chore(actions): bump trufflesecurity/trufflehog from 3.97.5 to 3.97.9

[dependabot]

Bumps trufflesecurity/trufflehog from 3.97.5 to 3.97.9.

Release notes

Sourced from trufflesecurity/trufflehog's releases.

v3.97.9

What's Changed

• [SCAN-162] Add Err() to JobProgress and JobProgressRef by @​dipto-truffle in trufflesecurity/trufflehog#5346
• ci: scope Smoke timeouts to trufflehog runs, not the build by @​bryanbeverly in trufflesecurity/trufflehog#5317
• Update module github.com/aymanbagabas/go-osc52 to v1.2.2 by @​renovate[bot] in trufflesecurity/trufflehog#5252
• Update module github.com/gabriel-vasile/mimetype to v1.4.15 by @​renovate[bot] in trufflesecurity/trufflehog#5283
• make 401s for Basic auth verified false. by @​jordanTunstill in trufflesecurity/trufflehog#5290
• [INT-1088] Add version and comment_number lines to SharePoint source metadata by @​camgunz in trufflesecurity/trufflehog#5348
• Int 595 auth errors by @​shahzadhaider1 in trufflesecurity/trufflehog#5259
• Spruce up Makefile a little by @​camgunz in trufflesecurity/trufflehog#5347

Full Changelog: trufflesecurity/trufflehog@v3.97.8...v3.97.9

v3.97.8

What's Changed

• Add Okta OAuth support in Okta detector by @​shreyas-sriram in trufflesecurity/trufflehog#5323
• Add per detector verification timing to verification cache by @​kvnphvm in trufflesecurity/trufflehog#5341
• Set all verification errors in detectors by @​shahzadhaider1 in trufflesecurity/trufflehog#5253

Full Changelog: trufflesecurity/trufflehog@v3.97.7...v3.97.8

v3.97.7

What's Changed

• Recognize a missing Postgres database by SQLSTATE by @​gaborbernat in trufflesecurity/trufflehog#5312
• Improve Github App installation access token caching by @​mariduv in trufflesecurity/trufflehog#5324
• give git the real base..head range for diff scans by @​kvnphvm in trufflesecurity/trufflehog#5325
• Add GCS source documentation by @​kashifkhan0771 in trufflesecurity/trufflehog#5319
• [PERF] Remove \b anchor from escaped-unicode codePointPat by @​Ahsan-Sarbaz in trufflesecurity/trufflehog#5320
• 🐛 fix(engine): map decoded results to source lines by @​gaborbernat in trufflesecurity/trufflehog#5219

New Contributors

• @​gaborbernat made their first contribution in trufflesecurity/trufflehog#5312

Full Changelog: trufflesecurity/trufflehog@v3.97.6...v3.97.7

v3.97.6

What's Changed

• Clarify security policy by @​bradlarsen in trufflesecurity/trufflehog#5295
• Add git source documentation by @​kashifkhan0771 in trufflesecurity/trufflehog#5326
• fix(gitparse): cheaper low-memory git scan, stop losing trailing commits by @​kashifkhan0771 in trufflesecurity/trufflehog#5331
• analyzer/github: include is_fine_grained metadata and make gist enumeration non-fatal by @​unsmith in trufflesecurity/trufflehog#5332

Full Changelog: trufflesecurity/trufflehog@v3.97.5...v3.97.6

Commits

• 4dd8831 Spruce up Makefile a little (#5347)
• 449d8a3 Int 595 auth errors (#5259)
• bad9901 Add version and comment_number lines to SharePoint source metadata (#5348)
• 4b8eb0e make 401s for Basic auth verified false. (#5290)
• bbf9447 Update module github.com/gabriel-vasile/mimetype to v1.4.15 (#5283)
• 16b566b Update module github.com/aymanbagabas/go-osc52 to v1.2.2 (#5252)
• a25ff85 ci: scope Smoke timeouts to trufflehog runs, not the build (#5317)
• ca9d3b3 [SCAN-162] Add Err() to JobProgress and JobProgressRef (#5346)
• a5f3de5 Set all verification errors in detectors (#5253)
• 7ee4d49 Add per detector verification timing to verification cache (#5341)
• Additional commits viewable in compare view

[dependabot]

Labels

The following labels could not be found: github-actions. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ❌ 1 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ✅ 0 package(s) with unknown licenses.

See the Details below.

License Issues

.github/workflows/secret-scan.yml

Package	Version	License	Issue Type
trufflesecurity/trufflehog	4dd8831c5f12599465d4d45c3c447b4018a34c85	AGPL-3.0	Incompatible License

Allowed Licenses:

MIT, ISC, Apache-2.0, BSD-2-Clause, BSD-3-Clause, 0BSD, Unlicense, CC0-1.0, CC-BY-4.0, BlueOak-1.0.0, Python-2.0, MIT-0, Zlib, OFL-1.1

OpenSSF Scorecard

Package	Version	Score	Details
actions/trufflesecurity/trufflehog	4dd8831c5f12599465d4d45c3c447b4018a34c85	🟢 7.9	Details Check Score Reason Security-Policy 🟢 10 security policy file detected Code-Review 🟢 10 all changesets reviewed Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Maintained 🟢 10 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Binary-Artifacts 🟢 9 binaries present in source code License 🟢 10 license file detected Fuzzing 🟢 10 project is fuzzed Pinned-Dependencies 🟢 7 dependency not pinned by hash detected -- score normalized to 7 Signed-Releases 🟢 8 5 out of the last 5 releases have a total of 5 signed artifacts. Branch-Protection 🟢 5 branch protection is not maximal on development and all release branches Packaging 🟢 10 packaging workflow detected SAST 🟢 10 SAST tool is run on all commits

Scanned Files

• .github/workflows/secret-scan.yml

[Musiker15]

@dependabot recreate