All pull requests

Pull requests

• fix(detectors/auth0oauth): match Auth0 Private Cloud auth0app.com domains

  #5354·saghaulor opened Sep 25, 2026Contributor·

  ·

• fix(output): escape special characters in --github-actions output

  #5353·kenanyararbas opened Sep 24, 2026·

  ·
  1

• Escape literal dots in matching patterns

  #5352·nyanshak opened Sep 23, 2026Contributor·

  ·
  5

• Fix buffered reader replay across disk and memory

  #5349·bIackr0se opened Sep 23, 2026·

  ·
  1

  1

• refactor(detectors/postgres): clean up verify error handling a bit

  #5344·mariduv opened Sep 22, 2026Contributor·

  ·
  7

• feat(detectors): add SailPoint IdentityIQ ACP detector

  #5342·Marx314 opened Sep 22, 2026·

  ·
  6

• feat(detectors): add ClickHouse detector

  #5338·DrFaust92 opened Sep 21, 2026·

  ·
  1

  12

• fix(analyzers/github): prevent panics on unrecognized permission scopes

  #5336·Gracy769 opened Sep 21, 2026·

  ·
  1

  5

• fix(detectors): remove stray fmt.Printf in portainertoken

  #5334·Gracy769 opened Sep 21, 2026·

  ·
  1

  2

• Int 825 s3 unit progress

  #5330·shahzadhaider1 opened Sep 18, 2026Contributor·

  ·
  4

• Fix Cloudflare API tokens ending in hyphens

  #5329·breken-ai opened Sep 18, 2026·

  ·
  1

  1

• Add OAuth2 token acquisition and verification for custom detectors and verifiers

  #5327·unsmith opened Sep 17, 2026Contributor·

  ·
  25

• feat(detectors): add Composio API key detector

  #5322·groovyBugify opened Sep 16, 2026·

  ·
  1

  7

• feat: OAuth2 ROPC support for custom detectors and custom verifier endpoint auth

  #5315·unsmith opened Sep 14, 2026Contributor·

  ·
  10

• deps: bump moby/go-archive, edwards25519, klauspost/compress, goldmark

  #5314·boazgarty opened Sep 12, 2026·

  ·
  1

• fix(privatekey): suppress findings for known test keys from the tunnel npm package

  #5313·shashankvarma499 opened Sep 11, 2026·

  ·
  1

  1

• Add a TruffleHog dectector for Kong Konnect Platform

  #5305·mrwanny opened Sep 10, 2026·

  ·
  11

• Include merge diffs in git scanning

  #5300·mariduv opened Sep 10, 2026Contributor·

  ·
  2

• remove pre-commit env awareness with hardcoded params

  #5294·thiswillnevermatch opened Sep 9, 2026·

  ·
  1

• feat: add --no-ignore-tag to report secrets on trufflehog:ignore lines

  #5293·thiswillnevermatch opened Sep 9, 2026·

  ·
  2

• add connection string components to extradata for sql server

  #5289·patcain-34 opened Sep 8, 2026·

  ·
  5

• Add pkg/ssrf shared egress guard; use it for WithNoLocalIP and analyzer clients

  #5288·bill-rich opened Sep 8, 2026Contributor·

  ·
  1

• Update module github.com/envoyproxy/protoc-gen-validate to v1.3.3

  dependencies
  #5282·renovate[bot] opened Sep 7, 2026Bot·

  ·
  1

• fix(install.sh): retry release asset downloads on 404

  #5279·pgmpofu opened Sep 6, 2026Contributor·

  ·

• fix(mongodb): anchor placeholder password regex to the whole string

  #5278·Huang-404-Q opened Sep 5, 2026·

  ·
  1

  1