handling Logic - Part 4: Non-Archive Data Handling and Cleanup (#2704) * Handle non-archive data within the DefaultHandler * make structs and methods private * Remove non-archive data handling within sources * Handle non-archive data within the DefaultHandler * rebase * Remove non-archive data handling within sources * add gzip * move diskbuffered rereader setup into handler pkg * remove DiskBuffereReader creation logic within sources * move rewind closer * reduce log verbosity * make defaultBufferSize a const * use correct reader * address comments * update test * [feat] - Add Prometheus Metrics for File Handlers (#2705) * add metrics for file handling * add metrics for errors * add metrics for file handling * add metrics for errors * fix tests * add metrics for max archive depth and skipped files * update error * skip symlinks and dirs * update err * fix err assignment * add metrics for file handling * add metrics for errors * fix tests * rebase * add metrics for errors * add metrics for max archive depth and skipped files * update error * skip symlinks and dirs * update err * fix err assignment * rebase * remove * update metric to ms * update comments * address comments * reduce indentations * add metrics for archive depth * [bug] - Enhanced Archive Handling to Address Interface Constraints (#2710) * add metrics for file handling * add metrics for errors * add metrics for file handling * add metrics for errors * fix tests * add metrics for max archive depth and skipped files * update error * skip symlinks and dirs * update err * Address incompatible reader to openArchive * remove nil check * fix err assignment * wrap compReader with DiskbufferReader * add metrics for file handling * add metrics for errors * fix tests * rebase * add metrics for errors * add metrics for max archive depth and skipped files * update error * skip symlinks and dirs * update err * fix err assignment * rebase * remove * update metric to ms * update comments * address comments * reduce indentations * replace diskbuffereader with bufferedfilereader * updtes * add metric back * [bug] - Fix bug and simplify git cat-file command execution and output handling (#2719) * add metrics for file handling * add metrics for errors * add metrics for file handling * add metrics for errors * fix tests * add metrics for max archive depth and skipped files * update error * skip symlinks and dirs * update err * Address incompatible reader to openArchive * remove nil check * fix err assignment * Allow git cat-file blob to complete before trying to handle the file * wrap compReader with DiskbufferReader * Allow git cat-file blob to complete before trying to handle the file * updates * revert stuff * update test * remove * add metrics for file handling * add metrics for errors * fix tests * rebase * add metrics for errors * add metrics for max archive depth and skipped files * update error * skip symlinks and dirs * update err * fix err assignment * rebase * remove * update metric to ms * update comments * address comments * reduce indentations * inline
2024-05-10 18:36:06 +00:00
github.com/kjk/lzma v0.0.0-20161016003348-3fd93898850d // indirect
[perf] - Leverage pgzip for Parallel decompression (#3149)
2024-08-02 11:11:10 +00:00
github.com/klauspost/compress v1.17.9 // indirect
fix(deps): update module github.com/snowflakedb/gosnowflake to v1.7.2 (#2430) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-12 18:29:51 +00:00
github.com/klauspost/cpuid/v2 v2.2.5 // indirect
Add terminal UI (#1593) * Init attempt at tui with bubble tea. Co-authored-by: mcastorina <m.castorina93@gmail.com> * Add starting and source selection options Co-authored-by: mcastorina <m.castorina93@gmail.com> * Rewrite models into a state machine * Update source descriptions * Make subpages implement tea.Model * Rename page0 and page1 to be more descriptive * Adjust styling and adding color consts Co-authored-by: mcastorina <m.castorina93@gmail.com> * Add helper generic function to call Update and type cast * Setup plumbing for source configuration page * Use CLI introspection for source configuration (WIP) * Experiment with table view * Replace table with form fields Co-authored-by: mcastorina <m.castorina93@gmail.com> * Change 🔒 to 💸 * Copy components from soft-serve Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Copy styles from soft-serve Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Copy common from soft-serve Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Refactor into pages This is still a WIP, but the main structure is there. Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Trying out selector for wizard intro Co-authored-by: mcastorina <m.castorina93@gmail.com> * Use selector with custom View Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Change Item to be an enum Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Add link pages Co-authored-by: mcastorina <m.castorina93@gmail.com> * Update source select to use selector Co-authored-by: mcastorina <m.castorina93@gmail.com> * Delete source configure page and add blank tabs Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Add tab placeholder pages for configurationi Co-authored-by: mcastorina <m.castorina93@gmail.com> * Added headers and style to each tab Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Update with new sources * Remove kingpin attribute from SourceItem * Add basic form field and source structuring * Hookup git form fields with an underlying textinput component Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Update forms for git and github Co-authored-by: mcastorina <m.castorina93@gmail.com> * Add labels per text input * Add sources and adjust styling * add basic trufflehog configuration page * Add skip button to textinputs component * Emit and handle textinputs skip/submit button commands * Don't quit when q is pressed on the sourceConfigurePage * Build trufflehog command based on source config vals Co-authored-by: mcastorina <m.castorina93@gmail.com> * Build flags based on truffle config inputs * Update summary section * Add generated truffle fields Co-authored-by: mcastorina <m.castorina93@gmail.com> * update summary to correctly print info * Go back a page when escape key is pressed * WIP run page list Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Allow running trufflehog from the run page Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Add option to view help docs Co-authored-by: mcastorina <m.castorina93@gmail.com> * comment out unused styles and remove unused types * Capitalize H in TruffleHog * remove unneeded fmt.Sprintf --------- Co-authored-by: mcastorina <m.castorina93@gmail.com>
2023-08-09 20:13:55 +00:00
github.com/lucasb-eyer/go-colorful v1.2.0 // indirect
JDBC test and parsing improvements (#2516) * JDBC test and parsing improvements - Uses net/url for more robust URI parsing - Supports common JDBC formats for MySQL - Supports URI format for MSSQL - Uses allowlist for params across all drivers - Uses testcontainers-go for integration testing - much faster, more robust, no port collisions - Uses gofakeit for random data (db, user, password) generation in integration tests - Adds connection timeouts - Use Microsoft's driver for MSSQL * go mod tidy
2024-02-28 16:51:37 +00:00
github.com/lufia/plan9stats v0.0.0-20211012122336-39d0f177ccd0 // indirect
github.com/magiconair/properties v1.8.7 // indirect
[chore] Remove logrus from trufflehog (#1095) * [chore] Remove logrus from trufflehog * Minor fixes * Fix logFatal call * Fix logrus call
2023-02-14 23:00:07 +00:00
github.com/mattn/go-colorable v0.1.13 // indirect
Add terminal UI (#1593) * Init attempt at tui with bubble tea. Co-authored-by: mcastorina <m.castorina93@gmail.com> * Add starting and source selection options Co-authored-by: mcastorina <m.castorina93@gmail.com> * Rewrite models into a state machine * Update source descriptions * Make subpages implement tea.Model * Rename page0 and page1 to be more descriptive * Adjust styling and adding color consts Co-authored-by: mcastorina <m.castorina93@gmail.com> * Add helper generic function to call Update and type cast * Setup plumbing for source configuration page * Use CLI introspection for source configuration (WIP) * Experiment with table view * Replace table with form fields Co-authored-by: mcastorina <m.castorina93@gmail.com> * Change 🔒 to 💸 * Copy components from soft-serve Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Copy styles from soft-serve Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Copy common from soft-serve Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Refactor into pages This is still a WIP, but the main structure is there. Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Trying out selector for wizard intro Co-authored-by: mcastorina <m.castorina93@gmail.com> * Use selector with custom View Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Change Item to be an enum Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Add link pages Co-authored-by: mcastorina <m.castorina93@gmail.com> * Update source select to use selector Co-authored-by: mcastorina <m.castorina93@gmail.com> * Delete source configure page and add blank tabs Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Add tab placeholder pages for configurationi Co-authored-by: mcastorina <m.castorina93@gmail.com> * Added headers and style to each tab Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Update with new sources * Remove kingpin attribute from SourceItem * Add basic form field and source structuring * Hookup git form fields with an underlying textinput component Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Update forms for git and github Co-authored-by: mcastorina <m.castorina93@gmail.com> * Add labels per text input * Add sources and adjust styling * add basic trufflehog configuration page * Add skip button to textinputs component * Emit and handle textinputs skip/submit button commands * Don't quit when q is pressed on the sourceConfigurePage * Build trufflehog command based on source config vals Co-authored-by: mcastorina <m.castorina93@gmail.com> * Build flags based on truffle config inputs * Update summary section * Add generated truffle fields Co-authored-by: mcastorina <m.castorina93@gmail.com> * update summary to correctly print info * Go back a page when escape key is pressed * WIP run page list Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Allow running trufflehog from the run page Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Add option to view help docs Co-authored-by: mcastorina <m.castorina93@gmail.com> * comment out unused styles and remove unused types * Capitalize H in TruffleHog * remove unneeded fmt.Sprintf --------- Co-authored-by: mcastorina <m.castorina93@gmail.com>
2023-08-09 20:13:55 +00:00
github.com/mattn/go-localereader v0.0.1 // indirect
fix(deps): update module github.com/schollz/progressbar/v3 to v3.16.0 (#3315) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-23 16:16:37 +00:00
