Skip to content

chore(deps): bump trufflesecurity/trufflehog from 3.94.1 to 3.94.2#8091

Merged
akarnokd merged 1 commit into4.xfrom
dependabot/github_actions/trufflesecurity/trufflehog-3.94.2
Apr 2, 2026
Merged

chore(deps): bump trufflesecurity/trufflehog from 3.94.1 to 3.94.2#8091
akarnokd merged 1 commit into4.xfrom
dependabot/github_actions/trufflesecurity/trufflehog-3.94.2

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 2, 2026

Bumps trufflesecurity/trufflehog from 3.94.1 to 3.94.2.

Release notes

Sourced from trufflesecurity/trufflehog's releases.

v3.94.2

What's Changed

New Contributors

Full Changelog: trufflesecurity/trufflehog@v3.94.1...v3.94.2

Commits
  • 6bd2d14 Re-enabled TestAPKHandler test and updated artifact url (#4856)
  • 681b305 Updated google.golang.org/grpc v1.78.0 --> v1.79.3 (#4852)
  • e81c0fc Add Shopify OAuth Detector (#4738)
  • 03acc78 todoist: replace deprecated verification endpoint (#4828)
  • bfaa370 updated detectors.proto and made protos (#4853)
  • 6171fa9 fix: replace release-guard workflow with revert-latest job (#4838)
  • 61d57c1 skipping TestAPKHandler because the apk file being used in this test is unava...
  • See full diff in compare view

@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code labels Apr 2, 2026
@github-actions
Copy link
Copy Markdown

github-actions bot commented Apr 2, 2026

🐷 TruffleHog + Entropy Beauty Scan

Average entropy of changed code: 4.753 bits/char
Verdict: ⚠️ Consider review — entropy outside sweet spot

Changed files entropy:

.github/workflows/scorecard.yml: 4.753

✅ No secrets or suspicious high-entropy strings found.

Mid-4 beauty heuristic in action — powered by our entropy chats! 😊

@akarnokd
Copy link
Copy Markdown
Member

akarnokd commented Apr 2, 2026

@dependabot recreate

Bumps [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) from 3.94.1 to 3.94.2.
- [Release notes](https://github.com/trufflesecurity/trufflehog/releases)
- [Commits](trufflesecurity/trufflehog@586f66d...6bd2d14)

---
updated-dependencies:
- dependency-name: trufflesecurity/trufflehog
  dependency-version: 3.94.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/github_actions/trufflesecurity/trufflehog-3.94.2 branch from 19be642 to e7d091c Compare April 2, 2026 17:10
@github-actions
Copy link
Copy Markdown

github-actions bot commented Apr 2, 2026

🐷 TruffleHog + Entropy Beauty Scan

Average entropy of changed code: 4.753 bits/char
Verdict: ⚠️ Consider review — entropy outside sweet spot

Changed files entropy:

.github/workflows/scorecard.yml: 4.753

✅ No secrets or suspicious high-entropy strings found.

Mid-4 beauty heuristic in action — powered by our entropy chats! 😊

@akarnokd akarnokd merged commit 377194b into 4.x Apr 2, 2026
9 checks passed
@dependabot dependabot bot deleted the dependabot/github_actions/trufflesecurity/trufflehog-3.94.2 branch April 2, 2026 17:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant