Open
Description
TruffleHog Version
trufflehog 3.89.1
Trace Output
[no output, even with --log-level=5]
Expected Behavior
Trufflehog should run without segfaulting.
Actual Behavior
xargs: trufflehog: terminated by signal 11
Steps to Reproduce
Check out MaterializeInc/materialize#32739
git ls-files -z | xargs -0 trufflehog --log-legel=5 --no-fail --no-update --no-verification --json filesystem
Since I'm on macOS I'm reproducing it with a Docker image using Ubuntu noble-202509529 Linux arm64:
bin/ci-builder run stable ci/test/lint-main/checks/check-trufflehog.sh
Additional Context
Trufflehog is installed via
RUN curl -fsSL https://github.com/trufflesecurity/trufflehog/releases/download/v3.89.1/trufflehog_3.89.1_linux_$ARCH_GO.tar.gz > trufflehog.tar.gz \
&& if [ $ARCH_GO = amd64 ]; then echo 'c187e25dd1a68ba24a47cc15f334625cb5a7b77f4c75837398950accfc752d59 trufflehog.tar.gz' | sha256sum --check; fi \
&& if [ $ARCH_GO = arm64 ]; then echo '5c3786dec219d17c1f3a5f2f97ef8fa16b029ce7df19ca2389e667eca492f78d trufflehog.tar.gz' | sha256sum --check; fi \
&& tar -xzf trufflehog.tar.gz -C /usr/local/bin trufflehog
On x86-64 Linux and arm64 macOS it seems to work fine.