Repository navigation
build(deps): bump trufflesecurity/trufflehog from 3.96.0 to 3.99.7 - #95
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) from 3.96.0 to 3.99.7. - [Release notes](https://github.com/trufflesecurity/trufflehog/releases) - [Commits](trufflesecurity/trufflehog@v3.96.0...v3.99.7) --- updated-dependencies: - dependency-name: trufflesecurity/trufflehog dependency-version: 3.99.7 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
the
dependencies
|
Important Review skippedBot user detected. To trigger a single review, invoke the
 |
 |
|
Overall Grade |
Security Reliability Complexity Hygiene Coverage  |
Code Review Summary
| Analyzer | Status | Updated (UTC) | Details |
|---|---|---|---|
| Code coverage |  |
Oct 26, 2026 5:56p.m. | Review ↗ |
| Secrets | |
Oct 26, 2026 5:56p.m. | Review ↗ |
| JavaScript | |
Oct 26, 2026 5:56p.m. | Review ↗ |
Code Coverage Summary
| Language | Line Coverage (Overall) |
|---|---|
| Aggregate | 74.6% |
| Javascript | 74.6% |
➟ Additional coverage metrics may have been reported. See full coverage report ↗
Important
AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.
Bumps trufflesecurity/trufflehog from 3.96.0 to 3.99.7.
Release notes
Sourced from trufflesecurity/trufflehog's releases.
... (truncated)
Commits
31ce31eFix 7z and rar panics in the archive handler and log recovered panic stacks (...50bc667feat(detectors): add Infisical service token detector (#5445)4723140feat(detectors): add Fireworks AI API key detector (#5447)8276bc4ci(lint): pin the semgrep container image by digest (#5245)f6984beAdd xAI analyzer (#5456)282085cfix(detectors/anypointoauth2): stop treating HTTP 422 as verified (#5386)b1bb823Fix --include-wikis help typo and huggingface README description (#5471)fd43a88Keep GoReleaser temp files off the tmpfs /tmp in releases (#5473)3bd461fsecurity: bump andybalholm/brotli to v1.2.7 (CVE-2026-111497) (#5472)d6ea4a5Clean up Filesystem source logging for per-source debug (#5465)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)