Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(github-release): update pre-commit hook zricethezav/gitleaks to v8.24.0 #108

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Sep 14, 2024

This PR contains the following updates:

Package Type Update Change
zricethezav/gitleaks repository minor v8.18.4 -> v8.24.0

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.


Release Notes

zricethezav/gitleaks (zricethezav/gitleaks)

v8.24.0

Compare Source

Changelog

v8.23.3

Compare Source

Changelog

v8.23.2

Compare Source

Changelog

v8.23.1

Compare Source

Changelog

v8.23.0

Compare Source

Changelog

READ THIS!!! The default gitleaks config now uses [[rules.allowlists]]

### ⚠️ In v8.21.0 `[rules.allowlist]` was replaced with `[[rules.allowlists]]`.
### This change was backwards-compatible: instances of `[rules.allowlist]` still  work.
    #

### You can define multiple allowlists for a rule to reduce false positives.
### A finding will be ignored if _ANY_ `[[rules.allowlists]]` matches.
    [[rules.allowlists]]
    description = "ignore commit A"

### When multiple criteria are defined the default condition is "OR".
### e.g., this can match on |commits| OR |paths| OR |stopwords|.
    condition = "OR"
    commits = [ "commit-A", "commit-B"]
    paths = [
      '''go\.mod''',
      '''go\.sum'''
    ]

### note: stopwords targets the extracted secret, not the entire regex match
### like 'regexes' does. (stopwords introduced in 8.8.0)
    stopwords = [
      '''client''',
      '''endpoint''',
    ]

    [[rules.allowlists]]

### The "AND" condition can be used to make sure all criteria match.
### e.g., this matches if |regexes| AND |paths| are satisfied.
    condition = "AND"

### note: |regexes| defaults to check the _Secret_ in the finding.
### Acceptable values for |regexTarget| are "secret" (default), "match", and "line".
    regexTarget = "match"
    regexes = [ '''(?i)parseur[il]''' ]
    paths = [ '''package-lock\.json''' ]

v8.22.1

Compare Source

Changelog

v8.22.0

Compare Source

Changelog


This bumps the gitleaks binary size from around 8.5MB to 15MB but yields 2-4x speedup. Worth it imo. If you feel strongly against this change feel free to open an issue where we can discuss the tradeoffs in more depth. Credit to @​ahrav

v8.21.4

Compare Source

Changelog

v8.21.3

Compare Source

Changelog

v8.21.2

Compare Source

Changelog

v8.21.1

Compare Source

Changelog

v8.21.0

Compare Source

Changelog

respect @​rgmz @​9999years

⚠️ Note: you may find some findings that were previously ignored if using .gitleaksignore pop up in your scans. This is due to a fix for a long standing bug where gitleaks would incorrectly report merge commit SHAs instead of the actual commit where a secret was introduced. See the following issues for more context:

v8.20.1

Compare Source

Changelog

v8.20.0

Compare Source

Changelog

Huge huge thanks to @​bplaxco for supporting b64 decoding, @​recreator66 for bug fixes, and to @​rgmz for his continued support of the project in the form of PRs and reviews. Thanks you!

New Feature: Decoding

Sometimes secrets are encoded in a way that can make them difficult to find
with just regex. Now you can tell gitleaks to automatically find and decode
encoded text. The flag --max-decode-depth enables this feature (the default
value "0" means the feature is disabled by default).

Recursive decoding is supported since decoded text can also contain encoded
text. The flag --max-decode-depth sets the recursion limit. Recursion stops
when there are no new segments of encoded text to decode, so setting a really
high max depth doesn't mean it will make that many passes. It will only make as
many as it needs to decode the text. Overall, decoding only minimally increases
scan times.

The findings for encoded text differ from normal findings in the following
ways:

  • The location points the bounds of the encoded text
    • If the rule matches outside the encoded text, the bounds are adjusted to
      include that as well
  • The match and secret contain the decoded value
  • Two tags are added decoded:<encoding> and decode-depth:<depth>

Currently supported encodings:

  • base64 (both standard and base64url)

v8.19.3

Compare Source

Changelog

v8.19.2

Compare Source

Changelog

v8.19.1

Compare Source

Changelog

v8.19.0

Compare Source

Changelog


Configuration

📅 Schedule: Branch creation - "on saturday" in timezone Europe/Paris, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Sorry, something went wrong.

