-
Notifications
You must be signed in to change notification settings - Fork 1.7k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[not-fixup] - Reduce memory consumption for Buffered File Writer #2377
Conversation
func (bp *bufferPool) growBufferWithSize(buf *bytes.Buffer, size int) { | ||
// Grow the buffer to accommodate the new data. | ||
buf.Grow(size) | ||
} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Why is this a bufferPool
method? The receiver's not involved and I can't think of a reason it needs to be.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I have a following PR that adds some metrics to this method, so I figured by adding it as a method made sense:
Ex;
func (bp *bufferPool) growBufferWithSize(buf *bufferWrapper, size int) {
// Grow the buffer to accommodate the new data.
bp.metrics.recordGrowth(size)
buf.Grow(size)
}
Maybe it's not worth it since it's confusing and i'll handle the metrics recording inline.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think that makes sense, however, from the POV of treating a PR as an individual change, I agree that it should be inlined here, and the followup PR can break it out into a helper function/method if needed.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
done.
"available_space", availableSpace, | ||
"grow_size", growSize, | ||
) | ||
w.bufPool.growBufferWithSize(w.buf, growSize) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I understand that the purpose of this change is to save memory, but it's doing so by losing the guaranteed (amortized) O(1) write time. This is probably fine (since it's all "constant" anyway, given our hard threshold) but I think it would be good to explicitly acknowledge it in a comment somewhere so that some future maintainer doesn't see it and get concerned.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Could you elaborate a bit more on this? My understanding was that without this growth the underlying buffer was going to have to be grown anyways. The only difference being we are controlling the growth instead of doubling the growth by default. If we don't grow the buffer here, the default behavior would be w.Write would allocate a new buffer with twice the cap and copy the current contents into the new buffer.
I might be missing something that feels important in your comment.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
nvm i ripped it out.
// Type returns the detector type of the key. | ||
func (k DetectorKey) Type() detectorspb.DetectorType { return k.detectorType } | ||
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
These detector changes seem irrelevant to this PR - is this other work leaking in?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
forgot to rebase
func (bp *bufferPool) growBufferWithSize(buf *bytes.Buffer, size int) { | ||
// Grow the buffer to accommodate the new data. | ||
buf.Grow(size) | ||
} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think that makes sense, however, from the POV of treating a PR as an individual change, I agree that it should be inlined here, and the followup PR can break it out into a helper function/method if needed.
availableSpace := w.buf.Cap() - bufferLength | ||
growSize := int(totalSizeNeeded) - bufferLength |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
totalSizeNeeded
is bufferLength + len(data)
, so is growSize
equivalent to len(data)
?
That seems wrong, or I'm misunderstanding what growSize
means.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
No, the growSize
is the length of the current buffer + the amount of data needed to be written to the buffer. It's the size the buffer needs to be to handle all the existing data and any new data. If you call Grow
with a size that is less than less than the remainder of the buffer nothing happens. This is why you can't do something linke totalSizeNeeded - w.buf.Cap()
you need to use the length for it to grow correctly.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I had to read this part like four times as well. I was going to complain until I noticed that that the old code was equally confusing so I decided to just blame the buffer interface.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yea I am ashamed to say I spent WAY too long trying to fully grok the buffer interface... there are definitely some gotchas that took me way way too long to comprehend. 😞
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Don't be ashamed! Intuitive API design is difficult and sometimes impossible. Some stuff is just hard to understand.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Is this change now just ensuring that all buffers are at a particular minimum size?
// Read the file contents into the buffer. | ||
if _, err := io.Copy(buf, file); err != nil { | ||
if _, err := io.CopyBuffer(&buf, file, nil); err != nil { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
What's the effect of this change?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Should be identical exepct we use CopyBuffer
elsewhere in the codebase so I was trying to be consistent.
// CopyBuffer is identical to Copy except that it stages through the
// provided buffer (if one is required) rather than allocating a
// temporary on
Correct, an few optimizations around copying buffers. |
@@ -449,7 +449,6 @@ func (c *Parser) FromReader(ctx context.Context, stdOut io.Reader, commitChan ch | |||
} | |||
// Create a new currentDiff and currentCommit | |||
currentDiff = diff() | |||
// currentDiff = NewDiff(withCustomContentWriter(c.contentWriter())) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Small cleanup here.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
What are the optimizations around copying buffers? I can see the one where we drop large buffers upon return instead of reusing them, but are there others?
ah, just the use of |
[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [trufflesecurity/trufflehog](https://togithub.com/trufflesecurity/trufflehog) | action | minor | `v3.63.5` -> `v3.67.5` | --- ### Release Notes <details> <summary>trufflesecurity/trufflehog (trufflesecurity/trufflehog)</summary> ### [`v3.67.5`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.67.5) [Compare Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.67.4...v3.67.5) #### What's Changed - Fix handling of GitHub ratelimit information by [@​rgmz](https://togithub.com/rgmz) in [https://github.com/trufflesecurity/trufflehog/pull/2041](https://togithub.com/trufflesecurity/trufflehog/pull/2041) - Set GHA workdir by [@​zricethezav](https://togithub.com/zricethezav) in [https://github.com/trufflesecurity/trufflehog/pull/2393](https://togithub.com/trufflesecurity/trufflehog/pull/2393) - Allow CLI version pinning in GHA ([#​2397](https://togithub.com/trufflesecurity/trufflehog/issues/2397)) by [@​skeweredlogic](https://togithub.com/skeweredlogic) in [https://github.com/trufflesecurity/trufflehog/pull/2398](https://togithub.com/trufflesecurity/trufflehog/pull/2398) - \[bug] - prevent concurrent map writes by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2399](https://togithub.com/trufflesecurity/trufflehog/pull/2399) - Allow multiple domains for Forager by [@​dustin-decker](https://togithub.com/dustin-decker) in [https://github.com/trufflesecurity/trufflehog/pull/2400](https://togithub.com/trufflesecurity/trufflehog/pull/2400) - Update GitParse to handle quoted binary filenames by [@​rgmz](https://togithub.com/rgmz) in [https://github.com/trufflesecurity/trufflehog/pull/2391](https://togithub.com/trufflesecurity/trufflehog/pull/2391) - \[feat] - buffered file writer metrics by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2395](https://togithub.com/trufflesecurity/trufflehog/pull/2395) #### New Contributors - [@​skeweredlogic](https://togithub.com/skeweredlogic) made their first contribution in [https://github.com/trufflesecurity/trufflehog/pull/2398](https://togithub.com/trufflesecurity/trufflehog/pull/2398) **Full Changelog**: trufflesecurity/trufflehog@v3.67.4...v3.67.5 ### [`v3.67.4`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.67.4) [Compare Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.67.3...v3.67.4) #### What's Changed - \[feat] - use diff chan by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2387](https://togithub.com/trufflesecurity/trufflehog/pull/2387) **Full Changelog**: trufflesecurity/trufflehog@v3.67.3...v3.67.4 ### [`v3.67.3`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.67.3) [Compare Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.67.2...v3.67.3) #### What's Changed - Disable GitHub wiki scanning by default by [@​rosecodym](https://togithub.com/rosecodym) in [https://github.com/trufflesecurity/trufflehog/pull/2386](https://togithub.com/trufflesecurity/trufflehog/pull/2386) - Fix binary file hanging bug in git sources by [@​mcastorina](https://togithub.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/2388](https://togithub.com/trufflesecurity/trufflehog/pull/2388) - tightening opsgenie detection and verification by [@​dylanTruffle](https://togithub.com/dylanTruffle) in [https://github.com/trufflesecurity/trufflehog/pull/2389](https://togithub.com/trufflesecurity/trufflehog/pull/2389) - Make `SkipFile` case-insensitive by [@​rgmz](https://togithub.com/rgmz) in [https://github.com/trufflesecurity/trufflehog/pull/2383](https://togithub.com/trufflesecurity/trufflehog/pull/2383) - \[not-fixup] - Reduce memory consumption for Buffered File Writer by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2377](https://togithub.com/trufflesecurity/trufflehog/pull/2377) **Full Changelog**: trufflesecurity/trufflehog@v3.67.2...v3.67.3 ### [`v3.67.2`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.67.2) [Compare Source](https://togithub.com/trufflesecurity/trufflehog/compare/3.67.1...v3.67.2) #### What's Changed - \[bug] - unhashable map key by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2374](https://togithub.com/trufflesecurity/trufflehog/pull/2374) - custom detector docs improvement by [@​dxa4481](https://togithub.com/dxa4481) in [https://github.com/trufflesecurity/trufflehog/pull/2376](https://togithub.com/trufflesecurity/trufflehog/pull/2376) - \[fixup] - correctly use the buffered file writer by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2373](https://togithub.com/trufflesecurity/trufflehog/pull/2373) **Full Changelog**: trufflesecurity/trufflehog@v3.67.1...v3.67.2 ### [`v3.67.1`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.67.1) [Compare Source](https://togithub.com/trufflesecurity/trufflehog/compare/3.67.1...3.67.1) #### What's Changed - \[chore] Cleanup GitLab source errors by [@​mcastorina](https://togithub.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/2345](https://togithub.com/trufflesecurity/trufflehog/pull/2345) - \[feat] - concurently scan the filesystem source by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2364](https://togithub.com/trufflesecurity/trufflehog/pull/2364) **Full Changelog**: trufflesecurity/trufflehog@3.67.1...v3.67.1 ### [`v3.67.1`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.67.1) [Compare Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.67.0...3.67.1) ##### What's Changed - \[chore] Cleanup GitLab source errors by [@​mcastorina](https://togithub.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/2345](https://togithub.com/trufflesecurity/trufflehog/pull/2345) - \[feat] - concurently scan the filesystem source by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2364](https://togithub.com/trufflesecurity/trufflehog/pull/2364) **Full Changelog**: trufflesecurity/trufflehog@3.67.1...v3.67.1 ### [`v3.67.0`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.67.0) [Compare Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.66.3...v3.67.0) #### What's Changed - Make AzureDevopsPersonalAccessToken verification more robust by [@​dustin-decker](https://togithub.com/dustin-decker) in [https://github.com/trufflesecurity/trufflehog/pull/2359](https://togithub.com/trufflesecurity/trufflehog/pull/2359) - Polite Verification by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2356](https://togithub.com/trufflesecurity/trufflehog/pull/2356) **Full Changelog**: trufflesecurity/trufflehog@v3.66.3...v3.67.0 ### [`v3.66.3`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.66.3) [Compare Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.66.2...v3.66.3) #### What's Changed - Allow for configuring the buffered file writer by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2319](https://togithub.com/trufflesecurity/trufflehog/pull/2319) - added flyio protos by [@​lonmarsDev](https://togithub.com/lonmarsDev) in [https://github.com/trufflesecurity/trufflehog/pull/2357](https://togithub.com/trufflesecurity/trufflehog/pull/2357) - Scan GitHub wikis by [@​rgmz](https://togithub.com/rgmz) in [https://github.com/trufflesecurity/trufflehog/pull/2233](https://togithub.com/trufflesecurity/trufflehog/pull/2233) - \[chore] Add filesystem integration test by [@​mcastorina](https://togithub.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/2358](https://togithub.com/trufflesecurity/trufflehog/pull/2358) - update azure test files to check rawV2 by [@​roxanne-tampus](https://togithub.com/roxanne-tampus) in [https://github.com/trufflesecurity/trufflehog/pull/2353](https://togithub.com/trufflesecurity/trufflehog/pull/2353) - \[bug] fix script change by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2360](https://togithub.com/trufflesecurity/trufflehog/pull/2360) **Full Changelog**: trufflesecurity/trufflehog@v3.66.2...v3.66.3 ### [`v3.66.2`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.66.2) [Compare Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.66.1...v3.66.2) #### What's Changed - Update the template detector by [@​rgmz](https://togithub.com/rgmz) in [https://github.com/trufflesecurity/trufflehog/pull/2342](https://togithub.com/trufflesecurity/trufflehog/pull/2342) - Detectors Updates 1 for Tristate Verification by [@​0x1](https://togithub.com/0x1) in [https://github.com/trufflesecurity/trufflehog/pull/2187](https://togithub.com/trufflesecurity/trufflehog/pull/2187) - Fix filesystem enumeration ignore paths bug by [@​mcastorina](https://togithub.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/2355](https://togithub.com/trufflesecurity/trufflehog/pull/2355) - \[feat] - tmp file diffs by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2306](https://togithub.com/trufflesecurity/trufflehog/pull/2306) **Full Changelog**: trufflesecurity/trufflehog@v3.66.1...v3.66.2 ### [`v3.66.1`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.66.1) [Compare Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.66.0...v3.66.1) #### What's Changed - Azure function key is throwing FPs by [@​dustin-decker](https://togithub.com/dustin-decker) in [https://github.com/trufflesecurity/trufflehog/pull/2352](https://togithub.com/trufflesecurity/trufflehog/pull/2352) **Full Changelog**: trufflesecurity/trufflehog@v3.66.0...v3.66.1 ### [`v3.66.0`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.66.0) [Compare Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.65.0...v3.66.0) #### What's Changed - \[chore] - make sure to close connections after testing by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2343](https://togithub.com/trufflesecurity/trufflehog/pull/2343) - Prevent print or logging in detectors by [@​dustin-decker](https://togithub.com/dustin-decker) in [https://github.com/trufflesecurity/trufflehog/pull/2341](https://togithub.com/trufflesecurity/trufflehog/pull/2341) - Add the new MaxMind license key format by [@​faktas2](https://togithub.com/faktas2) in [https://github.com/trufflesecurity/trufflehog/pull/2181](https://togithub.com/trufflesecurity/trufflehog/pull/2181) - updates to plain and json printing to include verification error by [@​0x1](https://togithub.com/0x1) in [https://github.com/trufflesecurity/trufflehog/pull/2335](https://togithub.com/trufflesecurity/trufflehog/pull/2335) - added azurefunctionkey detector by [@​roxanne-tampus](https://togithub.com/roxanne-tampus) in [https://github.com/trufflesecurity/trufflehog/pull/2337](https://togithub.com/trufflesecurity/trufflehog/pull/2337) - added azuresearchadminkey detector by [@​roxanne-tampus](https://togithub.com/roxanne-tampus) in [https://github.com/trufflesecurity/trufflehog/pull/2348](https://togithub.com/trufflesecurity/trufflehog/pull/2348) - added azuresearchquerykey detector by [@​roxanne-tampus](https://togithub.com/roxanne-tampus) in [https://github.com/trufflesecurity/trufflehog/pull/2349](https://togithub.com/trufflesecurity/trufflehog/pull/2349) - Improve fp ignore logic by [@​dustin-decker](https://togithub.com/dustin-decker) in [https://github.com/trufflesecurity/trufflehog/pull/2351](https://togithub.com/trufflesecurity/trufflehog/pull/2351) #### New Contributors - [@​faktas2](https://togithub.com/faktas2) made their first contribution in [https://github.com/trufflesecurity/trufflehog/pull/2181](https://togithub.com/trufflesecurity/trufflehog/pull/2181) **Full Changelog**: trufflesecurity/trufflehog@v3.65.0...v3.66.0 ### [`v3.65.0`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.65.0) [Compare Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.64.0...v3.65.0) #### What's Changed - Walk directories in filesystem source enumeration by [@​mcastorina](https://togithub.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/2313](https://togithub.com/trufflesecurity/trufflehog/pull/2313) - added azuredevopspersonalaccesstoken detector by [@​roxanne-tampus](https://togithub.com/roxanne-tampus) in [https://github.com/trufflesecurity/trufflehog/pull/2315](https://togithub.com/trufflesecurity/trufflehog/pull/2315) - updating doppler logic by [@​joeleonjr](https://togithub.com/joeleonjr) in [https://github.com/trufflesecurity/trufflehog/pull/2329](https://togithub.com/trufflesecurity/trufflehog/pull/2329) - add priority semaphore to source manager by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2336](https://togithub.com/trufflesecurity/trufflehog/pull/2336) - Add Google oauth2 token detector by [@​rgmz](https://togithub.com/rgmz) in [https://github.com/trufflesecurity/trufflehog/pull/2274](https://togithub.com/trufflesecurity/trufflehog/pull/2274) - Update DockerHub detector logic by [@​rgmz](https://togithub.com/rgmz) in [https://github.com/trufflesecurity/trufflehog/pull/2266](https://togithub.com/trufflesecurity/trufflehog/pull/2266) - Improve GitHub scan logging by [@​rgmz](https://togithub.com/rgmz) in [https://github.com/trufflesecurity/trufflehog/pull/2220](https://togithub.com/trufflesecurity/trufflehog/pull/2220) - add tri-state verification to yelp by [@​zubairk14](https://togithub.com/zubairk14) in [https://github.com/trufflesecurity/trufflehog/pull/1736](https://togithub.com/trufflesecurity/trufflehog/pull/1736) - Fix broken test by [@​dustin-decker](https://togithub.com/dustin-decker) in [https://github.com/trufflesecurity/trufflehog/pull/2339](https://togithub.com/trufflesecurity/trufflehog/pull/2339) **Full Changelog**: trufflesecurity/trufflehog@v3.64.0...v3.65.0 ### [`v3.64.0`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.64.0) [Compare Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.63.11...v3.64.0) #### What's Changed - Add prometheus metrics to measure hook execution time by [@​mcastorina](https://togithub.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/2312](https://togithub.com/trufflesecurity/trufflehog/pull/2312) - updating detector logic for zenscrape by [@​joeleonjr](https://togithub.com/joeleonjr) in [https://github.com/trufflesecurity/trufflehog/pull/2316](https://togithub.com/trufflesecurity/trufflehog/pull/2316) - fix for incorrect AWS account number identification by [@​joeleonjr](https://togithub.com/joeleonjr) in [https://github.com/trufflesecurity/trufflehog/pull/2332](https://togithub.com/trufflesecurity/trufflehog/pull/2332) - Narrow Postgres detector to only look for URIs by [@​rosecodym](https://togithub.com/rosecodym) in [https://github.com/trufflesecurity/trufflehog/pull/2314](https://togithub.com/trufflesecurity/trufflehog/pull/2314) - Update Gitlab repo count in tests by [@​rosecodym](https://togithub.com/rosecodym) in [https://github.com/trufflesecurity/trufflehog/pull/2333](https://togithub.com/trufflesecurity/trufflehog/pull/2333) - \[feat] - Replace regexp pkg w/ go-re2 in detectors by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2324](https://togithub.com/trufflesecurity/trufflehog/pull/2324) **Full Changelog**: trufflesecurity/trufflehog@v3.63.11...v3.64.0 ### [`v3.63.11`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.63.11) [Compare Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.63.10...v3.63.11) #### What's Changed - \[fixup] - save 8 bytes per chunk by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2310](https://togithub.com/trufflesecurity/trufflehog/pull/2310) - fix(deps): update module github.com/hashicorp/golang-lru to v2 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2054](https://togithub.com/trufflesecurity/trufflehog/pull/2054) - \[chore] - Update Chunk struct comment by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2317](https://togithub.com/trufflesecurity/trufflehog/pull/2317) - fix(deps): update golang.org/x/exp digest to [`1b97071`](https://togithub.com/trufflesecurity/trufflehog/commit/1b97071) by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2318](https://togithub.com/trufflesecurity/trufflehog/pull/2318) - fix(deps): update module github.com/couchbase/gocb/v2 to v2.7.1 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2320](https://togithub.com/trufflesecurity/trufflehog/pull/2320) - fix(deps): update module github.com/envoyproxy/protoc-gen-validate to v1.0.4 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2322](https://togithub.com/trufflesecurity/trufflehog/pull/2322) - fix(deps): update module github.com/aws/aws-sdk-go to v1.50.