GitHub/trufflehog
1
0
Fork 0
mirror of https://github.com/trufflesecurity/trufflehog.git synced 2026-06-15 13:24:37 +00:00
Code Issues Packages Projects Releases Wiki Activity
4,379 Commits 228 Branches 350 Tags
hackathon/ocr-handler
Commit Graph
112 Commits
Author SHA1 Message Date
Bryan Beverly e48f9039c8 Add release bot workflow for trufflehog releases (#4835) 
Triggers on release publish events to run the release bot, which
generates release notes using GitHub, Jira, and AI services.

Adapted from the thog repo workflow with trufflehog-specific adjustments:
repository argument set to trufflehog, environment requirement removed
in favor of a repo-level secret, permissions restricted, and a fork
guard added for consistency with other trufflehog workflows.

Made-with: Cursor
 2026-04-01 09:50:25 -07:00
Jeff Ober 6171fa9f66 fix: replace release-guard workflow with revert-latest job (#4838) 
Also adds comments to:
- .goreleaser.yml: explains why make_release is set to false
- .github/workflows/release.yml: document release/artifact state at each step
 2026-03-27 12:37:28 -06:00
Bill Rich e976603057 GH_TOKEN needed for gh (#4772) 2026-02-26 12:28:26 -08:00
Bill Rich 7cdc7ef878 Fix race condition in release process (#4766) 
* Close window between release and artifact creation

* Use alternate method of falling back

* Remove unused env vars
 2026-02-26 11:28:23 -08:00
j2fw 112f48f5cb Remove gh-actions approval workflows in favor of new repo setting (#4525) 
* Remove gh-actions approval workflows in favor of new repo setting
 2025-11-05 08:15:03 -08:00
j2fw da5081c072 use pr-approval-check@main (#4531) 
* use pr-approval-check@main
 2025-11-03 15:38:23 -08:00
j2fw cff9dd2945 pr-approval-check: use separate workflow to check approvals (#4530) 2025-11-03 15:29:58 -08:00
j2fw 0f2d8031a6 Switch to an outside action for pr approval (#4523) 2025-10-30 22:03:35 -07:00
j2fw e4734529d0 pr approval workflow: use pull_request_target (#4522) 2025-10-30 14:31:12 -07:00
Dustin DeckerCursor AgentJeff W
 		189cd9a683 Require product eng approval for PRs (#4478) 
* feat: Add PR approval check for product-eng team

Co-authored-by: dustin <dustin@trufflesec.com>

* Checkpoint before follow-up message

Co-authored-by: dustin <dustin@trufflesec.com>

* Refactor: Expand PR approval to include child teams

Co-authored-by: dustin <dustin@trufflesec.com>

* poke

* pr-approval-check: refactor, fix pagination, fix approval logic (#4519)

* Update README.md

* use secret

---------

Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: Jeff W <233818084+j2fw@users.noreply.github.com>
 2025-10-30 11:44:05 -07:00
renovate[bot] ad351e3531 chore(deps): update sigstore/cosign-installer action to v3.9.2 (#4337) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2025-07-25 10:31:06 -07:00
renovate[bot] ab136f6e9d chore(deps): update sigstore/cosign-installer action to v3.9.1 (#4308) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2025-07-10 08:19:51 -07:00
renovate[bot] 4a480c102b chore(deps): update sigstore/cosign-installer action to v3.8.2 (#4212) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2025-06-06 22:31:19 -07:00
Eng Zer Jun fa703eacf6 chore: run setup-go after checkout (#4143) 
"Restore cache failed: Dependencies file is not found in
/home/runner/work/trufflehog/trufflehog. Supported file pattern: go.sum"

Signed-off-by: Eng Zer Jun <engzerjun@gmail.com>
 2025-05-19 16:18:13 -07:00
renovate[bot] 1a7c199560 chore(deps): update sigstore/cosign-installer action to v3.8.1 (#4021) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2025-04-08 07:28:34 -07:00
renovate[bot] 9a59a7a52a chore(deps): update dependency go (#3958) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2025-04-01 20:45:42 -07:00
Dustin Decker f19d6e5d2b Compress release with UPX (#3456) 
* Compress release with UPX

* Allow UPX to fail, and use goreleaser-pro

* update
 2025-02-05 15:33:44 -06:00
Richard Gomez 1571f92baa Run detector tests from test workflow #3839 
#3773 missed one
 2025-01-14 09:16:35 -05:00
renovate[bot] 33879e4368 chore(deps): update jaxxstorm/action-install-gh-release action to v1.14.0 (#3672) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-11-26 10:32:39 -08:00
Oleksandr Redko c38064d9f0 chore: fix typos in comments and tests; enable misspell (#3573) 2024-11-16 15:10:12 -08:00
renovate[bot] 3365260a4e chore(deps): update jaxxstorm/action-install-gh-release action to v1.13.0 (#3599) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-11-14 10:36:45 -08:00
Bob Idleandahrav 409beeb18b golangci-lint: replace exportloopref with copyloopvar and remove the copy of the 'for' variables (#3591) 
* fix: replace golangci-lint exportloopref with copyloopvar

* fix: remove copy of the 'for' variables

---------

Co-authored-by: ahrav <ahravdutta02@gmail.com>
 2024-11-13 12:52:04 -08:00
renovate[bot] 3a87188b5c chore(deps): update mikepenz/action-junit-report action to v5 (#3553) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-11-13 12:37:05 -08:00
Zachary Rice 3e12bcb15c rm snifftest (#3527) 2024-10-29 13:00:00 -05:00
Dustin Decker b66c167074 Revert "Compress release with UPX (#3445)" (#3455) 
This reverts commit c46d52b11a.
 2024-10-17 09:12:46 -07:00
Dustin Decker c46d52b11a Compress release with UPX (#3445) 2024-10-17 08:04:37 -07:00
Dustin DeckerandAhrav Dutta 59c615a5e9 Fix git binary handling and add a smoke test (#3379) 
* Fix git binary handling and add a smoke test

* hide stdout

* add failure case to smoke test

* run again with deadlock fix

* Add logic to drain reader in the event of an error

* add tests

* be picky

* set author identity

* suppress linter

---------

Co-authored-by: Ahrav Dutta <ahrav.dutta@trufflesec.com>
 2024-10-07 13:55:07 -07:00
renovate[bot] d590129c83 chore(deps): update sigstore/cosign-installer action to v3.7.0 (#3368) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-10-05 09:28:03 -07:00
ahrav 5f3b4521d7 [chore] - update Go version to 1.23.0 (#3340) 
* update Go version to 1.23.0

* update go version across the rest of the project
 2024-09-27 09:55:15 -07:00
Zachary Rice 8cb5e98804 disable secret scans for community PRs (#3343) 
* disable secret scans for community PRs

* check if fork too
 2024-09-27 11:55:04 -05:00
Dustin Decker 9089fb7df1 Include all detector tests for captain (#3329) 
* Use captain for test aggregation

* no retries

* include all detector tests
 2024-09-24 12:04:56 -07:00
Dustin Decker 3b0f2fcf39 Use captain for test aggregation (#3328) 
* Use captain for test aggregation

* no retries
 2024-09-24 11:51:52 -07:00
Miccah bc2d00710a [chore] Skip analyzer tests in CI (#3270) 2024-09-06 14:09:13 -07:00
renovate[bot] 0ba37dbbd1 chore(deps): update sigstore/cosign-installer action to v3.6.0 (#3211) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-13 11:17:40 -07:00
Dustin Decker 25b01019b3 Add permissions lookup tables (#3125) 
* OpenAI LUT

* github LUT

* cleanup

* add test

* update

* update

* update openai

* update

* Add Analyze interface to Twilio (#3128)

* Add Analyze interface to Twilio

* add readme
 2024-07-31 13:01:29 -07:00
Shunsuke Suzuki 68ec7a28a2 chore: fix .goreleaser.yml and goreleaser usage for goreleaser v2 (#3073) 2024-07-18 07:23:59 -07:00
renovate[bot] 72e9e9a3b4 chore(deps): update goreleaser/goreleaser-action action to v6 (#3051) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-07-08 08:52:44 -07:00
Richard Gomez f210767394 ci(detector-tests): test detectors if integration fails (#2994) 2024-06-24 13:19:43 -05:00
Richard Gomez 9176e25a26 ci(detector-tests): disambiguate step names (#2989) 2024-06-20 11:43:11 -05:00
Dustin Decker d8e7fa983d Go should be installed before codeql initializes (#2919) 2024-06-05 16:46:58 -04:00
Zachary Rice 8d1fa42360 switch to filesystem and specific tag when performance testing (#2846) 
* switch to filesystem and specific tag when performance testing

* good ol gha debugging

* Update performance.yml
 2024-05-14 11:57:01 -05:00
Zachary Rice 806c06406a Bump up performance test threshold to 50% (#2839) 2024-05-13 16:53:08 -05:00
renovate[bot] 8ef15e9cdc chore(deps): update golangci/golangci-lint-action action to v6 (#2801) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-05-07 20:23:52 -07:00
renovate[bot] a5f04e65f7 chore(deps): update golangci/golangci-lint-action action to v5 (#2744) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-04-24 20:25:49 -07:00
renovate[bot] a7699f8c24 chore(deps): update sigstore/cosign-installer action to v3.5.0 (#2695) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-04-10 17:56:46 -07:00
Dustin Decker 41d58739bd Use go 1.22 (#2599) 
* Use go 1.22

* install non-pro goreleaser

* increment go-version

* build w/ go 1.22 for codeql
 2024-03-22 08:23:04 -07:00
Richard Gomez f5025fd382 Add --results flag (#2372) 
This is a follow-up to #2107 and #2335. It adds a new (hidden) --results flag that allows a user to show any combination of verified, unverified, and indeterminate secrets.
 2024-03-15 10:19:31 -04:00
renovate[bot] af7f81185b chore(deps): update golangci/golangci-lint-action action to v4 (#2445) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-12 19:17:05 -08:00
renovate[bot] 939aca2e69 chore(deps): update github/codeql-action action to v3 (#2444) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-12 19:16:48 -08:00
renovate[bot] 774c48545e chore(deps): update actions/setup-go action to v5 (#2443) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-12 19:15:50 -08:00