chore(deps): update docker (patch)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
docker.io/library/alpine	final	patch	3.22.1 → 3.22.2
docker.io/library/golang	stage	patch	1.25.1 → 1.25.5
docker.io/trufflesecurity/trufflehog	stage	patch	3.90.3 → 3.90.13

---

Release Notes

trufflesecurity/trufflehog (docker.io/trufflesecurity/trufflehog)

v3.90.13

Compare Source

What's Changed

• Require product eng approval for PRs by @​dustin-decker in #​4478
• pr approval workflow: use pull_request_target by @​j2fw in #​4522
• Switch to an outside action for pr approval by @​j2fw in #​4523
• pr-approval-check: use separate workflow to check approvals by @​j2fw in #​4530
• test multi-workflow pr approval check by @​j2fw in #​4531
• Implemented Graphql requests for Github PR's, Issues and comments scanning by @​kashifkhan0771 in #​4431
• chore: fix feature support to append user agent suffix by @​dmdhrumilmistry in #​4520
• Updated GDrive proto to support On-Prem Scanning by @​kashifkhan0771 in #​4539
• Track chunk size by source type by @​rosecodym in #​4543

New Contributors

• @​dmdhrumilmistry made their first contribution in #​4520

Full Changelog: trufflesecurity/trufflehog@v3.90.12...v3.90.13

v3.90.12

Compare Source

What's Changed

• Updated Docker source with new test cases and README by @​kashifkhan0771 in #​4481
• Comment out broken CircleCI integration test by @​trufflesteeeve in #​4505
• Fix "skipping binary file" logging to show actual file name by @​mariduv in #​4509
• Refactored circleci source test cases by @​kashifkhan0771 in #​4506
• added ability to run github-experimental against private repos by @​joeleonjr in #​4508
• explicit repositories now bypass wantRepo() filtering entirely. added ctx to newConnector by @​jordanTunstill in #​4507
• Remove include repos by @​jordanTunstill in #​4469
• Remove depaware by @​rosecodym in #​4515

Full Changelog: trufflesecurity/trufflehog@v3.90.11...v3.90.12

v3.90.11

Compare Source

What's Changed

• bump rardecode by @​rosecodym in #​4503

Full Changelog: trufflesecurity/trufflehog@v3.90.10...v3.90.11

v3.90.10

Compare Source

What's Changed

• Local Git Config Sanitization by @​joeleonjr in #​4502

Full Changelog: trufflesecurity/trufflehog@v3.90.9...v3.90.10

v3.90.9

Compare Source

What's Changed

• Return non-zero exit code if an error occurs during a scan. by @​mplzik in #​4476
• Fix: SonarCloud Verification Logic by @​shahzadhaider1 in #​4482
• Clarify what 'unknown' means by @​dustin-decker in #​4477
• Proto update to support scanning confluence comments by @​mustansir14 in #​4484
• Fix SSH schema error executing git clone by @​shahzadhaider1 in #​4488
• Detect Organization ID to pass into AnalysisInfo for Atlassian Detector by @​mustansir14 in #​4480
• Add support for Account API Token verification in Postmark Detector by @​mustansir14 in #​4495
• refactor: use b.Loop() to simplify the code and improve performance by @​dulanting in #​4497
• Fix wrong line number in private key detector (#​4485) by @​kmgv in #​4486
• Reduce GitHub V1 Detector False Positives by @​shahzadhaider1 in #​4494
• Bump github.com/nwaples/rardecode/v2 from 2.0.0-beta.4.0.20241112120701-034e449c6e78 to 2.2.0 by @​dependabot[bot] in #​4501

New Contributors

• @​mplzik made their first contribution in #​4476
• @​mustansir14 made their first contribution in #​4484
• @​dulanting made their first contribution in #​4497
• @​kmgv made their first contribution in #​4486

Full Changelog: trufflesecurity/trufflehog@v3.90.8...v3.90.9

v3.90.8

Compare Source

What's Changed

• Pre-filter GitHub v1 findings to prevent large numbers of validation requests by @​trufflesteeeve in #​4468

Full Changelog: trufflesecurity/trufflehog@v3.90.7...v3.90.8

v3.90.7

Compare Source

What's Changed

• Fix nondeterminism in custom detectors by @​bradlarsen in #​4446
• fix(deps): update aws-sdk-go-v2 monorepo by @​renovate[bot] in #​4433
• fix(deps): update module github.com/couchbase/gocb/v2 to v2.11.0 by @​renovate[bot] in #​4455
• fix(deps): update module google.golang.org/protobuf to v1.36.9 by @​renovate[bot] in #​4456
• fix(deps): update module github.com/brianvoe/gofakeit/v7 to v7.6.0 by @​renovate[bot] in #​4457
• [Feature] Fixed And Updated FlightLabs API Detector by @​nabeelalam in #​4393
• Revert "Improved and fixed copper detector (#​4394)" by @​camgunz in #​4470
• Add metrics to SaneHTTPClient by @​amanfcp in #​4471

