What's Changed [INS-355] Added Hashicorp vault token detector by @MuneebUllahKhan222 in #4819 Tighten JiraToken v1 verification by @shahzadhaider1 in #5122 [INT-718] Add TargetNotFoundError for targeted scan targets missing from the source by @bill-rich in #5123 Fix GitLab project metadata cache and switch to LRU by @kashifkhan0771 in #4727 Log analyze errors for Anthropic Analyzer by @kashifkhan0…
What's Changed feat: add OpenRouter detector by @McPatate in #4500 Integrations fully codeowns detectors by @trufflesteeeve in #5104 [INS-332] Add New Relic Insights Insert key detector by @mustansir14 in #4778 [INS-351] Added Duffel Token Detector by @MuneebUllahKhan222 in #4795 [INS-341] Added Shippo detector by @MuneebUllahKhan222 in #4820 [INS-467] Add IPinfo detector to default detectors list…
What's Changed removed "unauthorized" as exception for rotated graphana secrets by @jordanTunstill in #5068 fix(azuresastoken): match SAS tokens regardless of parameter order by @genisis0x in #5043 Add prometheus metrics for engine channels and workers by @mcastorina in #5095 [INS-465] Skip unverified JWT Detector results when feature flag is enabled by @MuneebUllahKhan222 in #5072 [INS-334] Octop…
What's Changed fix(sources/filesystem): order resume comparison by path component by @genisis0x in #5041 test(handlers): point APK test fixture at trufflehog-test-assets by @amanfcp in #5053 fixed regex typo that was causing conf uuid's to be surfaced as non-live atlassian secrets. by @jordanTunstill in #5029 Fix GitHub App cross-org member enumeration using per-installation tokens by @dustin-deck…
What's Changed Enigma detector enhance verification to prevent false verified findings by @shahzadhaider1 in #5011 fix: scan files with lines exceeding bufio's default 64 KB token limit by @MuneebUllahKhan222 in #5022 fix(postgres): honor ignore tags for default port URLs by @Dawn-Fighter in #4968 Move to github.com/moby/moby/client from docker/docker by @trufflesteeeve in #4987 fix: avoid termina…
What's Changed [INS-461] Add test to ensure new detectors are registered in defaults.go by @mustansir14 in #4915 [INS-455] Unify common logic in Atlassian Data Center detectors by @mustansir14 in #4907 fix(github): cache repo info under original URL on redirect by @kashifkhan0771 in #4958 Added GitLab OAuth Detector by @shahzadhaider1 in #4729 Box Detector: Extract Subject ID for Analyzer Integrat…
What's Changed [INS-461] Add test to ensure new detectors are registered in defaults.go by @mustansir14 in #4915 [INS-455] Unify common logic in Atlassian Data Center detectors by @mustansir14 in #4907 fix(github): cache repo info under original URL on redirect by @kashifkhan0771 in #4958 Added GitLab OAuth Detector by @shahzadhaider1 in #4729 Box Detector: Extract Subject ID for Analyzer Integrat…
What's Changed Renamed AnypointOAuth2 detector's AnalysisInfo keys to make it consistent with its Analyzer by @MuneebUllahKhan222 in #4906 Rename AnalysisInfo field to SecretParts on detectors.Result by @mcastorina in #4911 Document SecretParts contract in detector-authoring docs by @mcastorina in #4912 Add a static check for detectors that don't set SecretParts by @mcastorina in #4913 Populate Se…
What's Changed Revert "[INS-397] Fix git version parser panic on non-numeric patch versions" by @trufflesteeeve in #4903 Full Changelog: v3.95.1...v3.95.2
What's Changed [INS-444] Fix verification logic in Mesibo detector by @mustansir14 in #4884 Full Changelog: v3.95.0...v3.95.1
What's Changed Upgrade golangci-lint in CI runner and Makefile by @amanfcp in #4861 Deprecate SquareUp Detector by @nabeelalam in #4855 [INS-397] Fix git version parser panic on non-numeric patch versions by @shahzadhaider1 in #4882 Fix Bitbucket line highlighting URLs by @shahzadhaider1 in #4854 [INS-403] Support Custom endpoint config in hashicorpvaultauth Detector by @MuneebUllahKhan222 in #482…
What's Changed Add release bot workflow by @bryanbeverly in #4835 handle AADSTS50173 as explicit revocation signal for azure refresh tokens by @jordanTunstill in #4842 Add AnalysisInfo to verified results by @hxnyk in #4862 Add nil check and error context to GitHub analyzer by @johnelliott in #4858 [CSM-1857] Fix expired Azure secrets being silently dropped by @dipto-truffle in #4845 Add HTML deco…
What's Changed Skip TestAPKHandler by @shahzadhaider1 in #4841 fix: replace release-guard workflow with revert-latest job by @sysread in #4838 Deprecated GoogleAPIKey Detector by @nabeelalam in #4853 todoist: replace deprecated verification endpoint by @rai1612 in #4828 Add Shopify OAuth Detector by @amanfcp in #4738 [INS-425] Updated google.golang.org/grpc v1.78.0 --> v1.79.3 by @MuneebUllahKhan2…