Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enhance HuggingFace extra data #2222

Merged
merged 1 commit into from
Dec 17, 2023

Conversation

rgmz
Copy link
Contributor

@rgmz rgmz commented Dec 14, 2023

Description:

This adds more meaningful data to the HuggingFace detector.

Example:

Found verified result 🐷🔑
Detector Type: HuggingFace
Decoder Type: BASE64
Raw result: hf_...
Username: jdoe
Email: jdoe@example.com
Token: deploy (write)
Organizations: contoso:write, TruffleSecurity:read
File: /tmp/example/data.yml
Line: 26

Checklist:

  • Tests passing (make test-community)?
  • Lint passing (make lint this requires golangci-lint)?

@CLAassistant
Copy link

CLAassistant commented Dec 14, 2023

CLA assistant check
All committers have signed the CLA.

Copy link
Collaborator

@ahrav ahrav left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That's a lot of pretty useful extra data, nice!

}

// Condense a list of organizations + roles.
var orgs []string
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nit: We can pre-allocate the slice here.
orgs := make([]string, 0, len(whoamRes.Organizations)

@ahrav ahrav merged commit ded8e45 into trufflesecurity:main Dec 17, 2023
7 of 8 checks passed
@rgmz rgmz deleted the feat/hugginface-extradata branch December 17, 2023 23:50
haraldh pushed a commit to matter-labs/vault-auth-tee that referenced this pull request Dec 21, 2023
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[trufflesecurity/trufflehog](https://togithub.com/trufflesecurity/trufflehog)
| action | patch | `v3.63.4` -> `v3.63.5` |

---

### Release Notes

<details>
<summary>trufflesecurity/trufflehog
(trufflesecurity/trufflehog)</summary>

###
[`v3.63.5`](https://togithub.com/trufflesecurity/trufflehog/releases/tag/v3.63.5)

[Compare
Source](https://togithub.com/trufflesecurity/trufflehog/compare/v3.63.4...v3.63.5)

#### What's Changed

- \[chore] Prevent panic when ChunkError has a nil Unit by
[@&#8203;mcastorina](https://togithub.com/mcastorina) in
[trufflesecurity/trufflehog#2227
- \[feat] - Make skipping binaries configurable by
[@&#8203;ahrav](https://togithub.com/ahrav) in
[trufflesecurity/trufflehog#2226
- \[chore] Add skip_binaries field to AzureRepos proto message by
[@&#8203;mcastorina](https://togithub.com/mcastorina) in
[trufflesecurity/trufflehog#2232
- Don't run detector tests on forks by
[@&#8203;rgmz](https://togithub.com/rgmz) in
[trufflesecurity/trufflehog#2234
- Update Freshworks verification to check for valid JSON response by
[@&#8203;rgmz](https://togithub.com/rgmz) in
[trufflesecurity/trufflehog#2212
- Enhance HuggingFace extra data by
[@&#8203;rgmz](https://togithub.com/rgmz) in
[trufflesecurity/trufflehog#2222
- Convert Shortcut detector to tri-state verification by
[@&#8203;rgmz](https://togithub.com/rgmz) in
[trufflesecurity/trufflehog#2211
- add secretID to chunk by [@&#8203;ahrav](https://togithub.com/ahrav)
in
[trufflesecurity/trufflehog#2242
- fix(deps): update module golang.org/x/crypto to v0.17.0 \[security] by
[@&#8203;renovate](https://togithub.com/renovate) in
[trufflesecurity/trufflehog#2243

**Full Changelog**:
trufflesecurity/trufflehog@v3.63.4...v3.63.5

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/matter-labs/vault-auth-tee).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy45My4xIiwidXBkYXRlZEluVmVyIjoiMzcuOTMuMSIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants