This release adds 3 notable features for engineering teams evaluating rollout.
Published 1mo
Vulnerability Scanning
✓ No known CVEs patched
✓ No known CVEs patched in this version
Topics
credentials
security
dynamic-analysis
precommit
scanning
secret
+4 more
secrets-management
security-tools
trufflehog
verification
Affected surfaces
auth
Summary
AI summaryFixes line‑length scanning, honors ignore tags in PostgreSQL URLs, and surfaces S3 bucket listing failures.
Full changelog
What's Changed
- Enigma detector enhance verification to prevent false verified findings by @shahzadhaider1 in https://github.com/trufflesecurity/trufflehog/pull/5011
- fix: scan files with lines exceeding bufio's default 64 KB token limit by @MuneebUllahKhan222 in https://github.com/trufflesecurity/trufflehog/pull/5022
- fix(postgres): honor ignore tags for default port URLs by @Dawn-Fighter in https://github.com/trufflesecurity/trufflehog/pull/4968
- Move to github.com/moby/moby/client from docker/docker by @trufflesteeeve in https://github.com/trufflesecurity/trufflehog/pull/4987
- fix: avoid terminal probes before CLI output by @Hackerchen716 in https://github.com/trufflesecurity/trufflehog/pull/4994
- Update test containers dependency by @trufflesteeeve in https://github.com/trufflesecurity/trufflehog/pull/4978
- Re-host pkg/handlers JSON test fixtures under the org by @amanfcp in https://github.com/trufflesecurity/trufflehog/pull/5023
- [INS-465] Add datadogapikey detector to defaults.go by @mustansir14 in https://github.com/trufflesecurity/trufflehog/pull/4969
- [INS-470] Add Tly detector to defaults.go, gate it behind feat flag and update its verification logic by @MuneebUllahKhan222 in https://github.com/trufflesecurity/trufflehog/pull/5006
- [INS-473] Add wit detector to defaults.go, gate it behind feat flag and update verification logic by @MuneebUllahKhan222 in https://github.com/trufflesecurity/trufflehog/pull/5008
- Updating Klaviyo PK new format by @breetan in https://github.com/trufflesecurity/trufflehog/pull/5009
- Restructure Klaviyo detector pattern tests by @martinlocklear in https://github.com/trufflesecurity/trufflehog/pull/5026
- Replace Renovate config with shared preset (high-risk tier) by @bryanbeverly in https://github.com/trufflesecurity/trufflehog/pull/4992
- set redacted value to last 4 characters of secret, to match how the secret type admin interface displays it by @jordanTunstill in https://github.com/trufflesecurity/trufflehog/pull/5027
- GitHub finegrained analyzer was improperly handling errors by @dustin-decker in https://github.com/trufflesecurity/trufflehog/pull/4498
- [INS-469] Added Rev detectors to defaults.go and gated it behind feature flag by @MuneebUllahKhan222 in https://github.com/trufflesecurity/trufflehog/pull/5005
- Fix Renovate lookup: update setup-captain version comment by @bryanbeverly in https://github.com/trufflesecurity/trufflehog/pull/4999
- [INS-472] [INS-515] Add user detector to defaults.go, gate it behind feat flag, update verification logic and add custom ep configuration by @MuneebUllahKhan222 in https://github.com/trufflesecurity/trufflehog/pull/5007
- Fix: Resolve known dedup issues in notifierWorker by @MuneebUllahKhan222 in https://github.com/trufflesecurity/trufflehog/pull/5028
- fix(dropbox): prevent long sl.u. tokens from being truncated by @lukem-ts in https://github.com/trufflesecurity/trufflehog/pull/5012
- fix: add filetype=sdist param to pypi detector by @lukem-ts in https://github.com/trufflesecurity/trufflehog/pull/4988
- Handlers - Embed small HTTP test fixtures by @amanfcp in https://github.com/trufflesecurity/trufflehog/pull/5001
- S3: surface bucket listing failures and fix multi-role object count by @shahzadhaider1 in https://github.com/trufflesecurity/trufflehog/pull/5035
New Contributors
- @Dawn-Fighter made their first contribution in https://github.com/trufflesecurity/trufflehog/pull/4968
- @Hackerchen716 made their first contribution in https://github.com/trufflesecurity/trufflehog/pull/4994
- @breetan made their first contribution in https://github.com/trufflesecurity/trufflehog/pull/5009
- @lukem-ts made their first contribution in https://github.com/trufflesecurity/trufflehog/pull/5012
Full Changelog: https://github.com/trufflesecurity/trufflehog/compare/v3.95.4...v3.95.6
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Earlier breaking changes
- v3.95.3 AnalysisInfo field renamed to SecretParts on Result API
Beta — feedback welcome: [email protected]