ci(github-actions): bump the github-actions group across 1 directory with 2 updates

[dependabot]

Bumps the github-actions group with 2 updates in the / directory: aquasecurity/trivy-action and trufflesecurity/trufflehog.

Updates aquasecurity/trivy-action from 0.34.1 to 0.34.2

Release notes

Sourced from aquasecurity/trivy-action's releases.

v0.34.2

What's Changed

• feat: add YAML support for trivyignores by @​nikpivkin in aquasecurity/trivy-action#508
• chore: bump default Trivy version to v0.69.2 by @​nick-the-nuke in aquasecurity/trivy-action#513
• chore: bump Trivy version to v0.69.2 in test workflow and README by @​DmitriyLewen in aquasecurity/trivy-action#515

New Contributors

• @​nick-the-nuke made their first contribution in aquasecurity/trivy-action#513

Full Changelog: aquasecurity/trivy-action@0.34.1...0.34.2

Commits

• 97e0b38 chore: bump Trivy version to v0.69.2 in test workflow and README (#515)
• 4c61e63 chore: bump default Trivy version to v0.69.2 (#513)
• 1bd0625 Merge pull request #508 from nikpivkin/feat/pass-yaml-ignore-file
• bce3086 remove unused init-cache target
• 5a9fbb1 supress progress bar when download db
• 1615450 update trivyignores input description
• df85774 add comment about fd3
• 56c8dae remove unused variable
• 6476b93 feat: support for YAML ignore file
• See full diff in compare view

Updates trufflesecurity/trufflehog from 3.93.4 to 3.93.6

Release notes

Sourced from trufflesecurity/trufflehog's releases.

v3.93.6

What's Changed

• GH_TOKEN needed for gh by @​bill-rich in trufflesecurity/trufflehog#4772
• Move verify flag into detectableChunk by @​rosecodym in trufflesecurity/trufflehog#4558

Full Changelog: trufflesecurity/trufflehog@v3.93.5...v3.93.6

v3.93.5

What's Changed

• Add workspace_id to Slack Continuous metadata by @​mariduv in trufflesecurity/trufflehog#4749
• fix(release): Disable docker provenance feature by @​mariduv in trufflesecurity/trufflehog#4752
• Base64 decoding depth assessment by @​dxa4481 in trufflesecurity/trufflehog#4744
• [INS-246] Add Google Gemini API key detector by @​mustansir14 in trufflesecurity/trufflehog#4649
• Refactor log package by @​mcastorina in trufflesecurity/trufflehog#4734
• [INS-309]updated google api version to v0.259.0 by @​MuneebUllahKhan222 in trufflesecurity/trufflehog#4736
• fix(ftp): set read deadline on connection to prevent indefinite hang by @​dylanTruffle in trufflesecurity/trufflehog#4759
• added rotation on 403s access_refused, this detector considered them indeterminate failures by @​jordanTunstill in trufflesecurity/trufflehog#4740
• [INS-283] Support following symlinks in filesystem source by @​MuneebUllahKhan222 in trufflesecurity/trufflehog#4742
• Fix typos in comments in json-enumerator source by @​bradlarsen in trufflesecurity/trufflehog#4764
• Fix race condition in release process by @​bill-rich in trufflesecurity/trufflehog#4766

Full Changelog: trufflesecurity/trufflehog@v3.93.4...v3.93.5

Commits

• 041f07e Move verify flag into detectableChunk (#4558)
• e976603 GH_TOKEN needed for gh (#4772)
• 7cdc7ef Fix race condition in release process (#4766)
• 4f1d07f Fix typos in comments in json-enumerator source (#4764)
• 4563dde [INS-283] Support following symlinks in filesystem source (#4742)
• be889fa added rotation on 403s access_refused, this detector considered them indeterm...
• e3cbb3a fix(ftp): set read deadline on connection to prevent indefinite hang (#4759)
• 0de5855 [INS-309]updated google api version to v0.259.0 (#4736)
• ec1d9a6 Refactor log package (#4734)
• 7c84b27 [INS-246] Add Google Gemini API key detector (#4649)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

