build(deps): Bump trufflesecurity/trufflehog from 3.93.4 to 3.93.6

[dependabot]

Bumps trufflesecurity/trufflehog from 3.93.4 to 3.93.6.

Release notes

Sourced from trufflesecurity/trufflehog's releases.

v3.93.6

What's Changed

• GH_TOKEN needed for gh by @​bill-rich in trufflesecurity/trufflehog#4772
• Move verify flag into detectableChunk by @​rosecodym in trufflesecurity/trufflehog#4558

Full Changelog: trufflesecurity/trufflehog@v3.93.5...v3.93.6

v3.93.5

What's Changed

• Add workspace_id to Slack Continuous metadata by @​mariduv in trufflesecurity/trufflehog#4749
• fix(release): Disable docker provenance feature by @​mariduv in trufflesecurity/trufflehog#4752
• Base64 decoding depth assessment by @​dxa4481 in trufflesecurity/trufflehog#4744
• [INS-246] Add Google Gemini API key detector by @​mustansir14 in trufflesecurity/trufflehog#4649
• Refactor log package by @​mcastorina in trufflesecurity/trufflehog#4734
• [INS-309]updated google api version to v0.259.0 by @​MuneebUllahKhan222 in trufflesecurity/trufflehog#4736
• fix(ftp): set read deadline on connection to prevent indefinite hang by @​dylanTruffle in trufflesecurity/trufflehog#4759
• added rotation on 403s access_refused, this detector considered them indeterminate failures by @​jordanTunstill in trufflesecurity/trufflehog#4740
• [INS-283] Support following symlinks in filesystem source by @​MuneebUllahKhan222 in trufflesecurity/trufflehog#4742
• Fix typos in comments in json-enumerator source by @​bradlarsen in trufflesecurity/trufflehog#4764
• Fix race condition in release process by @​bill-rich in trufflesecurity/trufflehog#4766

Full Changelog: trufflesecurity/trufflehog@v3.93.4...v3.93.5

Commits

• 041f07e Move verify flag into detectableChunk (#4558)
• e976603 GH_TOKEN needed for gh (#4772)
• 7cdc7ef Fix race condition in release process (#4766)
• 4f1d07f Fix typos in comments in json-enumerator source (#4764)
• 4563dde [INS-283] Support following symlinks in filesystem source (#4742)
• be889fa added rotation on 403s access_refused, this detector considered them indeterm...
• e3cbb3a fix(ftp): set read deadline on connection to prevent indefinite hang (#4759)
• 0de5855 [INS-309]updated google api version to v0.259.0 (#4736)
• ec1d9a6 Refactor log package (#4734)
• 7c84b27 [INS-246] Add Google Gemini API key detector (#4649)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ❌ 1 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ✅ 0 package(s) with unknown licenses.

See the Details below.

License Issues

.github/workflows/trufflehog.yml

Package	Version	License	Issue Type
trufflesecurity/trufflehog	041f07e9df901a1038a528e5525b0226d04dd5ea	AGPL-3.0	Incompatible License

Allowed Licenses:

Apache-2.0, BSD-2-Clause, BSD-3-Clause, ISC, MPL-2.0, MIT

OpenSSF Scorecard

Package	Version	Score	Details
actions/trufflesecurity/trufflehog	041f07e9df901a1038a528e5525b0226d04dd5ea	🟢 6.9	Details Check Score Reason Code-Review 🟢 10 all changesets reviewed Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Security-Policy 🟢 10 security policy file detected Maintained 🟢 10 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions License 🟢 10 license file detected Binary-Artifacts 🟢 9 binaries present in source code Fuzzing ⚠️ 0 project is not fuzzed Branch-Protection 🟢 5 branch protection is not maximal on development and all release branches Signed-Releases 🟢 8 5 out of the last 5 releases have a total of 5 signed artifacts. Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 Packaging 🟢 10 packaging workflow detected SAST 🟢 10 SAST tool is run on all commits

Scanned Files

• .github/workflows/trufflehog.yml