What's Changed

• Copy over dedupe cache size into the engine from the config by @camgunz in #5402

Full Changelog: v3.99.1...v3.99.2

What's Changed

• Update github-actions by @renovate[bot] in #5363
• [INT-1084] Make the results deduplication cache size configurable by @camgunz in #5399

Full Changelog: v3.99.0...v3.99.1

What's Changed

• Fix Sumo Logic detector ignoring configured verifier endpoints by @unsmith in #5395
• Add OAuth2 (ROPC) auth for verification requests by @unsmith in #5392

Full Changelog: v3.98.1...v3.99.0

What's Changed

• Add postman source documentation by @kashifkhan0771 in #5389
• Add a TruffleHog dectector for Kong Konnect Platform by @mrwanny in #5305
• Add api_timeout_seconds to Gerrit source proto by @kashifkhan0771 in #5394

New Contributors

• @mrwanny made their first contribution in #5305

Full Changelog: v3.98.0...v3.98.1

What's Changed

• Int 595 verify asymmetry by @shahzadhaider1 in #5261
• return error body for fetchBearerToken by @jordanTunstill in #5301
• Update module github.com/charmbracelet/bubbletea to v1.3.10 by @renovate[bot] in #5281
• Update github.com/trufflesecurity/ldap-verify digest to 3142cc9 by @renovate[bot] in #5280
• [INT-1086] Don't reuse maps; editing them afterwards edits them for all results by @camgunz in #5351
• [INT-1091] Treat Square 403 as verified on INSUFFICIENT_SCOPES by @MuneebUllahKhan222 in #5367
• feat: add --no-ignore-tag to report secrets on trufflehog:ignore lines by @thiswillnevermatch in #5293
• Fix failing TestGHCRListImages test in CI by @MuneebUllahKhan222 in #5368
• Revert duplicate --no-ignore-tag changes from #5293 by @shahzadhaider1 in #5369
• Show progress inside S3 buckets by @shahzadhaider1 in #5330
• fix(output): escape special characters in --github-actions output by @kenanyararbas in #5353
• fix(detectors): remove stray fmt.Printf in portainertoken by @Gracy769 in #5334
• resolve race condition in result deduplication cache by @kvnphvm in #5359
• added entropy filter and improved verification for gitlab v2/v3 by @jordanTunstill in #5358
• Update Okta domain pat to account for mil and fedramp by @kvnphvm in #5355
• Corpora bench reports clean when a detector produces zero matches on both sides by @kvnphvm in #5357
• Add huggingface source documentation by @kashifkhan0771 in #5373
• Add Gitlab source documentation by @kashifkhan0771 in #5371
• Add Github source documentation by @kashifkhan0771 in #5370
• fix(detectors/auth0oauth): match Auth0 Private Cloud auth0app.com domains by @saghaulor in #5354
• List only the include prefixes in S3 scans by @shahzadhaider1 in #5377
• fix(github): switch back to fetching access token through apiClient, by @mariduv in #5380
• Fix NetSuite detector running out of memory on dense input by @shahzadhaider1 in #5383
• Add Jenkins source documentation by @kashifkhan0771 in #5388
• docs: point five internal links at files that exist by @CalvinTjoaquinn in #5375
• Add pkg/ssrf shared egress guard; use it for WithNoLocalIP and analyzer clients by @bill-rich in #5288

New Contributors

• @thiswillnevermatch made their first contribution in #5293
• @kenanyararbas made their first contribution in #5353
• @Gracy769 made their first contribution in #5334
• @CalvinTjoaquinn made their first contribution in #5375

Full Changelog: v3.97.9...v3.98.0

What's Changed

• [SCAN-162] Add Err() to JobProgress and JobProgressRef by @dipto-truffle in #5346
• ci: scope Smoke timeouts to trufflehog runs, not the build by @bryanbeverly in #5317
• Update module github.com/aymanbagabas/go-osc52 to v1.2.2 by @renovate[bot] in #5252
• Update module github.com/gabriel-vasile/mimetype to v1.4.15 by @renovate[bot] in #5283
• make 401s for Basic auth verified false. by @jordanTunstill in #5290
• [INT-1088] Add version and comment_number lines to SharePoint source metadata by @camgunz in #5348
• Int 595 auth errors by @shahzadhaider1 in #5259
• Spruce up Makefile a little by @camgunz in #5347

Full Changelog: v3.97.8...v3.97.9

What's Changed

• Add Okta OAuth support in Okta detector by @shreyas-sriram in #5323
• Add per detector verification timing to verification cache by @kvnphvm in #5341
• Set all verification errors in detectors by @shahzadhaider1 in #5253

Full Changelog: v3.97.7...v3.97.8

What's Changed

• Recognize a missing Postgres database by SQLSTATE by @gaborbernat in #5312
• Improve Github App installation access token caching by @mariduv in #5324
• give git the real base..head range for diff scans by @kvnphvm in #5325
• Add GCS source documentation by @kashifkhan0771 in #5319
• [PERF] Remove \b anchor from escaped-unicode codePointPat by @Ahsan-Sarbaz in #5320
• 🐛 fix(engine): map decoded results to source lines by @gaborbernat in #5219

New Contributors

• @gaborbernat made their first contribution in #5312

Full Changelog: v3.97.6...v3.97.7

What's Changed

• Clarify security policy by @bradlarsen in #5295
• Add git source documentation by @kashifkhan0771 in #5326
• fix(gitparse): cheaper low-memory git scan, stop losing trailing commits by @kashifkhan0771 in #5331
• analyzer/github: include is_fine_grained metadata and make gist enumeration non-fatal by @unsmith in #5332

Full Changelog: v3.97.5...v3.97.6

What's Changed

• Update module github.com/rabbitmq/amqp091-go to v1.13.0 [SECURITY] by @renovate[bot] in #5274
• Update github-actions by @renovate[bot] in #5250
• Update dependency golangci/golangci-lint to v2.13.2 by @renovate[bot] in #5251
• Make GitHub App installationId optional when scanning all installations by @kashifkhan0771 in #5275
• [INT-942] Add HumioAPIToken detector by @unsmith in #5258
• Object filtering in S3 by @shahzadhaider1 in #5286
• feat(detectors): add Resend detector by @mwoss in #5103
• Clean up use of wasilibs/go-re2 by @bradlarsen in #5273
• Low-memory Git Scanning by @mariduv in #5257
• Adding no-ignore flag to allow reporting of "ignored" secrets by @jordanTunstill in #5297
• Postgres: drop non-connection URI params before verifying by @jordanTunstill in #5296
• fix(detectors/ngrok): broaden valid bearer tokens matching by @mattbrady-1 in #5152
• ci: avoid Node 20 BuildPulse action by @dustin-decker in #5266
• Introduce a new optional detector interface that will allow us to verify credentials not in the cache by @kvnphvm in #5298
• perf(engine): lowercase prefilter chunks as ASCII in a pooled buffer by @kashifkhan0771 in #5291
• Add documentation for CircleCI source by @kashifkhan0771 in #5268
• Add filesystem source documentation by @kashifkhan0771 in #5285
• Add elasticsearch source documentation by @kashifkhan0771 in #5284
• [SCAN-177] Purge secret parts from verification cache by @casey-tran in #5318

New Contributors

• @mwoss made their first contribution in #5103
• @kvnphvm made their first contribution in #5298

Full Changelog: v3.97.4...v3.97.5