fix(deps): bump trufflesecurity/trufflehog from 3.97.5 to 3.97.9

[dependabot]

Bumps trufflesecurity/trufflehog from 3.97.5 to 3.97.9.

Release notes

Sourced from trufflesecurity/trufflehog's releases.

v3.97.9

What's Changed

• [SCAN-162] Add Err() to JobProgress and JobProgressRef by @​dipto-truffle in trufflesecurity/trufflehog#5346
• ci: scope Smoke timeouts to trufflehog runs, not the build by @​bryanbeverly in trufflesecurity/trufflehog#5317
• Update module github.com/aymanbagabas/go-osc52 to v1.2.2 by @​renovate[bot] in trufflesecurity/trufflehog#5252
• Update module github.com/gabriel-vasile/mimetype to v1.4.15 by @​renovate[bot] in trufflesecurity/trufflehog#5283
• make 401s for Basic auth verified false. by @​jordanTunstill in trufflesecurity/trufflehog#5290
• [INT-1088] Add version and comment_number lines to SharePoint source metadata by @​camgunz in trufflesecurity/trufflehog#5348
• Int 595 auth errors by @​shahzadhaider1 in trufflesecurity/trufflehog#5259
• Spruce up Makefile a little by @​camgunz in trufflesecurity/trufflehog#5347

Full Changelog: trufflesecurity/trufflehog@v3.97.8...v3.97.9

v3.97.8

What's Changed

• Add Okta OAuth support in Okta detector by @​shreyas-sriram in trufflesecurity/trufflehog#5323
• Add per detector verification timing to verification cache by @​kvnphvm in trufflesecurity/trufflehog#5341
• Set all verification errors in detectors by @​shahzadhaider1 in trufflesecurity/trufflehog#5253

Full Changelog: trufflesecurity/trufflehog@v3.97.7...v3.97.8

v3.97.7

What's Changed

• Recognize a missing Postgres database by SQLSTATE by @​gaborbernat in trufflesecurity/trufflehog#5312
• Improve Github App installation access token caching by @​mariduv in trufflesecurity/trufflehog#5324
• give git the real base..head range for diff scans by @​kvnphvm in trufflesecurity/trufflehog#5325
• Add GCS source documentation by @​kashifkhan0771 in trufflesecurity/trufflehog#5319
• [PERF] Remove \b anchor from escaped-unicode codePointPat by @​Ahsan-Sarbaz in trufflesecurity/trufflehog#5320
• 🐛 fix(engine): map decoded results to source lines by @​gaborbernat in trufflesecurity/trufflehog#5219

New Contributors

• @​gaborbernat made their first contribution in trufflesecurity/trufflehog#5312

Full Changelog: trufflesecurity/trufflehog@v3.97.6...v3.97.7

v3.97.6

What's Changed

• Clarify security policy by @​bradlarsen in trufflesecurity/trufflehog#5295
• Add git source documentation by @​kashifkhan0771 in trufflesecurity/trufflehog#5326
• fix(gitparse): cheaper low-memory git scan, stop losing trailing commits by @​kashifkhan0771 in trufflesecurity/trufflehog#5331
• analyzer/github: include is_fine_grained metadata and make gist enumeration non-fatal by @​unsmith in trufflesecurity/trufflehog#5332

Full Changelog: trufflesecurity/trufflehog@v3.97.5...v3.97.6

Commits

• 4dd8831 Spruce up Makefile a little (#5347)
• 449d8a3 Int 595 auth errors (#5259)
• bad9901 Add version and comment_number lines to SharePoint source metadata (#5348)
• 4b8eb0e make 401s for Basic auth verified false. (#5290)
• bbf9447 Update module github.com/gabriel-vasile/mimetype to v1.4.15 (#5283)
• 16b566b Update module github.com/aymanbagabas/go-osc52 to v1.2.2 (#5252)
• a25ff85 ci: scope Smoke timeouts to trufflehog runs, not the build (#5317)
• ca9d3b3 [SCAN-162] Add Err() to JobProgress and JobProgressRef (#5346)
• a5f3de5 Set all verification errors in detectors (#5253)
• 7ee4d49 Add per detector verification timing to verification cache (#5341)
• Additional commits viewable in compare view

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
do-knowledge-studio	Ready	Preview, v0	Sep 30, 2026 3:22pm UTC

[github-actions]

Blocked merge diagnosis — blocked
⏳ Check run(s) still in progress: ["Dependency Verify","Quality Gate","Unit Tests","Codacy Static Code Analysis","Diagnose Blocked Merge State","Shell Script Security Analysis","Infrastructure as Code Security","Trivy Filesystem Security Scan","Dependency Advisory Audit","GitHub Actions Workflow Validation","commitlint","Analyze (javascript-typescript)","Analyze (actions)","GitNexus"]

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.}

[nexus-check]

GitNexus Review · PR #830

No issues found in 1 changed file. (target branch indexed; the incoming branch is not, so cross-branch structure came from the diff alone)

Summary

A narrowly scoped security workflow dependency update with no graph-traced downstream reach, but elevated file risk.

🟠 HIGH blast radius. This appears to be a GitHub Actions dependency update in .github/workflows/security-scan.yml, with no graph-traced dependents.

The change bumps trufflesecurity/trufflehog from 3.97.5 to 3.97.9. Review the dependency reference and surrounding configuration in .github/workflows/security-scan.yml, which is the HIGH risk file.

Full detail lives in the GitNexus check run for this commit.

[nexus-check]

🤖 Agent context for GitNexus Review · PR #830

This comment carries deterministic graph detail for coding agents and reviewers who want the receipts — the main review comment carries the human summary.

🟠 HIGH blast radius — no downstream dependents were found in the code graph; review the dependent list before merging. (likely driven by file-risk heuristics — no direct dependents or affected modules were found)

Blast Level	Dependents	Modules	Files
🟠 HIGH	0	0	1

What changed

Changed Files (1)

File	Status
.github/workflows/security-scan.yml	🟡 modified

What to check

File Risk (1)

File	Risk	Category
.github/workflows/security-scan.yml	🟠 HIGH	CI/CD