Bump trufflesecurity/trufflehog from f4045259751e6a6566fc9b88083f04b914f324d5 to a5b09951c1eaf6834730dd10db67cf5d8b71fffa

[dependabot]

Bumps trufflesecurity/trufflehog from f4045259751e6a6566fc9b88083f04b914f324d5 to a5b09951c1eaf6834730dd10db67cf5d8b71fffa.

Changelog

Sourced from trufflesecurity/trufflehog's changelog.

version: 2 builds:

• binary: trufflehog ldflags:
  • -X 'github.com/trufflesecurity/trufflehog/v3/pkg/version.BuildVersion={{ .Version }}' env: [CGO_ENABLED=0] goos:
  • linux
  • windows
  • darwin goarch:
  • amd64
  • arm64 dockers:
• image_templates: ["trufflesecurity/{{ .ProjectName }}:{{ .Version }}-amd64"] dockerfile: Dockerfile.goreleaser extra_files:
  • entrypoint.sh use: buildx build_flag_templates:
  • --platform=linux/amd64
  • --label=org.opencontainers.image.title={{ .ProjectName }}
  • --label=org.opencontainers.image.description={{ .ProjectName }}
  • --label=org.opencontainers.image.url=https://github.com/trufflesecurity/{{ .ProjectName }}
  • --label=org.opencontainers.image.source=https://github.com/trufflesecurity/{{ .ProjectName }}
  • --label=org.opencontainers.image.version={{ .Version }}
  • --label=org.opencontainers.image.revision={{ .FullCommit }}
  • --label=org.opencontainers.image.licenses=AGPL-3.0
• image_templates: ["trufflesecurity/{{ .ProjectName }}:{{ .Version }}-arm64v8"] goarch: arm64 dockerfile: Dockerfile.goreleaser extra_files:
  • entrypoint.sh use: buildx build_flag_templates:
  • --platform=linux/arm64/v8
  • --label=org.opencontainers.image.title={{ .ProjectName }}
  • --label=org.opencontainers.image.description={{ .ProjectName }}
  • --label=org.opencontainers.image.url=https://github.com/trufflesecurity/{{ .ProjectName }}
  • --label=org.opencontainers.image.source=https://github.com/trufflesecurity/{{ .ProjectName }}
  • --label=org.opencontainers.image.version={{ .Version }}
  • --label=org.opencontainers.image.revision={{ .FullCommit }}
  • --label=org.opencontainers.image.licenses=AGPL-3.0
• image_templates: ["ghcr.io/trufflesecurity/{{ .ProjectName }}:{{ .Version }}-amd64"] dockerfile: Dockerfile.goreleaser extra_files:
  • entrypoint.sh use: buildx build_flag_templates:
  • --platform=linux/amd64

... (truncated)

Commits

• a5b0995 [feat] - Add SizedLRU Cache (#3344)
• 350db3a [bug] - Recover From Panic During Archive Handling (#3348)
• 3dff283 [fix] - Use Parent Context in Azure Detector (#3346)
• 5f3b452 [chore] - update Go version to 1.23.0 (#3340)
• 8cb5e98 disable secret scans for community PRs (#3343)
• 49cb9d3 Enhanced the eraser detector to handle new status code from verification API ...
• ee51fc5 [feat] - Add Generic Hasher Interface with Blake2b Implementation (#3337)
• 0328a19 [fix] Move detector initialization to DefaultDetectors function (#3341)
• f3630da Improve process cleanup (#3339)
• 6d022e7 fix(decoder): prevent race (#3031)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)