github.com/mattn/go-runewidth v0.0.16 // indirect
fix(deps): update module github.com/charmbracelet/glamour to v0.7.0 (#2627) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-03-26 21:52:28 +00:00
github.com/microcosm-cc/bluemonday v1.0.25 // indirect
Add progress bar to CFOR (#3151) * Add progress bar to CFOR * unused vars * explicitly ignore progress errors * removed print statements * use stderr --------- Co-authored-by: joeleonjr <20135619+joeleonjr@users.noreply.github.com> Co-authored-by: Joe Leon <joe.leon@trufflesec.com>
2024-08-02 14:43:59 +00:00
github.com/mitchellh/colorstring v0.0.0-20190213212951-d06e56a500db // indirect
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
github.com/mitchellh/go-homedir v1.1.0 // indirect
Analyze (#3099) * Add POC analyze sub-command * Address lint errors * [chore] Embed scopes at compile time * [chore] Move subcommand check up to prevent printing metrics * added http logging to most analyzers * Use custom RoundTripper with default http.Client * Create framework of interfaces, structs, and protos * Merge main * Add AnalysisInfo to detectors.Result * Hide analyze subcommand * Update gen_proto.sh * Update protos * Make protos * Update analyzer data types * Rename argument to credentialInfo --------- Co-authored-by: Joe Leon <joe.leon@trufflesec.com>
2024-07-25 19:06:05 +00:00
github.com/mitchellh/mapstructure v1.5.0 // indirect
fix(deps): update testcontainers-go monorepo to v0.32.0 (#3050) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-07-07 15:57:49 +00:00
github.com/moby/docker-image-spec v1.3.1 // indirect
JDBC test and parsing improvements (#2516) * JDBC test and parsing improvements - Uses net/url for more robust URI parsing - Supports common JDBC formats for MySQL - Supports URI format for MSSQL - Uses allowlist for params across all drivers - Uses testcontainers-go for integration testing - much faster, more robust, no port collisions - Uses gofakeit for random data (db, user, password) generation in integration tests - Adds connection timeouts - Use Microsoft's driver for MSSQL * go mod tidy
2024-02-28 16:51:37 +00:00
github.com/moby/patternmatcher v0.6.0 // indirect
github.com/moby/sys/sequential v0.5.0 // indirect
github.com/moby/sys/user v0.1.0 // indirect
github.com/moby/term v0.5.0 // indirect
fix(deps): update module go.mongodb.org/mongo-driver to v1.16.0 (#3036) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-07-04 21:51:39 +00:00
github.com/montanaflynn/stats v0.7.1 // indirect
JDBC test and parsing improvements (#2516) * JDBC test and parsing improvements - Uses net/url for more robust URI parsing - Supports common JDBC formats for MySQL - Supports URI format for MSSQL - Uses allowlist for params across all drivers - Uses testcontainers-go for integration testing - much faster, more robust, no port collisions - Uses gofakeit for random data (db, user, password) generation in integration tests - Adds connection timeouts - Use Microsoft's driver for MSSQL * go mod tidy
2024-02-28 16:51:37 +00:00
github.com/morikuni/aec v1.0.0 // indirect
add snowflake detector (#1653) Detect Snowflake secrets (compound URI of account, username, password) and enrich Secret Result with account and databases that the secret has access to.
2023-08-24 17:29:58 +00:00
github.com/mtibben/percent v0.2.1 // indirect
fix(deps): update module github.com/charmbracelet/bubbletea to v0.26.1 (#2777) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-05-05 14:52:13 +00:00
github.com/muesli/ansi v0.0.0-20230316100256-276c6243b2f6 // indirect
Add terminal UI (#1593) * Init attempt at tui with bubble tea. Co-authored-by: mcastorina <m.castorina93@gmail.com> * Add starting and source selection options Co-authored-by: mcastorina <m.castorina93@gmail.com> * Rewrite models into a state machine * Update source descriptions * Make subpages implement tea.Model * Rename page0 and page1 to be more descriptive * Adjust styling and adding color consts Co-authored-by: mcastorina <m.castorina93@gmail.com> * Add helper generic function to call Update and type cast * Setup plumbing for source configuration page * Use CLI introspection for source configuration (WIP) * Experiment with table view * Replace table with form fields Co-authored-by: mcastorina <m.castorina93@gmail.com> * Change 🔒 to 💸 * Copy components from soft-serve Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Copy styles from soft-serve Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Copy common from soft-serve Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Refactor into pages This is still a WIP, but the main structure is there. Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Trying out selector for wizard intro Co-authored-by: mcastorina <m.castorina93@gmail.com> * Use selector with custom View Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Change Item to be an enum Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Add link pages Co-authored-by: mcastorina <m.castorina93@gmail.com> * Update source select to use selector Co-authored-by: mcastorina <m.castorina93@gmail.com> * Delete source configure page and add blank tabs Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Add tab placeholder pages for configurationi Co-authored-by: mcastorina <m.castorina93@gmail.com> * Added headers and style to each tab Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Update with new sources * Remove kingpin attribute from SourceItem * Add basic form field and source structuring * Hookup git form fields