✅MegaLinter analysis: Success

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
✅ ACTION	actionlint	1		0	0	0.03s
✅ COPYPASTE	jscpd	yes		no	no	1.45s
✅ EDITORCONFIG	editorconfig-checker	1		0	0	0.01s
✅ REPOSITORY	checkov	yes		no	no	22.47s
✅ REPOSITORY	gitleaks	yes		no	no	2.27s
✅ REPOSITORY	git_diff	yes		no	no	0.01s
✅ REPOSITORY	grype	yes		no	no	41.35s
✅ REPOSITORY	secretlint	yes		no	no	1.66s
✅ REPOSITORY	semgrep	yes		no	no	25.96s
✅ REPOSITORY	syft	yes		no	no	3.38s
✅ REPOSITORY	trivy	yes		no	no	13.13s
✅ REPOSITORY	trivy-sbom	yes		no	no	0.16s
✅ REPOSITORY	trufflehog	yes		no	no	4.34s
✅ SPELL	lychee	1		0	0	0.3s
✅ YAML	prettier	1	0	0	0	0.67s
✅ YAML	v8r	1		0	0	2.78s
✅ YAML	yamllint	1		0	0	0.42s

See detailed reports in MegaLinter artifacts
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

Show us your support by starring ⭐ the repository

[github-actions]

KICS version: v2.1.19

Category Results CRITICAL 0 HIGH 0 MEDIUM 4 LOW 0 INFO 0 TRACE 0 TOTAL 4	Metric Values Files scanned 7 Files parsed 7 Files failed to scan 0 Total executed queries 73 Queries failed to execute 0 Execution time 1

Queries Results

Query Name Query Id Severity Platform Cwe Risk Score Category Experimental Description File Name Line Issue Type Search Key Expected Value Actual Value Apt Get Install Pin Version Not Defined 965a08d7-ef86-4f14-8792-4a3b2098937e MEDIUM Dockerfile 1357 5.7 Supply-Chain false When installing a package, its pin version should be defined Dockerfile 94 MissingAttribute FROM={{dev AS compile}}.RUN={{apt-get update && apt-get install --yes --no-install-recommends binutils patchelf && rm -rf /var/lib/apt/lists/*}} Package 'binutils' has version defined Package 'binutils' does not have version defined Apt Get Install Pin Version Not Defined 965a08d7-ef86-4f14-8792-4a3b2098937e MEDIUM Dockerfile 1357 5.7 Supply-Chain false When installing a package, its pin version should be defined Dockerfile 46 MissingAttribute FROM={{base AS dev}}.RUN={{apt-get update && apt-get install --yes --no-install-recommends build-essential && rm -rf /var/lib/apt/lists/*}} Package 'build-essential' has version defined Package 'build-essential' does not have version defined Apt Get Install Pin Version Not Defined 965a08d7-ef86-4f14-8792-4a3b2098937e MEDIUM Dockerfile 1357 5.7 Supply-Chain false When installing a package, its pin version should be defined Dockerfile 36 MissingAttribute FROM={{debian:stable-slim@sha256:85dfcffff3c1e193877f143d05eaba8ae7f3f95cb0a32e0bc04a448077e1ac69 AS base}}.RUN={{apt-get update && apt-get upgrade --yes && apt-get install --yes --no-install-recommends curl && rm -rf /var/lib/apt/lists/*}} Package 'curl' has version defined Package 'curl' does not have version defined Apt Get Install Pin Version Not Defined 965a08d7-ef86-4f14-8792-4a3b2098937e MEDIUM Dockerfile 1357 5.7 Supply-Chain false When installing a package, its pin version should be defined Dockerfile 94 MissingAttribute FROM={{dev AS compile}}.RUN={{apt-get update && apt-get install --yes --no-install-recommends binutils patchelf && rm -rf /var/lib/apt/lists/*}} Package 'patchelf' has version defined Package 'patchelf' does not have version defined