Richard Gomez

Results 129 comments of Richard Gomez

Another occurrence: ``` 2024-04-24T12:13:06Z error trufflehog Panic occurred when reading archive {"source_manager_worker_id": "CpAT5", "repo": "https://github.com/brave/chromium-releases.git", "commit": "14e60b3", "path": "chrome/test/data/safe_browsing/rar/passwd.rar", "timeout": 30, "error": "runtime error: index out of range [0] with...

Seems like a mistake on my part. The failing workflow is actually scanning for secrets, not test — the job just happens to be called "test." I'll try updating the...

@dustin-decker I believe this should work now.

> I would feel better updating this PR so that we have two different jobs, one for forks and one for the trufflesecurity org. The forked job would use the...

@bugbaba what is the output if you run `strings db_filename`? Is it substantially different from `sqlite3 db_filename .dump > tmp_dumpfile`? I've seen results from several SQLite databases, so I'm curious...

> Now to the naked eye, the API key is surely visible in this output too. But as we can see random character `G` is added at the start of...

> I think when the handler unpacks the SQLi data, it should include the column name nearby to help with detection. Based on some cursory testing, we may be able...

> I think we'd also want to set MaxConnsPerHost: https://go.dev/src/net/http/transport.go#L211 > I think setting it to 1 would be respectful to the service providers? A low value between 1-5 is...

I've been busy and haven't been able to look into benchmarks for this change. Happy to run specific commands and show the results, if someone can supply them. Regarding changing...