Scan GitHub issue & pr titles

[rgmz]

Description:

This change appends issue and pr titles to the scan data for --issue-comments and --pr-comments respectively. People apparently share secrets in titles, for instance: https://github.com/coinbase/waas-client-library-go /issues/52 (intentional space to avoid linking).

It would be ideal to write test cases for this, however, off the top of my head I'm not sure the best way to test chunkIssues and chunkPullRequests. Unit tests would seemingly require either mocking s.visibilityOf() or rewriting the code.

trufflehog/pkg/sources/github/github.go

Lines 1313 to 1335 in 6ea3a7d

	func (s *Source) chunkIssues(ctx context.Context, repo, repoPath string, issues []*github.Issue, chunksChan chan *sources.Chunk) error {
	for _, issue := range issues {
	// Skip pull requests since covered by processPRs.
	if issue.IsPullRequest() {
	continue
	}
	// Create chunk and send it to the channel.
	chunk := &sources.Chunk{
	SourceName: s.name,
	SourceID: s.SourceID(),
	JobID: s.JobID(),
	SourceType: s.Type(),
	SourceMetadata: &source_metadatapb.MetaData{
	Data: &source_metadatapb.MetaData_Github{
	Github: &source_metadatapb.Github{
	Link: sanitizer.UTF8(issue.GetHTMLURL()),
	Username: sanitizer.UTF8(issue.GetUser().GetLogin()),
	Email: sanitizer.UTF8(issue.GetUser().GetEmail()),
	Repository: sanitizer.UTF8(repo),
	Timestamp: sanitizer.UTF8(issue.GetCreatedAt().String()),
	Visibility: s.visibilityOf(ctx, repoPath),

Checklist:

• Tests passing (make test-community)?
• Lint passing (make lint this requires golangci-lint)?

[ahrav]

This makes sense to me. Goes to show, secrets literally are everywhere 😅 Thanks for the addition.

[rgmz]

It occurs to me that it might be better to separate them with a newline, in case any patterns rely on word boundaries.