Tartufo

Latest version: v5.0.0

Safety actively analyzes 630094 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 4 of 8

2.10.1

Not secure
--------------------------

Bug fixes:

* [309](https://github.com/godaddy/tartufo/pull/309) Fixes an issue where verbose output display
would error out if the new-style entropy exclusion pattern was used

2.10.0

Not secure
-------------------------

Bug fixes:

* [247](https://github.com/godaddy/tartufo/issues/247) All versions of tartufo from
v2.2.0 through v2.9.0 inclusive mishandle `scan-remote-repo`. Only the repository's
default branch was scanned, and secrets present in other branches would not be
discovered. Additionally, the `--branch branch-name` option did not operate correctly
for remote repositories. Some versions would scan nothing and report no errors, and
other versions aborted immediately, claiming the branch did not exist (even if it did).
v2.10.0 corrects these problems and may detect secrets that were not reported by previous versions.

Features:

* [231](https://github.com/godaddy/tartufo/issues/231) Change toml parsing library to use tomlkit

Other changes:

* [251](https://github.com/godaddy/tartufo/issues/251) Document update to use --no-fetch flag
to all scan-local-repo

2.9.0

Not secure
------------------------

Bug fixes:

* Reverted [222](https://github.com/godaddy/tartufo/pull/222) -- users had been
relying on the previously implemented behavior, causing this change to break
their pipelines.

Features:

* Behavior introduced in [222](https://github.com/godaddy/tartufo/pull/222) is
now opt-in via an updated config specification for `exclude-entropy-patterns`.
This is now done via a TOML table, rather than a specifically patterned string.
Users who have the old style configuration will now receive a
`DeprecationWarning` stating that the old behavior will go away with v3.0.
* Fixed up warning handling so that we can display `DeprecationWarnings` to users
more easily.
* [223](https://github.com/godaddy/tartufo/pull/223) New flags
(`-b64`/`--b64-entropy-score` and `-hex`/`--hex-entropy-score`) allow for user
tuning of the entropy reporting sensitivity. They default to 4.5 and 3.0,
respectively.

2.8.1

Not secure
------------------------

Bug fixes:

* [222](https://github.com/godaddy/tartufo/pull/222) - Allow
exclude-entropy-patterns to match lines containing partial matches -- thanks
to kbartholomew-godaddy for the work on this one!

2.8.0

Not secure
--------------------------

Features:

* [83](https://github.com/godaddy/tartufo/issues/83) - New `scan-folder` command
to scan files without viewing as a git repository.

Bug fixes:

* [220](https://github.com/godaddy/tartufo/pull/220) - Display an explicit error
message when a requested branch is not found, as opposed to failing silently.

Misc:

* [219](https://github.com/godaddy/tartufo/pull/219) - Incremental optimizations;
using `__slots__` for the `Issue` class to improve memory consumption, and
a small logic speed-up in when we generate the diff between commits. Both of
these should help at least some when it comes to scanning very large
repositories.

2.7.1

Not secure
-----------------------

Bug fixes:

* [211](https://github.com/godaddy/tartufo/issues/211) - Attempt to fix a case
where output encoding could be set to cp1252 on Windows, which would cause a
crash if unicode characters were printed. Now issues are output as utf-8
encoded bytestreams instead.

Page 4 of 8

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.