with an underlying textinput component Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Update forms for git and github Co-authored-by: mcastorina <m.castorina93@gmail.com> * Add labels per text input * Add sources and adjust styling * add basic trufflehog configuration page * Add skip button to textinputs component * Emit and handle textinputs skip/submit button commands * Don't quit when q is pressed on the sourceConfigurePage * Build trufflehog command based on source config vals Co-authored-by: mcastorina <m.castorina93@gmail.com> * Build flags based on truffle config inputs * Update summary section * Add generated truffle fields Co-authored-by: mcastorina <m.castorina93@gmail.com> * update summary to correctly print info * Go back a page when escape key is pressed * WIP run page list Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Allow running trufflehog from the run page Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Add option to view help docs Co-authored-by: mcastorina <m.castorina93@gmail.com> * comment out unused styles and remove unused types * Capitalize H in TruffleHog * remove unneeded fmt.Sprintf --------- Co-authored-by: mcastorina <m.castorina93@gmail.com>
2023-08-09 20:13:55 +00:00
github.com/muesli/cancelreader v0.2.2 // indirect
Update module github.com/charmbracelet/lipgloss to v0.9.1 (#2015) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-10-28 16:06:50 +00:00
github.com/muesli/termenv v0.15.2 // indirect
fix(deps): update module github.com/prometheus/client_golang to v1.20.1 (#3236) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-20 15:59:15 +00:00
github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
Archive decoder (#683) * Archive decoder * Fix reader handling * Seek error handling * Add tests * Fix extra empty chunk * Sync chunk size
2022-08-03 03:36:21 +00:00
github.com/nwaples/rardecode/v2 v2.0.0-beta.2 // indirect
Analyze (#3099) * Add POC analyze sub-command * Address lint errors * [chore] Embed scopes at compile time * [chore] Move subcommand check up to prevent printing metrics * added http logging to most analyzers * Use custom RoundTripper with default http.Client * Create framework of interfaces, structs, and protos * Merge main * Add AnalysisInfo to detectors.Result * Hide analyze subcommand * Update gen_proto.sh * Update protos * Make protos * Update analyzer data types * Rename argument to credentialInfo --------- Co-authored-by: Joe Leon <joe.leon@trufflesec.com>
2024-07-25 19:06:05 +00:00
github.com/oklog/ulid v1.3.1 // indirect
Add terminal UI (#1593) * Init attempt at tui with bubble tea. Co-authored-by: mcastorina <m.castorina93@gmail.com> * Add starting and source selection options Co-authored-by: mcastorina <m.castorina93@gmail.com> * Rewrite models into a state machine * Update source descriptions * Make subpages implement tea.Model * Rename page0 and page1 to be more descriptive * Adjust styling and adding color consts Co-authored-by: mcastorina <m.castorina93@gmail.com> * Add helper generic function to call Update and type cast * Setup plumbing for source configuration page * Use CLI introspection for source configuration (WIP) * Experiment with table view * Replace table with form fields Co-authored-by: mcastorina <m.castorina93@gmail.com> * Change 🔒 to 💸 * Copy components from soft-serve Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Copy styles from soft-serve Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Copy common from soft-serve Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Refactor into pages This is still a WIP, but the main structure is there. Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Trying out selector for wizard intro Co-authored-by: mcastorina <m.castorina93@gmail.com> * Use selector with custom View Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Change Item to be an enum Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Add link pages Co-authored-by: mcastorina <m.castorina93@gmail.com> * Update source select to use selector Co-authored-by: mcastorina <m.castorina93@gmail.com> * Delete source configure page and add blank tabs Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Add tab placeholder pages for configurationi Co-authored-by: mcastorina <m.castorina93@gmail.com> * Added headers and style to each tab Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Update with new sources * Remove kingpin attribute from SourceItem * Add basic form field and source structuring * Hookup git form fields with an underlying textinput component Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Update forms for git and github Co-authored-by: mcastorina <m.castorina93@gmail.com> * Add labels per text input * Add sources and adjust styling * add basic trufflehog configuration page * Add skip button to textinputs component * Emit and handle textinputs skip/submit button commands * Don't quit when q is pressed on the sourceConfigurePage * Build trufflehog command based on source config vals Co-authored-by: mcastorina <m.castorina93@gmail.com> * Build flags based on truffle config inputs * Update summary section * Add generated truffle fields Co-authored-by: mcastorina <m.castorina93@gmail.com> * update summary to correctly print info * Go back a page when escape key is pressed * WIP run page list Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Allow running trufflehog from the run page Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com> * Add option to view help docs Co-authored-by: mcastorina <m.castorina93@gmail.com> * comment out unused styles and remove unused types * Capitalize H in TruffleHog * remove unneeded fmt.Sprintf --------- Co-authored-by: mcastorina <m.castorina93@gmail.com>