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2325](https://togithub.com/trufflesecurity/trufflehog/pull/2325) - \[chore] - reduce test time by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2321](https://togithub.com/trufflesecurity/trufflehog/pull/2321) **Full Changelog**: trufflesecurity/trufflehog@v3.63.10...v3.63.11 ### [`v3.63.10`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.63.10) [Compare Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.63.9...v3.63.10) #### What's Changed - added azure protos by [@​roxanne-tampus](https://togithub.com/roxanne-tampus) in [https://github.com/trufflesecurity/trufflehog/pull/2304](https://togithub.com/trufflesecurity/trufflehog/pull/2304) - \[fixup ] - Allow ssh cloning with AWS Code Commit by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2307](https://togithub.com/trufflesecurity/trufflehog/pull/2307) - Assume unauthenticated github scans have public visibility by [@​mcastorina](https://togithub.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/2308](https://togithub.com/trufflesecurity/trufflehog/pull/2308) - \[chore] - Add regex and keyword for api_org tokens by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2240](https://togithub.com/trufflesecurity/trufflehog/pull/2240) **Full Changelog**: trufflesecurity/trufflehog@v3.63.9...v3.63.10 ### [`v3.63.9`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.63.9) [Compare Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.63.8...v3.63.9) #### What's Changed - \[chore] - update docs for pre-commit by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2280](https://togithub.com/trufflesecurity/trufflehog/pull/2280) - Ignore common false positives for Parseur Detector by [@​rgmz](https://togithub.com/rgmz) in [https://github.com/trufflesecurity/trufflehog/pull/2229](https://togithub.com/trufflesecurity/trufflehog/pull/2229) - Ignore common Signable false positives by [@​rgmz](https://togithub.com/rgmz) in [https://github.com/trufflesecurity/trufflehog/pull/2230](https://togithub.com/trufflesecurity/trufflehog/pull/2230) - fix(deps): update golang.org/x/exp digest to [`be819d1`](https://togithub.com/trufflesecurity/trufflehog/commit/be819d1) by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2281](https://togithub.com/trufflesecurity/trufflehog/pull/2281) - \[chore] - update test by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2283](https://togithub.com/trufflesecurity/trufflehog/pull/2283) - adding postgres detector by [@​dylanTruffle](https://togithub.com/dylanTruffle) in [https://github.com/trufflesecurity/trufflehog/pull/2108](https://togithub.com/trufflesecurity/trufflehog/pull/2108) - fix(deps): update module github.com/azuread/microsoft-authentication-library-for-go to v1.2.1 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2282](https://togithub.com/trufflesecurity/trufflehog/pull/2282) - fix(deps): update golang.org/x/exp digest to [`0dcbfd6`](https://togithub.com/trufflesecurity/trufflehog/commit/0dcbfd6) by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2284](https://togithub.com/trufflesecurity/trufflehog/pull/2284) - fix(deps): update module github.com/gabriel-vasile/mimetype to v1.4.3 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2285](https://togithub.com/trufflesecurity/trufflehog/pull/2285) - Extend memory cache by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2275](https://togithub.com/trufflesecurity/trufflehog/pull/2275) - fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.19 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2286](https://togithub.com/trufflesecurity/trufflehog/pull/2286) - chore(deps): update alpine docker tag to v3.19 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2287](https://togithub.com/trufflesecurity/trufflehog/pull/2287) - chore(deps): update sigstore/cosign-installer action to v3.3.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2290](https://togithub.com/trufflesecurity/trufflehog/pull/2290) - fix(deps): update module cloud.google.com/go/storage to v1.36.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2291](https://togithub.com/trufflesecurity/trufflehog/pull/2291) - fix(deps): update module github.com/aws/aws-sdk-go to v1.49.18 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2292](https://togithub.com/trufflesecurity/trufflehog/pull/2292) - feat(installation): Implement checksum signature verification by [@​hibare](https://togithub.com/hibare) in [https://github.com/trufflesecurity/trufflehog/pull/2157](https://togithub.com/trufflesecurity/trufflehog/pull/2157) - fix(deps): update module github.com/aws/aws-sdk-go to v1.49.19 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2294](https://togithub.com/trufflesecurity/trufflehog/pull/2294) - fix(deps): update module github.com/bradleyfalzon/ghinstallation/v2 to v2.9.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2295](https://togithub.com/trufflesecurity/trufflehog/pull/2295) - \[chore] - small updates by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2288](https://togithub.com/trufflesecurity/trufflehog/pull/2288) - \[feat] - Allow for the use of include/exclude path files for filesystem scans by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2297](https://togithub.com/trufflesecurity/trufflehog/pull/2297) - Individuate archive tests by [@​rosecodym](https://togithub.com/rosecodym) in [https://github.com/trufflesecurity/trufflehog/pull/2293](https://togithub.com/trufflesecurity/trufflehog/pull/2293) - \[feat] - Provide CLI flag to only use custom verifiers by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2299](https://togithub.com/trufflesecurity/trufflehog/pull/2299) - Disable postgres detector because it it too sensitive by [@​dustin-decker](https://togithub.com/dustin-decker) in [https://github.com/trufflesecurity/trufflehog/pull/2303](https://togithub.com/trufflesecurity/trufflehog/pull/2303) **Full Changelog**: trufflesecurity/trufflehog@v3.63.8...v3.63.9 ### [`v3.63.8`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.63.8) [Compare Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.63.7...v3.63.8) #### What's Changed - Fix commit message single quote escaping on GitHub Action by [@​0x2b3bfa0](https://togithub.com/0x2b3bfa0) in [https://github.com/trufflesecurity/trufflehog/pull/2259](https://togithub.com/trufflesecurity/trufflehog/pull/2259) - fix(deps): update module github.com/go-git/go-git/v5 to v5.11.0 \[security] by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2263](https://togithub.com/trufflesecurity/trufflehog/pull/2263) - Fix non-ASCII whitespace on GitHub Action by [@​0x2b3bfa0](https://togithub.com/0x2b3bfa0) in [https://github.com/trufflesecurity/trufflehog/pull/2270](https://togithub.com/trufflesecurity/trufflehog/pull/2270) - Update GitParse logic to handle edge case. by [@​rgmz](https://togithub.com/rgmz) in [https://github.com/trufflesecurity/trufflehog/pull/2206](https://togithub.com/trufflesecurity/trufflehog/pull/2206) - \[chore] Add test to check all versioned detectors are non-zero by [@​mcastorina](https://togithub.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/2272](https://togithub.com/trufflesecurity/trufflehog/pull/2272) - Update stripe detector regex by [@​NikhilPanwar](https://togithub.com/NikhilPanwar) in [https://github.com/trufflesecurity/trufflehog/pull/2261](https://togithub.com/trufflesecurity/trufflehog/pull/2261) - Update to Sourcegraph Access token format by [@​shivasurya](https://togithub.com/shivasurya) in [https://github.com/trufflesecurity/trufflehog/pull/2254](https://togithub.com/trufflesecurity/trufflehog/pull/2254) - Bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/trufflesecurity/trufflehog/pull/2278](https://togithub.com/trufflesecurity/trufflehog/pull/2278) - Bump github.com/dvsekhvalnov/jose2go from 1.5.0 to 1.6.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/trufflesecurity/trufflehog/pull/2279](https://togithub.com/trufflesecurity/trufflehog/pull/2279) - Wrap temp deletion err by [@​rosecodym](https://togithub.com/rosecodym) in [https://github.com/trufflesecurity/trufflehog/pull/2277](https://togithub.com/trufflesecurity/trufflehog/pull/2277) - 1833 Fix syslog udp by [@​df3rry](https://togithub.com/df3rry) in [https://github.com/trufflesecurity/trufflehog/pull/1835](https://togithub.com/trufflesecurity/trufflehog/pull/1835) #### New Contributors - [@​0x2b3bfa0](https://togithub.com/0x2b3bfa0) made their first contribution in [https://github.com/trufflesecurity/trufflehog/pull/2259](https://togithub.com/trufflesecurity/trufflehog/pull/2259) - [@​NikhilPanwar](https://togithub.com/NikhilPanwar) made their first contribution in [https://github.com/trufflesecurity/trufflehog/pull/2261](https://togithub.com/trufflesecurity/trufflehog/pull/2261) - [@​df3rry](https://togithub.com/df3rry) made their first contribution in [https://github.com/trufflesecurity/trufflehog/pull/1835](https://togithub.com/trufflesecurity/trufflehog/pull/1835) **Full Changelog**: trufflesecurity/trufflehog@v3.63.7...v3.63.8 ### [`v3.63.7`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.63.7) [Compare Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.63.6...v3.63.7) #### What's Changed - Add skip archive support by [@​dustin-decker](https://togithub.com/dustin-decker) in [https://github.com/trufflesecurity/trufflehog/pull/2257](https://togithub.com/trufflesecurity/trufflehog/pull/2257) - Skip all binaries by [@​bill-rich](https://togithub.com/bill-rich) in [https://github.com/trufflesecurity/trufflehog/pull/2256](https://togithub.com/trufflesecurity/trufflehog/pull/2256) - Add handlerOpts back by [@​bill-rich](https://togithub.com/bill-rich) in [https://github.com/trufflesecurity/trufflehog/pull/2258](https://togithub.com/trufflesecurity/trufflehog/pull/2258) - Use directory iterator instead of walkdir by [@​dustin-decker](https://togithub.com/dustin-decker) in [https://github.com/trufflesecurity/trufflehog/pull/2260](https://togithub.com/trufflesecurity/trufflehog/pull/2260) **Full Changelog**: trufflesecurity/trufflehog@v3.63.6...v3.63.7 ### [`v3.63.6`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.63.6) [Compare Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.63.5...v3.63.6) #### What's Changed - Adds basic if/else check if pid slice is empty by [@​codevbus](https://togithub.com/codevbus) in [https://github.com/trufflesecurity/trufflehog/pull/2244](https://togithub.com/trufflesecurity/trufflehog/pull/2244) - \[fixup] - move cleanup to run by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2245](https://togithub.com/trufflesecurity/trufflehog/pull/2245) - shallow cloning + GitHub Action by [@​joeleonjr](https://togithub.com/joeleonjr) in [https://github.com/trufflesecurity/trufflehog/pull/2138](https://togithub.com/trufflesecurity/trufflehog/pull/2138) - Update GitHub extradata by [@​rgmz](https://togithub.com/rgmz) in [https://github.com/trufflesecurity/trufflehog/pull/2219](https://togithub.com/trufflesecurity/trufflehog/pull/2219) - Avoid extraneous authentication attempts when verifying Snowflake by [@​rgmz](https://togithub.com/rgmz) in [https://github.com/trufflesecurity/trufflehog/pull/2057](https://togithub.com/trufflesecurity/trufflehog/pull/2057) - Add missing import by [@​dustin-decker](https://togithub.com/dustin-decker) in [https://github.com/trufflesecurity/trufflehog/pull/2246](https://togithub.com/trufflesecurity/trufflehog/pull/2246) - \[bug] - Bug archive handler memory leak by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2247](https://togithub.com/trufflesecurity/trufflehog/pull/2247) - \[chore] - use snake_case for naming by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2238](https://togithub.com/trufflesecurity/trufflehog/pull/2238) - \[chore] - add additional binary extensions to skip by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2235](https://togithub.com/trufflesecurity/trufflehog/pull/2235) - \[chore] - lower logging level by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2249](https://togithub.com/trufflesecurity/trufflehog/pull/2249) - \[bug] - Fix Context Timeout-Induced Goroutine Leak in readInChunks by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2251](https://togithub.com/trufflesecurity/trufflehog/pull/2251) - Dedupe some source log keys by [@​rosecodym](https://togithub.com/rosecodym) in [https://github.com/trufflesecurity/trufflehog/pull/2250](https://togithub.com/trufflesecurity/trufflehog/pull/2250) - \[fixup] - Refactor to Pass Reader for Binary Diffs and Archived Data; Optimize /tmp Directory Cleanup by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2253](https://togithub.com/trufflesecurity/trufflehog/pull/2253) - Use walkdir for tmp cleanup by [@​dustin-decker](https://togithub.com/dustin-decker) in [https://github.com/trufflesecurity/trufflehog/pull/2255](https://togithub.com/trufflesecurity/trufflehog/pull/2255) **Full Changelog**: trufflesecurity/trufflehog@v3.63.5...v3.63.6 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/matter-labs/vault-auth-tee). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xMDMuMSIsInVwZGF0ZWRJblZlciI6IjM3LjE3My4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->
[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [trufflesecurity/trufflehog](https://togithub.com/trufflesecurity/trufflehog) | action | minor | `v3.66.1` -> `v3.72.0` | --- ### Release Notes <details> <summary>trufflesecurity/trufflehog (trufflesecurity/trufflehog)</summary> ### [`v3.72.0`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.72.0) [Compare Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.71.2...v3.72.0) #### What's Changed - fix(deps): update module github.com/aws/aws-sdk-go to v1.51.10 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2636](https://togithub.com/trufflesecurity/trufflehog/pull/2636) - Fix 'toolchair not available' error by [@​rgmz](https://togithub.com/rgmz) in [https://github.com/trufflesecurity/trufflehog/pull/2642](https://togithub.com/trufflesecurity/trufflehog/pull/2642) - Fix GitHub enumeration & rate-limiting logic by [@​rgmz](https://togithub.com/rgmz) in [https://github.com/trufflesecurity/trufflehog/pull/2625](https://togithub.com/trufflesecurity/trufflehog/pull/2625) - fix(deps): update module github.com/launchdarkly/go-server-sdk/v6 to v6.2.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2638](https://togithub.com/trufflesecurity/trufflehog/pull/2638) - fix(deps): update module cloud.google.com/go/storage to v1.40.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2645](https://togithub.com/trufflesecurity/trufflehog/pull/2645) - Add JupiterOne detector by [@​shreyas-sriram](https://togithub.com/shreyas-sriram) in [https://github.com/trufflesecurity/trufflehog/pull/2446](https://togithub.com/trufflesecurity/trufflehog/pull/2446) - fix(deps): update module github.com/aws/aws-sdk-go to v1.51.11 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2646](https://togithub.com/trufflesecurity/trufflehog/pull/2646) - fix(deps): update module github.com/thezeroslave/zapsentry to v1.22.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2648](https://togithub.com/trufflesecurity/trufflehog/pull/2648) - fix(deps): update module github.com/go-git/go-git/v5 to v5.12.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2649](https://togithub.com/trufflesecurity/trufflehog/pull/2649) - add GCP application default credentials detector by [@​kenzht](https://togithub.com/kenzht) in [https://github.com/trufflesecurity/trufflehog/pull/2530](https://togithub.com/trufflesecurity/trufflehog/pull/2530) - fix(deps): update module github.com/aws/aws-sdk-go to v1.51.12 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2651](https://togithub.com/trufflesecurity/trufflehog/pull/2651) - Add GitLab CI Pipeline Example in Documentation by [@​RoseSecurity](https://togithub.com/RoseSecurity) in [https://github.com/trufflesecurity/trufflehog/pull/2601](https://togithub.com/trufflesecurity/trufflehog/pull/2601) - fix(deps): update module github.com/thezeroslave/zapsentry to v1.22.1 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2654](https://togithub.com/trufflesecurity/trufflehog/pull/2654) - fix(deps): update module github.com/aws/aws-sdk-go to v1.51.13 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2655](https://togithub.com/trufflesecurity/trufflehog/pull/2655) - Remove duplicate JiraToken.v2 declaration in `defaults.go` by [@​rgmz](https://togithub.com/rgmz) in [https://github.com/trufflesecurity/trufflehog/pull/2657](https://togithub.com/trufflesecurity/trufflehog/pull/2657) #### New Contributors - [@​kenzht](https://togithub.com/kenzht) made their first contribution in [https://github.com/trufflesecurity/trufflehog/pull/2530](https://togithub.com/trufflesecurity/trufflehog/pull/2530) - [@​RoseSecurity](https://togithub.com/RoseSecurity) made their first contribution in [https://github.com/trufflesecurity/trufflehog/pull/2601](https://togithub.com/trufflesecurity/trufflehog/pull/2601) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.71.2...v3.72.0 ### [`v3.71.2`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.71.2) [Compare Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.71.1...v3.71.2) #### What's Changed - Link to GitHub contribution guide in CONTRIBUTING by [@​rosecodym](https://togithub.com/rosecodym) in [https://github.com/trufflesecurity/trufflehog/pull/2632](https://togithub.com/trufflesecurity/trufflehog/pull/2632) - Fixing nitro check by [@​dylanTruffle](https://togithub.com/dylanTruffle) in [https://github.com/trufflesecurity/trufflehog/pull/2631](https://togithub.com/trufflesecurity/trufflehog/pull/2631) - fix(deps): update module google.golang.org/api to v0.172.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2634](https://togithub.com/trufflesecurity/trufflehog/pull/2634) - make postman source public by [@​zricethezav](https://togithub.com/zricethezav) in [https://github.com/trufflesecurity/trufflehog/pull/2635](https://togithub.com/trufflesecurity/trufflehog/pull/2635) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.71.1...v3.71.2 ### [`v3.71.1`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.71.1) [Compare Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.71.0...v3.71.1) #### What's Changed - Fix GitHub panic and test errors by [@​rgmz](https://togithub.com/rgmz) in [https://github.com/trufflesecurity/trufflehog/pull/2608](https://togithub.com/trufflesecurity/trufflehog/pull/2608) - fix(deps): update module github.com/xanzy/go-gitlab to v0.101.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2617](https://togithub.com/trufflesecurity/trufflehog/pull/2617) - fix(deps): update module github.com/aws/aws-sdk-go to v1.51.6 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2615](https://togithub.com/trufflesecurity/trufflehog/pull/2615) - fix(deps): update module github.com/aws/aws-sdk-go to v1.51.7 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2623](https://togithub.com/trufflesecurity/trufflehog/pull/2623) - Fix additional GitHub test errors by [@​rgmz](https://togithub.com/rgmz) in [https://github.com/trufflesecurity/trufflehog/pull/2614](https://togithub.com/trufflesecurity/trufflehog/pull/2614) - \[chore] - upgrade dep by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2618](https://togithub.com/trufflesecurity/trufflehog/pull/2618) - fix(deps): update golang.org/x/exp digest to [`a685a6e`](https://togithub.com/trufflesecurity/trufflehog/commit/a685a6e) by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2621](https://togithub.com/trufflesecurity/trufflehog/pull/2621) - Fix incorrect regular expression with missing closing bracket by [@​fml09](https://togithub.com/fml09) in [https://github.com/trufflesecurity/trufflehog/pull/2616](https://togithub.com/trufflesecurity/trufflehog/pull/2616) - fix(deps): update module github.com/go-sql-driver/mysql to v1.8.1 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2626](https://togithub.com/trufflesecurity/trufflehog/pull/2626) - fix(deps): update module github.com/charmbracelet/glamour to v0.7.