Full Changelog: trufflesecurity/trufflehog@v3.90.6...v3.90.7

v3.90.6

Compare Source

What's Changed

• Added support for indeterminate verification for letter Q detectors by @​patidartanay in #​4398
• [Detector] rippling detector for phrase api tokens by @​SyedAliHamad in #​4348
• Added explicit secrets manager write flag to Bitbucket source proto and generate new files by @​casey-tran in #​4403
• [Feature] Updated Dotmailer Detector To Dotdigital by @​nabeelalam in #​4331
• Add support for AWS account allow and deny lists by @​dustin-decker in #​4407
• Enable cloning repository to a specified location with retention option by @​kashifkhan0771 in #​4408
• fix(deps): update module google.golang.org/protobuf to v1.36.8 by @​renovate[bot] in #​4397
• fix(deps): update module cloud.google.com/go/storage to v1.56.1 by @​renovate[bot] in #​4412
• added flyio detector by @​lonmarsDev in #​2381
• Added a dedicated optional flag to ignore gists during scan by @​kashifkhan0771 in #​4423
• Fix git tests if run with global commit.gpgsign=true by @​mariduv in #​4415
• Recover logger if wrapped by a non-logging context implementation by @​mcastorina in #​4406
• fix(deps): update aws-sdk-go-v2 monorepo by @​renovate[bot] in #​4422
• fix(deps): update module github.com/gabriel-vasile/mimetype to v1.4.10 by @​renovate[bot] in #​4424
• [GitHub] Add a GraphQL client to the connector by @​rgmz in #​3837
• Added support for additional validation rules in custom detector by @​kashifkhan0771 in #​4413
• Ignore known common prefix matches for Github V1 detector by @​kashifkhan0771 in #​4379
• Fix error propagation and a typo in verification logic by @​bradlarsen in #​4427
• [Feature] Added Detector for the Photoroom API by @​nabeelalam in #​4414
• Scan Github Private Repositories With Token by @​kashifkhan0771 in #​4426
• fix(deps): update module github.com/brianvoe/gofakeit/v7 to v7.5.1 by @​renovate[bot] in #​4425
• fix(deps): update module github.com/jedib0t/go-pretty/v6 to v6.6.8 by @​renovate[bot] in #​4396
• Fix legacy json flag for Github and Gitlab private repos by @​shahzadhaider1 in #​4386
• Changes to fix Enterprise UI filtering of Github Hosted Scanner Repositories to Include by @​jordanTunstill in #​4430
• pkg: fix some typos in comment by @​vetclippy in #​4440
• Added feature flag to configure projects per page in gitlab enumeration by @​kashifkhan0771 in #​4437

New Contributors

• @​patidartanay made their first contribution in #​4398
• @​bradlarsen made their first contribution in #​4427
• @​vetclippy made their first contribution in #​4440

Full Changelog: trufflesecurity/trufflehog@v3.90.5...v3.90.6

v3.90.5

Compare Source

What's Changed

• Fixed and improved currentsapi detector by @​kashifkhan0771 in #​4391
• Improved and fixed copper detector by @​kashifkhan0771 in #​4394
• fix(deps): update module github.com/bradleyfalzon/ghinstallation/v2 to v2.16.0 by @​renovate[bot] in #​4342
• fix(deps): update module github.com/sendgrid/sendgrid-go to v3.16.1+incompatible by @​renovate[bot] in #​4232
• Utf16 bom support by @​joeleonjr in #​4326
• Add additional unicode escape support by @​jltrfl in #​4296
• Update PreCommit.md with audit mode details by @​joeleonjr in #​4280
• Update proto definitions for custom bitbucket oauth by @​casey-tran in #​4390

New Contributors

• @​jltrfl made their first contribution in #​4296

Full Changelog: trufflesecurity/trufflehog@v3.90.4...v3.90.5

v3.90.4

Compare Source

What's Changed

• Disabled besnappy detector by @​kashifkhan0771 in #​4363
• Expanded test coverage for binary content by @​kashifkhan0771 in #​4332
• Fixed syslog source panic on invalid or chunked input by @​kashifkhan0771 in #​4366
• Improve Bitfinex Detector - Implemented API-Based Secret Validation by @​shahzadhaider1 in #​4368
• [SCAN-81] Report ChunkUnit Panics by @​mariduv in #​4367
• Oss 133 new detector vault approle auth for hashicorp by @​SyedAliHamad in #​4362
• fix(deps): update module github.com/charmbracelet/glamour to v0.10.0 by @​renovate[bot] in #​4345
• Add private key id to GCP metadata by @​dustin-decker in #​4361
• fixed minor grammatical and punctuation issues by @​shahzadhaider1 in #​4369
• Refactored caflou detector by @​kashifkhan0771 in #​4372
• Add option to skip binary files during filesystem source scanning by @​dustin-decker in #​4376
• Improved and fixed couchbase detector by @​kashifkhan0771 in #​4383
• Fixed and improved Clickhelp detector by @​kashifkhan0771 in #​4384
• Fix error-wrapping for callback in common.RecoverWithHandler by @​mariduv in #​4380
• Fixed gitlab detector by @​kashifkhan0771 in #​4371
• [Feature] Fixed And Updated Fibery Detecor by @​nabeelalam in #​4385
• added User to proto by @​jordanTunstill in #​4378

New Contributors

• @​mariduv made their first contribution in #​4367

Full Changelog: trufflesecurity/trufflehog@v3.90.3...v3.90.4

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.