2023-08-09 20:13:55 +00:00
github.com/olekukonko/tablewriter v0.0.5 // indirect
Do local URI verification, while attempting to defuse SSRF (#879) * simplify monogo pattern * do URI verification locally, while attempting to defuse SSRF * test SSRF defuse * simplify err check logic per linter recommendation * split up detectors * address comments * remove unused var
2022-11-02 00:27:24 +00:00
github.com/onsi/ginkgo v1.16.5 // indirect
🎉 Add Docker image scanning 🎉 (#1412) * Add Docker source * Add metrics * Add test * Add debugging, address PR comments, fix path output * review suggestions
2023-06-22 15:02:25 +00:00
github.com/opencontainers/go-digest v1.0.0 // indirect
fix(deps): update testcontainers-go monorepo to v0.29.1 (#2549) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-03-08 02:21:29 +00:00
github.com/opencontainers/image-spec v1.1.0 // indirect
build: upgrade bodgit/sevenzip to v1.4.5 (#2215)
2023-12-14 15:48:39 +00:00
github.com/pierrec/lz4/v4 v4.1.19 // indirect
Bump github.com/go-git/go-git/v5 from 5.5.2 to 5.6.0 (#1147) Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.5.2 to 5.6.0. - [Release notes](https://github.com/go-git/go-git/releases) - [Commits](https://github.com/go-git/go-git/compare/v5.5.2...v5.6.0) --- updated-dependencies: - dependency-name: github.com/go-git/go-git/v5 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-07 01:07:14 +00:00
github.com/pjbgf/sha1cd v0.3.0 // indirect
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
github.com/pkg/diff v0.0.0-20200914180035-5b29258ca4f7 // indirect
Move GitHub integration tests behind a build flag and add unit tests (#527) * Add unit tests and refactor some logic * Move integration tests to a separate file behind a build flag * Fix bugs in normalizeRepos * Address lint errors * Sort slices before comparing because order doesn't matter
2022-05-09 15:31:00 +00:00
github.com/pmezard/go-difflib v1.0.0 // indirect
JDBC test and parsing improvements (#2516) * JDBC test and parsing improvements - Uses net/url for more robust URI parsing - Supports common JDBC formats for MySQL - Supports URI format for MSSQL - Uses allowlist for params across all drivers - Uses testcontainers-go for integration testing - much faster, more robust, no port collisions - Uses gofakeit for random data (db, user, password) generation in integration tests - Adds connection timeouts - Use Microsoft's driver for MSSQL * go mod tidy
2024-02-28 16:51:37 +00:00
github.com/power-devops/perfstat v0.0.0-20210106213030-5aafc221ea8c // indirect
fix(deps): update module github.com/prometheus/client_golang to v1.20.1 (#3236) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-20 15:59:15 +00:00
github.com/prometheus/client_model v0.6.1 // indirect
github.com/prometheus/common v0.55.0 // indirect
github.com/prometheus/procfs v0.15.1 // indirect
fix(deps): update module github.com/charmbracelet/lipgloss to v0.10.0 (#2542) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-03-07 22:36:28 +00:00
github.com/rivo/uniseg v0.4.7 // indirect
fix(deps): update module github.com/charmbracelet/bubbles to v0.18.0 (#2296) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-11 20:24:23 +00:00
github.com/sahilm/fuzzy v0.1.1-0.20230530133925-c48e322e2a8f // indirect
Analyze (#3099) * Add POC analyze sub-command * Address lint errors * [chore] Embed scopes at compile time * [chore] Move subcommand check up to prevent printing metrics * added http logging to most analyzers * Use custom RoundTripper with default http.Client * Create framework of interfaces, structs, and protos * Merge main * Add AnalysisInfo to detectors.Result * Hide analyze subcommand * Update gen_proto.sh * Update protos * Make protos * Update analyzer data types * Rename argument to credentialInfo --------- Co-authored-by: Joe Leon <joe.leon@trufflesec.com>
2024-07-25 19:06:05 +00:00
github.com/sendgrid/rest v2.6.9+incompatible // indirect
JDBC test and parsing improvements (#2516) * JDBC test and parsing improvements - Uses net/url for more robust URI parsing - Supports common JDBC formats for MySQL - Supports URI format for MSSQL - Uses allowlist for params across all drivers - Uses testcontainers-go for integration testing - much faster, more robust, no port collisions - Uses gofakeit for random data (db, user, password) generation in integration tests - Adds connection timeouts - Use Microsoft's driver for MSSQL * go mod tidy
2024-02-28 16:51:37 +00:00
github.com/shirou/gopsutil/v3 v3.23.12 // indirect
github.com/shoenig/go-m1cpu v0.1.6 // indirect
github.com/sirupsen/logrus v1.9.3 // indirect
fix(deps): update module github.com/go-git/go-git/v5 to v5.12.0 (#2649) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-03-31 18:01:16 +00:00
github.com/skeema/knownhosts v1.2.2 // indirect
pin archiver dependency (#2958)
2024-06-11 17:18:52 +00:00
github.com/sorairolake/lzip-go v0.3.1 // indirect
[feat] - Introduce `channelmetrics` Package for Channel Metrics Collection (#2889) * Add pkg for channel metrics * Use map for different channel metrics * go mod tidy * use CacnellableWrite
2024-06-05 19:00:48 +00:00
github.com/stretchr/objx v0.5.2 // indirect
fix(deps): update module github.com/wasilibs/go-re2 to v1.7.0 (#3317) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-23 16:29:31 +00:00
