chore(deps): update trufflesecurity/trufflehog action to v3.92.5

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
trufflesecurity/trufflehog	action	minor	v3.90.8 → v3.92.5

---

Release Notes

trufflesecurity/trufflehog (trufflesecurity/trufflehog)

v3.92.5

Compare Source

What's Changed

• [INS-206] Store Gitlab Project ID in secret location metadata by @​mustansir14 in #​4601
• [INS-242] Add more validations to Custom Detector config by @​mustansir14 in #​4642
• Fix syslog test failing due to hardcoded timestamp by @​MuneebUllahKhan222 in #​4646
• [INS-120] Increase code coverage for Postman's source scanItem function by @​MuneebUllahKhan222 in #​4648
• [INS-232] Fix S3 Source "panic: runtime error: index out of range" bug by @​mustansir14 in #​4610
• [INS-170] Unify JDBC URL Parsing Across Detector and Analyzer (Continued) by @​mustansir14 in #​4606
• Add exponential backoff retry logic in Twilio detector by @​shahzadhaider1 in #​4652
• Fix typo in help description for Postman API metric by @​shahzadhaider1 in #​4656
• Rework JWT detector to better block local IPs by @​bradlarsen in #​4607
• Gitlab Source: Backoff from Scan2 which is experimental to legacy pagination API call by @​kashifkhan0771 in #​4608
• fix: git commit date parsing for non-English locales by @​GLEF1X in #​4653
• fix: report accurate line numbers for chunked file scanning (#​1876) by @​GLEF1X in #​4615
• Add Postman API monthly request limit metric by @​shahzadhaider1 in #​4667
• [INS-243] Fix jdbc detector detecting incomplete connection string and fixed invalid… by @​MuneebUllahKhan222 in #​4636

New Contributors

• @​GLEF1X made their first contribution in #​4653

Full Changelog: trufflesecurity/trufflehog@v3.92.4...v3.92.5

v3.92.4

Compare Source

What's Changed

• [INS-170] Unify JDBC URL parsing across detectors and analyzers by @​mustansir14 in #​4574
• Pagination and Rate-Limit Handling In Docker Registry Namespace API Calls by @​nabeelalam in #​4557
• [INS-226] Use pinned image for Quay registry Integration test by @​mustansir14 in #​4602
• Update module golang.org/x/crypto to v0.45.0 [SECURITY] by @​renovate[bot] in #​4562
• [INS-207] Add Role-Aware Resumption Support for Legacy S3 Scan by @​MuneebUllahKhan222 in #​4600
• Enable line numbers for GitHub Real-time by @​rosecodym in #​4611

Full Changelog: trufflesecurity/trufflehog@v3.92.3...v3.92.4

v3.92.3

Compare Source

What's Changed

• Add proto definitions for Google Drive Domain-Wide Delegation (DWD) by @​shahzadhaider1 in #​4596
• Fix git clone timeout typo by @​rosecodym in #​4599
• Update Azure Repos link format by @​amanfcp in #​4598

Full Changelog: trufflesecurity/trufflehog@v3.92.2...v3.92.3

v3.92.2

Compare Source

What's Changed

• [INS-37] Fixed the issue of ftp connection ignoring the detector's co… by @​MuneebUllahKhan222 in #​4590
• Add optional git clone timeout by @​rosecodym in #​4597

New Contributors

• @​MuneebUllahKhan222 made their first contribution in #​4590

Full Changelog: trufflesecurity/trufflehog@v3.92.1...v3.92.2

v3.92.1

Compare Source

What's Changed

• Improve Copper Detector verification with stricter status code and email matching by @​amanfcp in #​4594

Full Changelog: trufflesecurity/trufflehog@v3.92.0...v3.92.1

v3.92.0

Compare Source

What's Changed

• Added API Call Metrics to Docker Source by @​nabeelalam in #​4552
• Added Additional Metrics and Job ID in the Docker Source by @​nabeelalam in #​4547
• [Fix] Updated the failing Docker Source Quay Registry Test by @​nabeelalam in #​4580
• Add Gitlab V3 Detector by @​mustansir14 in #​4563
• Add Metrics to RetryableHTTPClient by @​mustansir14 in #​4545
• [INS-104] Support units in S3 source by @​mustansir14 in #​4560
• [INS-204] Abort Postman scan if monthly API request limit crosses 80% by @​mustansir14 in #​4586
• Create way to add key-value pairs to new sinks by @​rosecodym in #​4582
• Skip flaky test by @​rosecodym in #​4595
• Add more clone logging by @​rosecodym in #​4593
• Apply configured include/ignore lists to GitLab unit scans by @​rosecodym in #​4592

Full Changelog: trufflesecurity/trufflehog@v3.91.2...v3.92.0

v3.91.2

Compare Source

What's Changed

• Make Integrations team codeown source integrations by @​rosecodym in #​4561
• Fix custom regex link in readme.md by @​jmcshannon in #​4568
• Add some engine tests around the Verify flag by @​rosecodym in #​4566
• Addition of Installation Type field in Jira Source Proto [INS-79] by @​shahzadhaider1 in #​4564
• [INS-131] Add response id and response name to Postman metadata by @​mustansir14 in #​4555
• Make Integrations (shared) codeowners of proto/ by @​rosecodym in #​4576

New Contributors

• @​jmcshannon made their first contribution in #​4568

Full Changelog: trufflesecurity/trufflehog@v3.91.1...v3.91.2

v3.91.1

Compare Source

v3.91.0

Compare Source

What's Changed

• Remove gh-actions approval workflows in favor of new repo setting by @​j2fw in #​4525
• Scan all images under a namespace for Docker remote registries by @​kashifkhan0771 in #​4514
• Added .msg and .doc to skipArchiverMimeTypes by @​jordanTunstill in #​4544
• Fix Github Wiki Page Links by @​mustansir14 in #​4538
• Added tests for new .msg and .doc file types to skipArchiverMimeTypes by @​jordanTunstill in #​4546
• Shadow context when enumerating GitHub by @​rosecodym in #​4549

Full Changelog: trufflesecurity/trufflehog@v3.90.13...v3.91.0

v3.90.13

Compare Source

What's Changed

• Require product eng approval for PRs by @​dustin-decker in #​4478
• pr approval workflow: use pull_request_target by @​j2fw in #​4522
• Switch to an outside action for pr approval by @​j2fw in #​4523
• pr-approval-check: use separate workflow to check approvals by @​j2fw in #​4530
• test multi-workflow pr approval check by @​j2fw in #​4531
• Implemented Graphql requests for Github PR's, Issues and comments scanning by @​kashifkhan0771 in #​4431
• chore: fix feature support to append user agent suffix by @​dmdhrumilmistry in #​4520
• Updated GDrive proto to support On-Prem Scanning by @​kashifkhan0771 in #​4539
• Track chunk size by source type by @​rosecodym in #​4543

New Contributors

• @​dmdhrumilmistry made their first contribution in #​4520

Full Changelog: trufflesecurity/trufflehog@v3.90.12...v3.90.13

v3.90.12

Compare Source

What's Changed

• Updated Docker source with new test cases and README by @​kashifkhan0771 in #​4481
• Comment out broken CircleCI integration test by @​trufflesteeeve in #​4505
• Fix "skipping binary file" logging to show actual file name by @​mariduv in #​4509
• Refactored circleci source test cases by @​kashifkhan0771 in #​4506
• added ability to run github-experimental against private repos by @​joeleonjr in #​4508
• explicit repositories now bypass wantRepo() filtering entirely. added ctx to newConnector by @​jordanTunstill in #​4507
• Remove include repos by @​jordanTunstill in #​4469
• Remove depaware by @​rosecodym in #​4515

Full Changelog: trufflesecurity/trufflehog@v3.90.11...v3.90.12

v3.90.11

Compare Source

What's Changed

• bump rardecode by @​rosecodym in #​4503

Full Changelog: trufflesecurity/trufflehog@v3.90.10...v3.90.11

v3.90.10

Compare Source

What's Changed

• Local Git Config Sanitization by @​joeleonjr in #​4502

Full Changelog: trufflesecurity/trufflehog@v3.90.9...v3.90.10

v3.90.9

Compare Source

What's Changed

• Return non-zero exit code if an error occurs during a scan. by @​mplzik in #​4476
• Fix: SonarCloud Verification Logic by @​shahzadhaider1 in #​4482
• Clarify what 'unknown' means by @​dustin-decker in #​4477
• Proto update to support scanning confluence comments by @​mustansir14 in #​4484
• Fix SSH schema error executing git clone by @​shahzadhaider1 in #​4488
• Detect Organization ID to pass into AnalysisInfo for Atlassian Detector by @​mustansir14 in #​4480
• Add support for Account API Token verification in Postmark Detector by @​mustansir14 in #​4495
• refactor: use b.Loop() to simplify the code and improve performance by @​dulanting in #​4497
• Fix wrong line number in private key detector (#​4485) by @​kmgv in #​4486
• Reduce GitHub V1 Detector False Positives by @​shahzadhaider1 in #​4494
• Bump github.com/nwaples/rardecode/v2 from 2.0.0-beta.4.0.20241112120701-034e449c6e78 to 2.2.0 by @​dependabot[bot] in #​4501

New Contributors

• @​mplzik made their first contribution in #​4476
• @​mustansir14 made their first contribution in #​4484
• @​dulanting made their first contribution in #​4497
• @​kmgv made their first contribution in #​4486

Full Changelog: trufflesecurity/trufflehog@v3.90.8...v3.90.9

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[github-actions]

🚀 Integration Test Results

npm-pr-version action test:

• ✅ Version generation: 0.0.0-PR-33--14c215f
• ✅ package.json update: Successful
• ✅ Format validation: Passed

The action is working correctly! 🎉

[github-actions]

🧪 Test Results

✅ All tests passed successfully!

• Linting: ✅ Passed
• Unit tests: ✅ Passed
• Integration tests: ✅ Passed

[github-actions]

Claude encountered an error —— View job

---

I'll analyze this and get back to you.