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2627](https://togithub.com/trufflesecurity/trufflehog/pull/2627) - \[bugfix] - Update the Anthropic detector by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2629](https://togithub.com/trufflesecurity/trufflehog/pull/2629) - fix(deps): update module github.com/aws/aws-sdk-go to v1.51.8 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2630](https://togithub.com/trufflesecurity/trufflehog/pull/2630) - Use Lstat to identify non-regular files in filesystem source by [@​dustin-decker](https://togithub.com/dustin-decker) in [https://github.com/trufflesecurity/trufflehog/pull/2628](https://togithub.com/trufflesecurity/trufflehog/pull/2628) #### New Contributors - [@​fml09](https://togithub.com/fml09) made their first contribution in [https://github.com/trufflesecurity/trufflehog/pull/2616](https://togithub.com/trufflesecurity/trufflehog/pull/2616) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.71.0...v3.71.1 ### [`v3.71.0`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.71.0) [Compare Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.70.3...v3.71.0) #### What's Changed - Postman Source by [@​zricethezav](https://togithub.com/zricethezav) in [https://github.com/trufflesecurity/trufflehog/pull/2579](https://togithub.com/trufflesecurity/trufflehog/pull/2579) - fix(deps): update module github.com/aws/aws-sdk-go to v1.51.4 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2604](https://togithub.com/trufflesecurity/trufflehog/pull/2604) - expand keyword checks, and add collection name to keyword by [@​zricethezav](https://togithub.com/zricethezav) in [https://github.com/trufflesecurity/trufflehog/pull/2602](https://togithub.com/trufflesecurity/trufflehog/pull/2602) - \[chore] Fix potential resource leak in postman source by [@​mcastorina](https://togithub.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/2606](https://togithub.com/trufflesecurity/trufflehog/pull/2606) - Bump github.com/docker/docker from 25.0.3+incompatible to 25.0.5+incompatible by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/trufflesecurity/trufflehog/pull/2603](https://togithub.com/trufflesecurity/trufflehog/pull/2603) - Refactor GitHub source by [@​rgmz](https://togithub.com/rgmz) in [https://github.com/trufflesecurity/trufflehog/pull/2379](https://togithub.com/trufflesecurity/trufflehog/pull/2379) - Use go 1.22 by [@​dustin-decker](https://togithub.com/dustin-decker) in [https://github.com/trufflesecurity/trufflehog/pull/2599](https://togithub.com/trufflesecurity/trufflehog/pull/2599) - fix(deps): update module github.com/launchdarkly/go-server-sdk/v6 to v7 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2590](https://togithub.com/trufflesecurity/trufflehog/pull/2590) - fix(deps): update module github.com/brianvoe/gofakeit/v6 to v7 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2524](https://togithub.com/trufflesecurity/trufflehog/pull/2524) - fix(deps): update module google.golang.org/api to v0.171.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2611](https://togithub.com/trufflesecurity/trufflehog/pull/2611) - fix(deps): update module github.com/bradleyfalzon/ghinstallation/v2 to v2.10.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2607](https://togithub.com/trufflesecurity/trufflehog/pull/2607) - Avoid uneeded calls to strconv.Unquote by [@​rgmz](https://togithub.com/rgmz) in [https://github.com/trufflesecurity/trufflehog/pull/2605](https://togithub.com/trufflesecurity/trufflehog/pull/2605) - MaxMind detector uses the right endpoint by [@​faktas2](https://togithub.com/faktas2) in [https://github.com/trufflesecurity/trufflehog/pull/2577](https://togithub.com/trufflesecurity/trufflehog/pull/2577) - Update Snyk detector by [@​rgmz](https://togithub.com/rgmz) in [https://github.com/trufflesecurity/trufflehog/pull/2559](https://togithub.com/trufflesecurity/trufflehog/pull/2559) - fix(deps): update module github.com/brianvoe/gofakeit/v6 to v7 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2612](https://togithub.com/trufflesecurity/trufflehog/pull/2612) - Dockerhub v2 detector by [@​ankushgoel27](https://togithub.com/ankushgoel27) in [https://github.com/trufflesecurity/trufflehog/pull/2361](https://togithub.com/trufflesecurity/trufflehog/pull/2361) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.70.3...v3.71.0 ### [`v3.70.3`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.70.3) [Compare Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.70.2...v3.70.3) #### What's Changed - \[chore] Replace "Trufflehog" with "TruffleHog" by [@​mcastorina](https://togithub.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/2584](https://togithub.com/trufflesecurity/trufflehog/pull/2584) - fix(deps): update golang.org/x/exp digest to [`a85f2c6`](https://togithub.com/trufflesecurity/trufflehog/commit/a85f2c6) by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2592](https://togithub.com/trufflesecurity/trufflehog/pull/2592) - fix(deps): update module github.com/aws/aws-sdk-go to v1.51.2 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2593](https://togithub.com/trufflesecurity/trufflehog/pull/2593) - Make Git work with escaped unicode characcters by [@​rgmz](https://togithub.com/rgmz) in [https://github.com/trufflesecurity/trufflehog/pull/2585](https://togithub.com/trufflesecurity/trufflehog/pull/2585) - fix(deps): update module github.com/aws/aws-sdk-go to v1.51.3 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2594](https://togithub.com/trufflesecurity/trufflehog/pull/2594) - fix(deps): update module cloud.google.com/go/secretmanager to v1.12.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2595](https://togithub.com/trufflesecurity/trufflehog/pull/2595) - fix(deps): update module github.com/wasilibs/go-re2 to v1.5.1 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2596](https://togithub.com/trufflesecurity/trufflehog/pull/2596) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.70.2...v3.70.3 ### [`v3.70.2`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.70.2) [Compare Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.70.1...v3.70.2) #### What's Changed - fix(deps): update module github.com/launchdarkly/go-server-sdk/v7 to v7.1.1 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2576](https://togithub.com/trufflesecurity/trufflehog/pull/2576) - fix(deps): update module cloud.google.com/go/secretmanager to v1.11.6 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2578](https://togithub.com/trufflesecurity/trufflehog/pull/2578) - fix(deps): update module github.com/google/go-containerregistry to v0.19.1 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2586](https://togithub.com/trufflesecurity/trufflehog/pull/2586) - fix(deps): update module github.com/googleapis/gax-go/v2 to v2.12.3 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2587](https://togithub.com/trufflesecurity/trufflehog/pull/2587) - fix(deps): update module google.golang.org/api to v0.170.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2589](https://togithub.com/trufflesecurity/trufflehog/pull/2589) - fix(deps): update module github.com/aws/aws-sdk-go to v1.51.1 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2588](https://togithub.com/trufflesecurity/trufflehog/pull/2588) - fix(deps): update module github.com/wasilibs/go-re2 to v1.5.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2591](https://togithub.com/trufflesecurity/trufflehog/pull/2591) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.70.1...v3.70.2 ### [`v3.70.1`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.70.1) [Compare Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.70.0...v3.70.1) #### What's Changed - pull out verification logic from github detectors by [@​0x1](https://togithub.com/0x1) in [https://github.com/trufflesecurity/trufflehog/pull/2554](https://togithub.com/trufflesecurity/trufflehog/pull/2554) - Fix --results not behaving as expected. by [@​rgmz](https://togithub.com/rgmz) in [https://github.com/trufflesecurity/trufflehog/pull/2582](https://togithub.com/trufflesecurity/trufflehog/pull/2582) - Fix GitHub detector npe by [@​rgmz](https://togithub.com/rgmz) in [https://github.com/trufflesecurity/trufflehog/pull/2583](https://togithub.com/trufflesecurity/trufflehog/pull/2583) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.70.0...v3.70.1 ### [`v3.70.0`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.70.0) [Compare Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.69.0...v3.70.0) #### What's Changed - fix(deps): update module github.com/golang-jwt/jwt/v4 to v5 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2550](https://togithub.com/trufflesecurity/trufflehog/pull/2550) - \[chore] - use custom grow method by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2555](https://togithub.com/trufflesecurity/trufflehog/pull/2555) - fix(deps): update module github.com/google/go-github/v57 to v60 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2551](https://togithub.com/trufflesecurity/trufflehog/pull/2551) - fix(deps): update module github.com/aws/aws-sdk-go to v1.50.35 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2560](https://togithub.com/trufflesecurity/trufflehog/pull/2560) - fix(deps): update module github.com/go-sql-driver/mysql to v1.8.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2561](https://togithub.com/trufflesecurity/trufflehog/pull/2561) - fix(deps): update module cloud.google.com/go/storage to v1.39.1 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2565](https://togithub.com/trufflesecurity/trufflehog/pull/2565) - fix(deps): update module github.com/aws/aws-sdk-go to v1.50.36 - autoclosed by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2566](https://togithub.com/trufflesecurity/trufflehog/pull/2566) - \[chore] - Fix flaky test by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2564](https://togithub.com/trufflesecurity/trufflehog/pull/2564) - \[chore] - Record metrics before reset by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2556](https://togithub.com/trufflesecurity/trufflehog/pull/2556) - fix(deps): update module github.com/launchdarkly/go-server-sdk/v6 to v7 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2568](https://togithub.com/trufflesecurity/trufflehog/pull/2568) - fix(deps): update module github.com/xanzy/go-gitlab to v0.100.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2567](https://togithub.com/trufflesecurity/trufflehog/pull/2567) - fix(deps): update module github.com/aws/aws-sdk-go to v1.50.38 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2572](https://togithub.com/trufflesecurity/trufflehog/pull/2572) - fix(deps): update module github.com/couchbase/gocb/v2 to v2.8.