github.com/tetratelabs/wazero v1.8.0 // indirect
Archive decoder (#683) * Archive decoder * Fix reader handling * Seek error handling * Add tests * Fix extra empty chunk * Sync chunk size
2022-08-03 03:36:21 +00:00
github.com/therootcompany/xz v1.0.1 // indirect
JDBC test and parsing improvements (#2516) * JDBC test and parsing improvements - Uses net/url for more robust URI parsing - Supports common JDBC formats for MySQL - Supports URI format for MSSQL - Uses allowlist for params across all drivers - Uses testcontainers-go for integration testing - much faster, more robust, no port collisions - Uses gofakeit for random data (db, user, password) generation in integration tests - Adds connection timeouts - Use Microsoft's driver for MSSQL * go mod tidy
2024-02-28 16:51:37 +00:00
github.com/tklauser/go-sysconf v0.3.12 // indirect
github.com/tklauser/numcpus v0.6.1 // indirect
fix(deps): update module github.com/sassoftware/go-rpmutils to v0.4.0 (#2831) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-05-11 14:18:13 +00:00
github.com/ulikunitz/xz v0.5.12 // indirect
🎉 Add Docker image scanning 🎉 (#1412) * Add Docker source * Add metrics * Add test * Add debugging, address PR comments, fix path output * review suggestions
2023-06-22 15:02:25 +00:00
github.com/vbatts/tar-split v0.11.3 // indirect
fix(deps): update module github.com/wasilibs/go-re2 to v1.7.0 (#3317) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-23 16:29:31 +00:00
github.com/wasilibs/wazero-helpers v0.0.0-20240620070341-3dff1577cd52 // indirect
Bump github.com/go-git/go-git/v5 from 5.4.2 to 5.5.1 (#972) Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.4.2 to 5.5.1. - [Release notes](https://github.com/go-git/go-git/releases) - [Commits](https://github.com/go-git/go-git/compare/v5.4.2...v5.5.1) --- updated-dependencies: - dependency-name: github.com/go-git/go-git/v5 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-12 23:56:26 +00:00
github.com/xanzy/ssh-agent v0.3.3 // indirect
Add support for MongoDB detector. (#793) * Add support for MongoDB detector. * Remove extra line. * Remove unused arg. * Add context around found secret test. * Remove unused arg.
2022-09-15 12:47:09 +00:00
github.com/xdg-go/pbkdf2 v1.0.0 // indirect
Bump go.mongodb.org/mongo-driver from 1.11.6 to 1.12.0 (#1423) Bumps [go.mongodb.org/mongo-driver](https://github.com/mongodb/mongo-go-driver) from 1.11.6 to 1.12.0. - [Release notes](https://github.com/mongodb/mongo-go-driver/releases) - [Commits](https://github.com/mongodb/mongo-go-driver/compare/v1.11.6...v1.12.0) --- updated-dependencies: - dependency-name: go.mongodb.org/mongo-driver dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-26 15:27:09 +00:00
github.com/xdg-go/scram v1.1.2 // indirect
github.com/xdg-go/stringprep v1.0.4 // indirect
update kingpin import (#2053)
2023-10-30 17:58:38 +00:00
github.com/xhit/go-str2duration/v2 v2.1.0 // indirect
[refactor] - Refactor Archive Handling Logic (#2703) * Remove specialized handler and archive struct and restructure handlers pkg. * Refactor RPM archive handlers to use a library instead of shelling out * make rpm handling context aware * update test * Refactor AR/deb archive handler to use an existing library instead of shelling out * Update tests * add max size check * add filename and size to context kvp * move skip file check and is binary check before opening file * fix test * preserve existing funcitonality of not handling non-archive files in HandleFile * Adjust check for rpm/deb archive type * add additional deb mime type * update comment * Remove specialized handler and archive struct and restructure handlers pkg. * Refactor RPM archive handlers to use a library instead of shelling out * make rpm handling context aware * update test * Refactor AR/deb archive handler to use an existing library instead of shelling out * Update tests * add max size check * add filename and size to context kvp * move skip file check and is binary check before opening file * fix test * preserve existing funcitonality of not handling non-archive files in HandleFile * Adjust check for rpm/deb archive type * add additional deb mime type * update comment * go mod tidy * update go mod * go mod tidy * add comment * update max depth check to > * go mod tidy * rename * [refactor] - Refactor Archive Handling Logic - Part 4: Non-Archive Data Handling and Cleanup (#2704) * Handle non-archive data within the DefaultHandler * make structs and methods private * Remove non-archive data handling within sources * Handle non-archive data within the DefaultHandler * rebase * Remove non-archive data handling within sources * add gzip * move diskbuffered rereader setup into handler pkg * remove DiskBuffereReader creation logic within sources * move rewind closer * reduce log verbosity * make defaultBufferSize a const * use correct reader * address comments * update test * [feat] - Add Prometheus Metrics for File Handlers (#2705) * add metrics for file handling * add metrics for errors * add metrics for file handling * add metrics for errors * fix tests * add metrics for max archive depth and skipped files * update error * skip symlinks and dirs * update err * fix err assignment * add metrics for file handling * add metrics for errors * fix tests * rebase * add metrics for errors * add metrics for max archive depth and skipped files * update error * skip symlinks and dirs * update err * fix err assignment * rebase * remove * update metric to ms * update comments * address comments * reduce indentations * add metrics for archive depth * [bug] - Enhanced Archive Handling to Address Interface Constraints (#2710) * add metrics for file handling * add metrics for errors * add metrics for file handling * add metrics for errors * fix tests * add metrics for max archive depth and skipped files * update error * skip symlinks and dirs * update err * Address incompatible reader to openArchive * remove nil check * fix err assignment * wrap compReader with DiskbufferReader * add metrics for file handling * add metrics for errors * fix tests * rebase * add metrics for errors * add metrics for max archive depth and skipped files * update error * skip symlinks and dirs * update err * fix err assignment * rebase * remove * update metric to ms * update comments * address comments * reduce indentations * replace diskbuffereader with bufferedfilereader * updtes * add metric back * [bug] - Fix bug and simplify git cat-file command execution and output handling (#2719) * add metrics for file handling * add metrics for errors * add metrics for file handling * add metrics for errors * fix tests * add metrics for max archive depth and skipped files * update error * skip symlinks and dirs * update err * Address incompatible reader to openArchive * remove nil check * fix err assignment * Allow git cat-file blob to complete before trying to handle the file * wrap compReader with DiskbufferReader * Allow git cat-file blob to complete before trying to handle the file * updates * revert stuff * update test * remove * add metrics for file handling * add metrics for errors * fix tests * rebase * add metrics for errors * add metrics for max archive depth and skipped files * update error * skip symlinks and dirs * update err * fix err assignment * rebase * remove * update metric to ms * update comments * address comments * reduce indentations * inline
2024-05-10 18:36:06 +00:00
github.com/xi2/xz v0.0.0-20171230120015-48954b6210f8 // indirect
fix(deps): update module github.com/charmbracelet/bubbletea to v0.26.4 (#2885) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-05-31 14:56:33 +00:00
github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e // indirect
fix(deps): update module go.mongodb.org/mongo-driver to v1.17.0 (#3319) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-24 02:18:48 +00:00
github.com/youmark/pkcs8 v0.0.0-20240726163527-a2c0da244d78 // indirect
fix(deps): update module github.com/charmbracelet/glamour to v0.7.0 (#2627) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-03-26 21:52:28 +00:00
github.com/yuin/goldmark v1.5.4 // indirect
github.com/yuin/goldmark-emoji v1.0.2 // indirect
JDBC test and parsing improvements (#2516) * JDBC test and parsing improvements - Uses net/url for more robust URI parsing - Supports common JDBC formats for MySQL - Supports URI format for MSSQL - Uses allowlist for params across all drivers - Uses testcontainers-go for integration testing - much faster, more robust, no port collisions - Uses gofakeit for random data (db, user, password) generation in integration tests - Adds connection timeouts - Use Microsoft's driver for MSSQL * go mod tidy
2024-02-28 16:51:37 +00:00
github.com/yusufpapurcu/wmi v1.2.3 // indirect
add snowflake detector (#1653) Detect Snowflake secrets (compound URI of account, username, password) and enrich Secret Result with account and databases that the secret has access to.
2023-08-24 17:29:58 +00:00
github.com/zeebo/xxh3 v1.0.2 // indirect
Add Coinbase Wallet-as-a-Service detector (#1895) * feat(coinbase): basic Wallet-as-a-Service detector * update test --------- Co-authored-by: Dustin Decker <dustin@trufflesec.com>
2023-10-27 17:32:36 +00:00
go.einride.tech/aip v0.60.0 // indirect
Bump cloud.google.com/go/secretmanager from 1.9.0 to 1.10.0 (#1006) Bumps [cloud.google.com/go/secretmanager](https://github.com/googleapis/google-cloud-go) from 1.9.0 to 1.10.0. - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md) - [Commits](https://github.com/googleapis/google-cloud-go/compare/dlp/v1.9.0...asset/v1.10.0) --- updated-dependencies: - dependency-name: cloud.google.com/go/secretmanager dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-09 17:29:26 +00:00
go.opencensus.io v0.24.0 // indirect
fix(deps): update module cloud.google.com/go/secretmanager to v1.14.1 (#3301) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-17 15:52:00 +00:00
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.54.0 // indirect
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.54.0 // indirect
go.opentelemetry.io/otel v1.29.0 // indirect
go.opentelemetry.io/otel/metric v1.29.0 // indirect
go.opentelemetry.io/otel/trace v1.29.0 // indirect
fix(deps): update module github.com/couchbase/gocb/v2 to v2.7.0 (#2153) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-12-02 17:16:24 +00:00
go.uber.org/multierr v1.11.0 // indirect
pin archiver dependency (#2958)
2024-06-11 17:18:52 +00:00
go4.org v0.0.0-20230225012048-214862532bf5 // indirect
fix(deps): update golang.org/x/exp digest to 701f63a (#3291) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-15 19:00:03 +00:00
golang.org/x/mod v0.21.0 // indirect
golang.org/x/sys v0.25.0 // indirect
golang.org/x/term v0.24.0 // indirect
fix(deps): update module cloud.google.com/go/secretmanager to v1.13.6 (#3208) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-10 16:33:28 +00:00
golang.org/x/time v0.6.0 // indirect
fix(deps): update golang.org/x/exp digest to 701f63a (#3291) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-15 19:00:03 +00:00
