Richard Gomez

Please review the [Community Note](https://github.com/trufflesecurity/trufflehog/blob/main/.github/community_note.md) before submitting ## Description It appears that the Docker source does not have flags for including or excluding paths. This is a useful feature to...

[archive] Gracefully handle EOF when max size is reached

2

Please review the [Community Note](https://github.com/trufflesecurity/trufflehog/blob/main/.github/community_note.md) before submitting ## Description Random EOF errors like below appear to be a common source of confusion (#2055). ``` 2023-12-11T08:25:24-05:00 error trufflehog error unarchiving chunk....

Drain response body before closing

6

### Description: This adds calls to `io.Copy(io.Discard, res.Body)` prior to closing response bodies, as that is apparently beneficial: ``` # https://pkg.go.dev/net/http#Response // The default HTTP client's Transport may not //...

Improve Azure Storage detection

2

### Description: ~This PR tightens up the regex for `AccountName`+`AccountKey` and fixes a potential runtime panic when constructing the request.~ This PR expands the the Azure storage detector to find...

Bug in `PubNubSubscriptionKey` verification logic

2

Please review the [Community Note](https://github.com/trufflesecurity/trufflehog/blob/main/.github/community_note.md) before submitting ### TruffleHog Version 3.60.4 ### Description The PubNubSubscriptionKey, detector incorrectly flags valid keys as invalid when a non-2xx response is received. Given the...

### Description: This PR: - Adds support for additional scenarios that I've observed - Fixes the verification logic - Adds support for partial matches (just client id + client secret...

(WIP) Scan all tags for a Docker image

3

### Description: This is a naive implementation that fixes #1753. ```bash $ ./trufflehog docker --image=quay.io/fedora/fedora --only-verified --all-tags 🐷🔑🐷 TruffleHog. Unearth your secrets. 🐷🔑🐷 ^[[6~2023-09-12T11:45:37-04:00 info-0 trufflehog scanning image {"source_id": 1,...

Please review the [Community Note](https://github.com/trufflesecurity/trufflehog/blob/main/.github/community_note.md) before submitting ## Description The following [`DetectorType` enums](https://github.com/trufflesecurity/trufflehog/blob/4636dc08f68e091d172fdbeb5cbd74c000cb7fe9/proto/detectors.proto#L4) are defined, but do not appear to be used in `pkg/detectors`. Presumably, these are a mix of...

`IsKnownFalsePositive` incorrectly marks value as false-positive

2

Please review the [Community Note](https://github.com/trufflesecurity/trufflehog/blob/main/.github/community_note.md) before submitting ### TruffleHog Version 3.60.1 ### Trace Output N/A ### Expected Behavior The following (valid) secret is not marked as a false-positive ``` 9ed918b9-7ea6-4880-9734-e3822649e20b...

Please review the [Community Note](https://github.com/trufflesecurity/trufflehog/blob/main/.github/community_note.md) before submitting ## Description The current [OpenAI detector](https://github.com/trufflesecurity/trufflehog/blob/b8724e87e6c7f6785bee707a82172d03e3006efb/pkg/detectors/openai/openai.go#L23) handles API keys for `https://api.openai.com`, however, in my experience API keys for [Microsoft Azure Endpoints](https://github.com/openai/openai-python#microsoft-azure-endpoints) have a...