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2573](https://togithub.com/trufflesecurity/trufflehog/pull/2573) - fix(deps): update golang.org/x/exp digest to [`c7f7c64`](https://togithub.com/trufflesecurity/trufflehog/commit/c7f7c64) by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2575](https://togithub.com/trufflesecurity/trufflehog/pull/2575) - Add `--results` flag by [@​rgmz](https://togithub.com/rgmz) in [https://github.com/trufflesecurity/trufflehog/pull/2372](https://togithub.com/trufflesecurity/trufflehog/pull/2372) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.69.0...v3.70.0 ### [`v3.69.0`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.69.0) [Compare Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.68.5...v3.69.0) #### What's Changed - add version to extra data + moving existing versioned detectors into subdirectory format by [@​0x1](https://togithub.com/0x1) in [https://github.com/trufflesecurity/trufflehog/pull/2471](https://togithub.com/trufflesecurity/trufflehog/pull/2471) - fix(deps): update module github.com/launchdarkly/go-server-sdk/v6 to v7 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2499](https://togithub.com/trufflesecurity/trufflehog/pull/2499) - fix(deps): update module github.com/golang-jwt/jwt/v4 to v5 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2535](https://togithub.com/trufflesecurity/trufflehog/pull/2535) - fix(deps): update module github.com/charmbracelet/lipgloss to v0.10.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2542](https://togithub.com/trufflesecurity/trufflehog/pull/2542) - fix(deps): update module github.com/aws/aws-sdk-go to v1.50.34 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2541](https://togithub.com/trufflesecurity/trufflehog/pull/2541) - fix(deps): update module golang.org/x/crypto to v0.21.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2544](https://togithub.com/trufflesecurity/trufflehog/pull/2544) - fix(deps): update module github.com/xanzy/go-gitlab to v0.99.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2543](https://togithub.com/trufflesecurity/trufflehog/pull/2543) - fix(deps): update module golang.org/x/oauth2 to v0.18.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2546](https://togithub.com/trufflesecurity/trufflehog/pull/2546) - fix(deps): update module google.golang.org/api to v0.169.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2547](https://togithub.com/trufflesecurity/trufflehog/pull/2547) - Canary verification by [@​joeleonjr](https://togithub.com/joeleonjr) in [https://github.com/trufflesecurity/trufflehog/pull/2531](https://togithub.com/trufflesecurity/trufflehog/pull/2531) - fix(deps): update testcontainers-go monorepo to v0.29.1 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2549](https://togithub.com/trufflesecurity/trufflehog/pull/2549) - fix(deps): update module google.golang.org/protobuf to v1.33.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2548](https://togithub.com/trufflesecurity/trufflehog/pull/2548) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.68.5...v3.69.0 ### [`v3.68.5`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.68.5) [Compare Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.68.4...v3.68.5) #### What's Changed - Create basic escaped unicode decoder by [@​rgmz](https://togithub.com/rgmz) in [https://github.com/trufflesecurity/trufflehog/pull/2456](https://togithub.com/trufflesecurity/trufflehog/pull/2456) - fix(deps): update module github.com/aws/aws-sdk-go to v1.50.30 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2529](https://togithub.com/trufflesecurity/trufflehog/pull/2529) - fix(deps): update module github.com/felixge/fgprof to v0.9.4 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2532](https://togithub.com/trufflesecurity/trufflehog/pull/2532) - fix(deps): update module cloud.google.com/go/storage to v1.39.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2533](https://togithub.com/trufflesecurity/trufflehog/pull/2533) - fix(deps): update module github.com/stretchr/testify to v1.9.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2534](https://togithub.com/trufflesecurity/trufflehog/pull/2534) - Add naive S3 ignorelist by [@​rosecodym](https://togithub.com/rosecodym) in [https://github.com/trufflesecurity/trufflehog/pull/2536](https://togithub.com/trufflesecurity/trufflehog/pull/2536) - Redact secret in git command output by [@​rosecodym](https://togithub.com/rosecodym) in [https://github.com/trufflesecurity/trufflehog/pull/2539](https://togithub.com/trufflesecurity/trufflehog/pull/2539) - Fix timeout param, DB is not needed for ping command by [@​dustin-decker](https://togithub.com/dustin-decker) in [https://github.com/trufflesecurity/trufflehog/pull/2540](https://togithub.com/trufflesecurity/trufflehog/pull/2540) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.68.4...v3.68.5 ### [`v3.68.4`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.68.4) [Compare Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.68.3...v3.68.4) #### What's Changed - Improve Gitlab default URL handling by [@​trufflesteeeve](https://togithub.com/trufflesteeeve) in [https://github.com/trufflesecurity/trufflehog/pull/2491](https://togithub.com/trufflesecurity/trufflehog/pull/2491) - fix(deps): update module github.com/golang-jwt/jwt/v4 to v5 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2513](https://togithub.com/trufflesecurity/trufflehog/pull/2513) - fix(deps): update module github.com/aws/aws-sdk-go to v1.50.28 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2520](https://togithub.com/trufflesecurity/trufflehog/pull/2520) - fix(deps): update module github.com/googleapis/gax-go/v2 to v2.12.2 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2521](https://togithub.com/trufflesecurity/trufflehog/pull/2521) - fix(deps): update module github.com/prometheus/client_golang to v1.19.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2522](https://togithub.com/trufflesecurity/trufflehog/pull/2522) - fix(deps): update module golang.org/x/crypto to v0.20.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2523](https://togithub.com/trufflesecurity/trufflehog/pull/2523) - Remove one filter word by [@​dustin-decker](https://togithub.com/dustin-decker) in [https://github.com/trufflesecurity/trufflehog/pull/2525](https://togithub.com/trufflesecurity/trufflehog/pull/2525) - Fix minor typo by [@​jamesgol](https://togithub.com/jamesgol) in [https://github.com/trufflesecurity/trufflehog/pull/2527](https://togithub.com/trufflesecurity/trufflehog/pull/2527) - Ignore canary IDs in notifications by [@​dxa4481](https://togithub.com/dxa4481) in [https://github.com/trufflesecurity/trufflehog/pull/2526](https://togithub.com/trufflesecurity/trufflehog/pull/2526) - \[feat] - Make the client configurable by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2528](https://togithub.com/trufflesecurity/trufflehog/pull/2528) #### New Contributors - [@​jamesgol](https://togithub.com/jamesgol) made their first contribution in [https://github.com/trufflesecurity/trufflehog/pull/2527](https://togithub.com/trufflesecurity/trufflehog/pull/2527) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.68.3...v3.68.4 ### [`v3.68.3`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.68.3) [Compare Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.68.2...v3.68.3) #### What's Changed - fix(deps): update module github.com/google/go-github/v57 to v59 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2464](https://togithub.com/trufflesecurity/trufflehog/pull/2464) - fix(deps): update module github.com/golang-jwt/jwt/v4 to v5 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2455](https://togithub.com/trufflesecurity/trufflehog/pull/2455) - fix(deps): update golang.org/x/exp digest to [`814bf88`](https://togithub.com/trufflesecurity/trufflehog/commit/814bf88) by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2508](https://togithub.com/trufflesecurity/trufflehog/pull/2508) - fix(deps): update module github.com/aws/aws-sdk-go to v1.50.25 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2509](https://togithub.com/trufflesecurity/trufflehog/pull/2509) - fix(deps): update module github.com/xanzy/go-gitlab to v0.98.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2511](https://togithub.com/trufflesecurity/trufflehog/pull/2511) - fix(deps): update module google.golang.org/api to v0.167.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2512](https://togithub.com/trufflesecurity/trufflehog/pull/2512) - Improve monogo and snowflake detectors by [@​dustin-decker](https://togithub.com/dustin-decker) in [https://github.com/trufflesecurity/trufflehog/pull/2518](https://togithub.com/trufflesecurity/trufflehog/pull/2518) - JDBC test and parsing improvements by [@​dustin-decker](https://togithub.com/dustin-decker) in [https://github.com/trufflesecurity/trufflehog/pull/2516](https://togithub.com/trufflesecurity/trufflehog/pull/2516) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.68.2...v3.68.3 ### [`v3.68.2`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.68.2) [Compare Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.68.1...v3.68.2) #### What's Changed - fix prefix check when returning early by [@​dustin-decker](https://togithub.com/dustin-decker) in [https://github.com/trufflesecurity/trufflehog/pull/2503](https://togithub.com/trufflesecurity/trufflehog/pull/2503) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.68.1...v3.68.2 ### [`v3.68.1`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.68.1) [Compare Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.68.0...v3.68.1) #### What's Changed - Tell git to ignore directory ownership (fixes [#​2495](https://togithub.com/trufflesecurity/trufflehog/issues/2495)) by [@​marksteward](https://togithub.com/marksteward) in [https://github.com/trufflesecurity/trufflehog/pull/2496](https://togithub.com/trufflesecurity/trufflehog/pull/2496) - Gitlab scan targets by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2470](https://togithub.com/trufflesecurity/trufflehog/pull/2470) - Clean up some detectors by [@​dustin-decker](https://togithub.com/dustin-decker) in [https://github.com/trufflesecurity/trufflehog/pull/2501](https://togithub.com/trufflesecurity/trufflehog/pull/2501) #### New Contributors - [@​marksteward](https://togithub.com/marksteward) made their first contribution in [https://github.com/trufflesecurity/trufflehog/pull/2496](https://togithub.com/trufflesecurity/trufflehog/pull/2496) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.68.0...v3.68.1 ### [`v3.68.0`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.68.0) [Compare Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.67.7...v3.68.0) #### What's Changed - fix(deps): update module github.com/hashicorp/golang-lru to v2 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2486](https://togithub.com/trufflesecurity/trufflehog/pull/2486) - fix(deps): update module github.com/aws/aws-sdk-go to v1.50.21 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2489](https://togithub.com/trufflesecurity/trufflehog/pull/2489) - Add Display method to SourceUnit and Kind member to the CommonSourceUnit by [@​mcastorina](https://togithub.