golang.org/x/tools v0.25.0 // indirect
fix(deps): update module cloud.google.com/go/storage to v1.37.0 (#2423) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-12 01:19:06 +00:00
golang.org/x/xerrors v0.0.0-20231012003039-104605ab7028 // indirect
fix(deps): update module cloud.google.com/go/secretmanager to v1.14.1 (#3301) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-17 15:52:00 +00:00
google.golang.org/genproto v0.0.0-20240903143218-8af14fe29dc1 // indirect
google.golang.org/genproto/googleapis/api v0.0.0-20240903143218-8af14fe29dc1 // indirect
google.golang.org/genproto/googleapis/rpc v0.0.0-20240903143218-8af14fe29dc1 // indirect
google.golang.org/grpc v1.66.0 // indirect
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
gopkg.in/warnings.v0 v0.1.2 // indirect
[refactor] - Refactor Archive Handling Logic (#2703) * Remove specialized handler and archive struct and restructure handlers pkg. * Refactor RPM archive handlers to use a library instead of shelling out * make rpm handling context aware * update test * Refactor AR/deb archive handler to use an existing library instead of shelling out * Update tests * add max size check * add filename and size to context kvp * move skip file check and is binary check before opening file * fix test * preserve existing funcitonality of not handling non-archive files in HandleFile * Adjust check for rpm/deb archive type * add additional deb mime type * update comment * Remove specialized handler and archive struct and restructure handlers pkg. * Refactor RPM archive handlers to use a library instead of shelling out * make rpm handling context aware * update test * Refactor AR/deb archive handler to use an existing library instead of shelling out * Update tests * add max size check * add filename and size to context kvp * move skip file check and is binary check before opening file * fix test * preserve existing funcitonality of not handling non-archive files in HandleFile * Adjust check for rpm/deb archive type * add additional deb mime type * update comment * go mod tidy * update go mod * go mod tidy * add comment * update max depth check to > * go mod tidy * rename * [refactor] - Refactor Archive Handling Logic - Part 4: Non-Archive Data Handling and Cleanup (#2704) * Handle non-archive data within the DefaultHandler * make structs and methods private * Remove non-archive data handling within sources * Handle non-archive data within the DefaultHandler * rebase * Remove non-archive data handling within sources * add gzip * move diskbuffered rereader setup into handler pkg * remove DiskBuffereReader creation logic within sources * move rewind closer * reduce log verbosity * make defaultBufferSize a const * use correct reader * address comments * update test * [feat] - Add Prometheus Metrics for File Handlers (#2705) * add metrics for file handling * add metrics for errors * add metrics for file handling * add metrics for errors * fix tests * add metrics for max archive depth and skipped files * update error * skip symlinks and dirs * update err * fix err assignment * add metrics for file handling * add metrics for errors * fix tests * rebase * add metrics for errors * add metrics for max archive depth and skipped files * update error * skip symlinks and dirs * update err * fix err assignment * rebase * remove * update metric to ms * update comments * address comments * reduce indentations * add metrics for archive depth * [bug] - Enhanced Archive Handling to Address Interface Constraints (#2710) * add metrics for file handling * add metrics for errors * add metrics for file handling * add metrics for errors * fix tests * add metrics for max archive depth and skipped files * update error * skip symlinks and dirs * update err * Address incompatible reader to openArchive * remove nil check * fix err assignment * wrap compReader with DiskbufferReader * add metrics for file handling * add metrics for errors * fix tests * rebase * add metrics for errors * add metrics for max archive depth and skipped files * update error * skip symlinks and dirs * update err * fix err assignment * rebase * remove * update metric to ms * update comments * address comments * reduce indentations * replace diskbuffereader with bufferedfilereader * updtes * add metric back * [bug] - Fix bug and simplify git cat-file command execution and output handling (#2719) * add metrics for file handling * add metrics for errors * add metrics for file handling * add metrics for errors * fix tests * add metrics for max archive depth and skipped files * update error * skip symlinks and dirs * update err * Address incompatible reader to openArchive * remove nil check * fix err assignment * Allow git cat-file blob to complete before trying to handle the file * wrap compReader with DiskbufferReader * Allow git cat-file blob to complete before trying to handle the file * updates * revert stuff * update test * remove * add metrics for file handling * add metrics for errors * fix tests * rebase * add metrics for errors * add metrics for max archive depth and skipped files * update error * skip symlinks and dirs * update err * fix err assignment * rebase * remove * update metric to ms * update comments * address comments * reduce indentations * inline
2024-05-10 18:36:06 +00:00
pault.ag/go/topsort v0.1.1 // indirect
Initial CLI w/ partially implemented Git source and demo detector (#1)
2022-01-13 20:02:24 +00:00
)
Reference in a new issue Copy permalink