@renovate renovate bot changed the title feat(github-release): update pre-commit hook zricethezav/gitleaks to v8.19.0 feat(github-release): update pre-commit hook zricethezav/gitleaks to v8.19.1 Sep 14, 2024
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from 701f54f to f9e17e0 Compare September 14, 2024 09:24
@renovate renovate bot changed the title feat(github-release): update pre-commit hook zricethezav/gitleaks to v8.19.1 feat(github-release): update pre-commit hook zricethezav/gitleaks to v8.19.2 Sep 16, 2024
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from f9e17e0 to 8217f1e Compare September 16, 2024 17:11
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from 8217f1e to fc08b07 Compare September 26, 2024 15:51
@renovate renovate bot changed the title feat(github-release): update pre-commit hook zricethezav/gitleaks to v8.19.2 feat(github-release): update pre-commit hook zricethezav/gitleaks to v8.19.3 Sep 26, 2024
@renovate renovate bot changed the title feat(github-release): update pre-commit hook zricethezav/gitleaks to v8.19.3 feat(github-release): update pre-commit hook zricethezav/gitleaks to v8.20.0 Oct 3, 2024
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from fc08b07 to 8f691b3 Compare October 3, 2024 16:47
@renovate renovate bot changed the title feat(github-release): update pre-commit hook zricethezav/gitleaks to v8.20.0 feat(github-release): update pre-commit hook zricethezav/gitleaks to v8.20.1 Oct 7, 2024
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from 8f691b3 to 4490f54 Compare October 7, 2024 18:42
@renovate renovate bot changed the title feat(github-release): update pre-commit hook zricethezav/gitleaks to v8.20.1 feat(github-release): update pre-commit hook zricethezav/gitleaks to v8.21.0 Oct 15, 2024
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from 4490f54 to 4a81b74 Compare October 15, 2024 03:06
@renovate renovate bot changed the title feat(github-release): update pre-commit hook zricethezav/gitleaks to v8.21.0 feat(github-release): update pre-commit hook zricethezav/gitleaks to v8.21.1 Oct 18, 2024
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from 4a81b74 to 4d237ee Compare October 18, 2024 13:19
@renovate renovate bot changed the title feat(github-release): update pre-commit hook zricethezav/gitleaks to v8.21.1 feat(github-release): update pre-commit hook zricethezav/gitleaks to v8.21.2 Oct 28, 2024
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from 4d237ee to eabaac9 Compare October 28, 2024 15:42
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from eabaac9 to 4983f30 Compare December 19, 2024 23:13
@renovate renovate bot changed the title feat(github-release): update pre-commit hook zricethezav/gitleaks to v8.21.2 feat(github-release): update pre-commit hook zricethezav/gitleaks to v8.21.3 Dec 19, 2024
@renovate renovate bot changed the title feat(github-release): update pre-commit hook zricethezav/gitleaks to v8.21.3 feat(github-release): update pre-commit hook zricethezav/gitleaks to v8.22.0 Dec 20, 2024
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from 4983f30 to 929a24b Compare December 20, 2024 20:01
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from 929a24b to e93895b Compare December 30, 2024 20:16
@renovate renovate bot changed the title feat(github-release): update pre-commit hook zricethezav/gitleaks to v8.22.0 feat(github-release): update pre-commit hook zricethezav/gitleaks to v8.22.1 Dec 30, 2024
@renovate renovate bot changed the title feat(github-release): update pre-commit hook zricethezav/gitleaks to v8.22.1 feat(github-release): update pre-commit hook zricethezav/gitleaks to v8.23.0 Jan 13, 2025
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from e93895b to fe1b538 Compare January 13, 2025 16:55
@renovate renovate bot changed the title feat(github-release): update pre-commit hook zricethezav/gitleaks to v8.23.0 feat(github-release): update pre-commit hook zricethezav/gitleaks to v8.23.1 Jan 15, 2025
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from fe1b538 to 8fcaaa9 Compare January 15, 2025 16:22
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from 8fcaaa9 to 4993b02 Compare January 26, 2025 09:30
@renovate renovate bot changed the title feat(github-release): update pre-commit hook zricethezav/gitleaks to v8.23.1 feat(github-release): update pre-commit hook zricethezav/gitleaks to v8.23.2 Jan 26, 2025
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from 4993b02 to 675cfe4 Compare January 29, 2025 16:28
@renovate renovate bot changed the title feat(github-release): update pre-commit hook zricethezav/gitleaks to v8.23.2 feat(github-release): update pre-commit hook zricethezav/gitleaks to v8.23.3 Jan 29, 2025
…v8.24.0

| datasource  | package              | from    | to      |
| ----------- | -------------------- | ------- | ------- |
| github-tags | zricethezav/gitleaks | v8.18.4 | v8.24.0 |
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from 675cfe4 to f87b387 Compare February 20, 2025 02:38
@renovate renovate bot changed the title feat(github-release): update pre-commit hook zricethezav/gitleaks to v8.23.3 feat(github-release): update pre-commit hook zricethezav/gitleaks to v8.24.0 Feb 20, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

0 participants