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/2450](https://togithub.com/trufflesecurity/trufflehog/pull/2450) - fix(deps): update module github.com/launchdarkly/go-server-sdk/v6 to v7 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2490](https://togithub.com/trufflesecurity/trufflehog/pull/2490) - fix(deps): update module github.com/aws/aws-sdk-go to v1.50.22 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2492](https://togithub.com/trufflesecurity/trufflehog/pull/2492) - fix(deps): update module github.com/couchbase/gocb/v2 to v2.7.2 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2493](https://togithub.com/trufflesecurity/trufflehog/pull/2493) - fix(deps): update module github.com/snowflakedb/gosnowflake to v1.8.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2497](https://togithub.com/trufflesecurity/trufflehog/pull/2497) - fix(deps): update module go.uber.org/zap to v1.27.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2498](https://togithub.com/trufflesecurity/trufflehog/pull/2498) - Identify some canary tokens without detonation by [@​dustin-decker](https://togithub.com/dustin-decker) in [https://github.com/trufflesecurity/trufflehog/pull/2500](https://togithub.com/trufflesecurity/trufflehog/pull/2500) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.67.7...v3.68.0 ### [`v3.67.7`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.67.7) [Compare Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.67.6...v3.67.7) #### What's Changed - \[chore] Add some doc comments to source manager by [@​mcastorina](https://togithub.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/2434](https://togithub.com/trufflesecurity/trufflehog/pull/2434) - fix(deps): update module github.com/golang-jwt/jwt/v4 to v5 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2448](https://togithub.com/trufflesecurity/trufflehog/pull/2448) - fix(deps): update golang.org/x/exp digest to [`ec58324`](https://togithub.com/trufflesecurity/trufflehog/commit/ec58324) by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2452](https://togithub.com/trufflesecurity/trufflehog/pull/2452) - fix(deps): update module github.com/aws/aws-sdk-go to v1.50.17 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2453](https://togithub.com/trufflesecurity/trufflehog/pull/2453) - fix(deps): update module github.com/googleapis/gax-go/v2 to v2.12.1 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2454](https://togithub.com/trufflesecurity/trufflehog/pull/2454) - fix(deps): update module github.com/aymanbagabas/go-osc52 to v2 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2447](https://togithub.com/trufflesecurity/trufflehog/pull/2447) - fix(deps): update module github.com/aymanbagabas/go-osc52 to v1.2.2 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2457](https://togithub.com/trufflesecurity/trufflehog/pull/2457) - fix(deps): update module go.mongodb.org/mongo-driver to v1.13.2 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2458](https://togithub.com/trufflesecurity/trufflehog/pull/2458) - fix(deps): update module github.com/aymanbagabas/go-osc52 to v2 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2459](https://togithub.com/trufflesecurity/trufflehog/pull/2459) - fix(deps): update module github.com/aymanbagabas/go-osc52 to v1.2.2 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2460](https://togithub.com/trufflesecurity/trufflehog/pull/2460) - fix(deps): update module github.com/google/go-github/v57 to v59 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2449](https://togithub.com/trufflesecurity/trufflehog/pull/2449) - fix(deps): update module github.com/aws/aws-sdk-go to v1.50.18 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2463](https://togithub.com/trufflesecurity/trufflehog/pull/2463) - Remove some noisy / less useful detectors by [@​dustin-decker](https://togithub.com/dustin-decker) in [https://github.com/trufflesecurity/trufflehog/pull/2467](https://togithub.com/trufflesecurity/trufflehog/pull/2467) - add missing prefixregex to GuardianAPI by [@​zricethezav](https://togithub.com/zricethezav) in [https://github.com/trufflesecurity/trufflehog/pull/2468](https://togithub.com/trufflesecurity/trufflehog/pull/2468) - update gitlab proto by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2469](https://togithub.com/trufflesecurity/trufflehog/pull/2469) - \[cleanup] - Extract buffer logic by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2409](https://togithub.com/trufflesecurity/trufflehog/pull/2409) - add lazy quantifier to prefixregex by [@​zricethezav](https://togithub.com/zricethezav) in [https://github.com/trufflesecurity/trufflehog/pull/2466](https://togithub.com/trufflesecurity/trufflehog/pull/2466) - \[chore] Increase TestMaxDiffSize timeout by [@​mcastorina](https://togithub.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/2472](https://togithub.com/trufflesecurity/trufflehog/pull/2472) - \[chore] - tighten keyword match by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2473](https://togithub.com/trufflesecurity/trufflehog/pull/2473) - move clenaup outside the engine by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2475](https://togithub.com/trufflesecurity/trufflehog/pull/2475) - fix(deps): update module github.com/hashicorp/golang-lru to v2 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2462](https://togithub.com/trufflesecurity/trufflehog/pull/2462) - fix(deps): update module github.com/aws/aws-sdk-go to v1.50.20 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2477](https://togithub.com/trufflesecurity/trufflehog/pull/2477) - fix(deps): update module github.com/hashicorp/golang-lru to v0.6.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2478](https://togithub.com/trufflesecurity/trufflehog/pull/2478) - fix(deps): update module go.mongodb.org/mongo-driver to v1.14.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2479](https://togithub.com/trufflesecurity/trufflehog/pull/2479) - fix(deps): update module google.golang.org/api to v0.165.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2480](https://togithub.com/trufflesecurity/trufflehog/pull/2480) - fix(deps): update module github.com/hashicorp/golang-lru to v2 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2481](https://togithub.com/trufflesecurity/trufflehog/pull/2481) - fix(deps): update module github.com/hashicorp/golang-lru to v0.6.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2482](https://togithub.com/trufflesecurity/trufflehog/pull/2482) - fix(deps): update module github.com/hashicorp/golang-lru to v2 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2483](https://togithub.com/trufflesecurity/trufflehog/pull/2483) - fix(deps): update module github.com/azuread/microsoft-authentication-library-for-go to v1.2.2 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2484](https://togithub.com/trufflesecurity/trufflehog/pull/2484) - \[chore] - upgrade lru cache version by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2487](https://togithub.com/trufflesecurity/trufflehog/pull/2487) - \[chore] - use read full by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2474](https://togithub.com/trufflesecurity/trufflehog/pull/2474) - concurrency uint8 to int by [@​zricethezav](https://togithub.com/zricethezav) in [https://github.com/trufflesecurity/trufflehog/pull/2488](https://togithub.com/trufflesecurity/trufflehog/pull/2488) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.67.6...v3.67.7 ### [`v3.67.6`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.67.6) [Compare Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.67.5...v3.67.6) #### What's Changed - Disable secret scans for community PRs by [@​zricethezav](https://togithub.com/zricethezav) in [https://github.com/trufflesecurity/trufflehog/pull/2401](https://togithub.com/trufflesecurity/trufflehog/pull/2401) - Refactor UnitHook to block the scan if finished metrics aren't handled by [@​mcastorina](https://togithub.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/2309](https://togithub.com/trufflesecurity/trufflehog/pull/2309) - Update brew install instructions by [@​zricethezav](https://togithub.com/zricethezav) in [https://github.com/trufflesecurity/trufflehog/pull/2404](https://togithub.com/trufflesecurity/trufflehog/pull/2404) - Implement SourceUnitEnumChunker for GitLab by [@​mcastorina](https://togithub.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/2367](https://togithub.com/trufflesecurity/trufflehog/pull/2367) - Add flag to write job reports to disk by [@​mcastorina](https://togithub.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/2298](https://togithub.com/trufflesecurity/trufflehog/pull/2298) - \[chore] Rename file to legacy_reporters.go by [@​mcastorina](https://togithub.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/2406](https://togithub.com/trufflesecurity/trufflehog/pull/2406) - \[chore] Ensure Postgres detector respects context deadline by [@​mcastorina](https://togithub.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/2408](https://togithub.com/trufflesecurity/trufflehog/pull/2408) - fix(deps): update module github.com/charmbracelet/bubbletea to v0.25.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2326](https://togithub.com/trufflesecurity/trufflehog/pull/2326) - fix(deps): update module github.com/charmbracelet/bubbles to v0.18.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2296](https://togithub.com/trufflesecurity/trufflehog/pull/2296) - fix(deps): update module github.com/aymanbagabas/go-osc52 to v2 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2048](https://togithub.com/trufflesecurity/trufflehog/pull/2048) - fix(deps): update github.com/lrstanley/bubblezone digest to [`b7bafc4`](https://togithub.com/trufflesecurity/trufflehog/commit/b7bafc4) by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2411](https://togithub.com/trufflesecurity/trufflehog/pull/2411) - fix(deps): update golang.org/x/exp digest to [`2c58cdc`](https://togithub.com/trufflesecurity/trufflehog/commit/2c58cdc) by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2412](https://togithub.com/trufflesecurity/trufflehog/pull/2412) - fix(deps): update module cloud.google.com/go/secretmanager to v1.11.5 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2414](https://togithub.com/trufflesecurity/trufflehog/pull/2414) - fix(deps): update module github.com/aws/aws-sdk-go to v1.50.15 - autoclosed by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2415](https://togithub.com/trufflesecurity/trufflehog/pull/2415) - fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.22 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2417](https://togithub.com/trufflesecurity/trufflehog/pull/2417) - fix(deps): update module github.com/aymanbagabas/go-osc52 to v1.2.2 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2416](https://togithub.com/trufflesecurity/trufflehog/pull/2416) - chore(deps): update golang docker tag to v1.22 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2420](https://togithub.com/trufflesecurity/trufflehog/pull/2420) - chore(deps): update sigstore/cosign-installer action to v3.4.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2421](https://togithub.com/trufflesecurity/trufflehog/pull/2421) - fix(deps): update module cloud.google.com/go/storage to v1.37.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2423](https://togithub.com/trufflesecurity/trufflehog/pull/2423) - fix(deps): update module github.com/getsentry/sentry-go to v0.27.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2424](https://togithub.com/trufflesecurity/trufflehog/pull/2424) - fix(deps): update module github.com/google/go-containerregistry to v0.19.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2425](https://togithub.com/trufflesecurity/trufflehog/pull/2425) - \[fix] Add unit information to error returned by ChunkUnit by [@​mcastorina](https://togithub.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/2410](https://togithub.com/trufflesecurity/trufflehog/pull/2410) - Ignore Kubernetes GCP test credentials by [@​rgmz](https://togithub.com/rgmz) in [https://github.com/trufflesecurity/trufflehog/pull/2413](https://togithub.com/trufflesecurity/trufflehog/pull/2413) - fix(deps): update module github.com/google/uuid to v1.6.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2427](https://togithub.com/trufflesecurity/trufflehog/pull/2427) - fix(deps): update module github.com/hashicorp/golang-lru to v0.6.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2428](https://togithub.com/trufflesecurity/trufflehog/pull/2428) - fix(deps): update module github.com/thezeroslave/zapsentry to v1.20.2 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2431](https://togithub.com/trufflesecurity/trufflehog/pull/2431) - fix(deps): update module github.com/snowflakedb/gosnowflake to v1.7.2 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2430](https://togithub.com/trufflesecurity/trufflehog/pull/2430) - fix(deps): update module github.com/prometheus/client_golang to v1.18.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2429](https://togithub.com/trufflesecurity/trufflehog/pull/2429) - fix(deps): update module github.com/xanzy/go-gitlab to v0.97.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2432](https://togithub.com/trufflesecurity/trufflehog/pull/2432) - fix(deps): update module go.mongodb.org/mongo-driver to v1.13.1 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2433](https://togithub.com/trufflesecurity/trufflehog/pull/2433) - fix(deps): update module go.uber.org/mock to v0.4.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2437](https://togithub.com/trufflesecurity/trufflehog/pull/2437) - fix(deps): update module github.com/aws/aws-sdk-go to v1.50.16 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2436](https://togithub.com/trufflesecurity/trufflehog/pull/2436) - fix(deps): update module cloud.google.com/go/storage to v1.38.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2438](https://togithub.com/trufflesecurity/trufflehog/pull/2438) - fix(deps): update module golang.org/x/crypto to v0.19.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2439](https://togithub.com/trufflesecurity/trufflehog/pull/2439) - fix(deps): update module golang.org/x/net to v0.21.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2440](https://togithub.com/trufflesecurity/trufflehog/pull/2440) - chore(deps): update actions/setup-go action to v5 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2443](https://togithub.com/trufflesecurity/trufflehog/pull/2443) - fix(deps): update module golang.org/x/oauth2 to v0.17.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2441](https://togithub.com/trufflesecurity/trufflehog/pull/2441) - fix(deps): update module google.golang.org/api to v0.164.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2442](https://togithub.com/trufflesecurity/trufflehog/pull/2442) - chore(deps): update github/codeql-action action to v3 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2444](https://togithub.com/trufflesecurity/trufflehog/pull/2444) - chore(deps): update golangci/golangci-lint-action action to v4 by [@​renovate](https://togithub.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2445](https://togithub.com/trufflesecurity/trufflehog/pull/2445) - Update custom detector example by [@​zricethezav](https://togithub.com/zricethezav) in [https://github.com/trufflesecurity/trufflehog/pull/2435](https://togithub.com/trufflesecurity/trufflehog/pull/2435) - 2396 since commit stopped working by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2402](https://togithub.com/trufflesecurity/trufflehog/pull/2402) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.67.5...v3.67.6 ### [`v3.67.5`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.67.5) [Compare Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.67.4...v3.67.5) #### What's Changed - Fix handling of GitHub ratelimit information by [@​rgmz](https://togithub.com/rgmz) in [https://github.com/trufflesecurity/trufflehog/pull/2041](https://togithub.com/trufflesecurity/trufflehog/pull/2041) - Set GHA workdir by [@​zricethezav](https://togithub.com/zricethezav) in [https://github.com/trufflesecurity/trufflehog/pull/2393](https://togithub.com/trufflesecurity/trufflehog/pull/2393) - Allow CLI version pinning in GHA ([#​2397](https://togithub.com/trufflesecurity/trufflehog/issues/2397)) by [@​skeweredlogic](https://togithub.com/skeweredlogic) in [https://github.com/trufflesecurity/trufflehog/pull/2398](https://togithub.com/trufflesecurity/trufflehog/pull/2398) - \[bug] - prevent concurrent map writes by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2399](https://togithub.com/trufflesecurity/trufflehog/pull/2399) - Allow multiple domains for Forager by [@​dustin-decker](https://togithub.com/dustin-decker) in [https://github.com/trufflesecurity/trufflehog/pull/2400](https://togithub.com/trufflesecurity/trufflehog/pull/2400) - Update GitParse to handle quoted binary filenames by [@​rgmz](https://togithub.com/rgmz) in [https://github.com/trufflesecurity/trufflehog/pull/2391](https://togithub.com/trufflesecurity/trufflehog/pull/2391) - \[feat] - buffered file writer metrics by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2395](https://togithub.com/trufflesecurity/trufflehog/pull/2395) #### New Contributors - [@​skeweredlogic](https://togithub.com/skeweredlogic) made their first contribution in [https://github.com/trufflesecurity/trufflehog/pull/2398](https://togithub.com/trufflesecurity/trufflehog/pull/2398) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.67.4...v3.67.5 ### [`v3.67.4`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.67.4) [Compare Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.67.3...v3.67.4) #### What's Changed - \[feat] - use diff chan by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2387](https://togithub.com/trufflesecurity/trufflehog/pull/2387) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.67.3...v3.67.4 ### [`v3.67.3`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.67.3) [Compare Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.67.2...v3.67.3) #### What's Changed - Disable GitHub wiki scanning by default by [@​rosecodym](https://togithub.com/rosecodym) in [https://github.com/trufflesecurity/trufflehog/pull/2386](https://togithub.com/trufflesecurity/trufflehog/pull/2386) - Fix binary file hanging bug in git sources by [@​mcastorina](https://togithub.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/2388](https://togithub.com/trufflesecurity/trufflehog/pull/2388) - tightening opsgenie detection and verification by [@​dylanTruffle](https://togithub.com/dylanTruffle) in [https://github.com/trufflesecurity/trufflehog/pull/2389](https://togithub.com/trufflesecurity/trufflehog/pull/2389) - Make `SkipFile` case-insensitive by [@​rgmz](https://togithub.com/rgmz) in [https://github.com/trufflesecurity/trufflehog/pull/2383](https://togithub.com/trufflesecurity/trufflehog/pull/2383) - \[not-fixup] - Reduce memory consumption for Buffered File Writer by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2377](https://togithub.com/trufflesecurity/trufflehog/pull/2377) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.67.2...v3.67.3 ### [`v3.67.2`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.67.2) [Compare Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.67.1...v3.67.2) #### What's Changed - \[bug] - unhashable map key by [@​ahrav](https://togithub.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/2374](https://togithub.com/trufflesecurity/trufflehog/pull/2374) - custom detector docs improvement by [@​dxa4481](https://togithub.com/dxa4481) in [https://github.com/trufflesecurity/trufflehog/pull/2376](https://togithub.com/tru </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/matter-labs/compiler-infra). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xNTMuMiIsInVwZGF0ZWRJblZlciI6IjM3LjI2OS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Description:
The current buffer handling allows buffers to frequently grow larger than necessary. When writing content smaller than the buffer threshold but larger than the buffer capacity, the buffer pool no longer serves its intended purpose. This unnecessary buffer growth causes a spike in memory usage.
This PR checks the write content size against the buffer's remaining capacity. If the buffer cannot accommodate the content, instead of doubling the buffer for a small amount of data, the buffer is grown to the exact size that's needed.. This approach reduces the buffered file writer's overall memory footprint.
Analysis of logging output revealed this pattern:
In all cases, the buffer was doubled despite needing only a small increase to accommodate the write content.
Profiles before and after this change:
Additionally, some performance profiles:
Checklist:
make test-community
)?make lint
this requires golangci-lint)?