Debian Package Tracker
Register | Log in
Subscribe

trufflehog

Find, verify, and analyze leaked credentials (program)

Choose email to subscribe with

general
  • source: trufflehog (main)
  • version: 3.60.0-1
  • maintainer: Debian Go Packaging Team (DMD)
  • uploaders: Mikhail Potemkin [DMD] – Otto Kekäläinen [DMD]
  • arch: any
  • std-ver: 4.7.4
  • VCS: Git (Browse, QA)
versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]
[pool directory]
  • unstable: 3.60.0-1
versioned links
  • 3.60.0-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
binaries
  • trufflehog
action needed
A new upstream version is available: 3.97.4 high
A new upstream version 3.97.4 is available, you should consider packaging it.
Created: 2026-08-10 Last update: 2026-09-14 15:30
The package has not entered testing even though the delay is over normal
The package has not entered testing even though the 2-day delay is over. Check why.
Created: 2026-08-15 Last update: 2026-09-14 14:33
Depends on packages which need a new maintainer normal
The packages that trufflehog depends on which need a new maintainer are:
  • golang-github-denisenkom-go-mssqldb (#889258)
    • Build-Depends: golang-github-denisenkom-go-mssqldb-dev
Created: 2026-08-10 Last update: 2026-09-14 14:00
2 new commits since last upload, is it time to release? normal
vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:
commit b8c9048044a6a25bd4ab375f82c99b3b2befdef3
Author: Otto Kekäläinen <otto@debian.org>
Date:   Sun Sep 13 22:22:27 2026 +0800

    Add Build-Depends for golang-github-dlclark-regexp2-dev (v0)
    
    With the new module aware builds this package failed to build on error:
    
        src/github.com/trufflesecurity/trufflehog/v3/main.go:13:2: github.com/alecthomas/chroma@v0.10.0 (replaced by ./src/github.com/alecthomas/chroma): reading src/github.com/alecthomas/chroma/go.mod: open /debcraft/source/debian/_build/src/github.com/alecthomas/chroma/go.mod: no such file or directory
        src/github.com/trufflesecurity/trufflehog/v3/main.go:14:2: github.com/alecthomas/chroma@v0.10.0 (replaced by ./src/github.com/alecthomas/chroma): reading src/github.com/alecthomas/chroma/go.mod: open /debcraft/source/debian/_build/src/github.com/alecthomas/chroma/go.mod: no such file or directory
        src/github.com/trufflesecurity/trufflehog/v3/main.go:15:2: github.com/alecthomas/chroma@v0.10.0 (replaced by ./src/github.com/alecthomas/chroma): reading src/github.com/alecthomas/chroma/go.mod: open /debcraft/source/debian/_build/src/github.com/alecthomas/chroma/go.mod: no such file or directory
        src/github.com/trufflesecurity/trufflehog/v3/main.go:16:2: github.com/alecthomas/chroma@v0.10.0 (replaced by ./src/github.com/alecthomas/chroma): reading src/github.com/alecthomas/chroma/go.mod: open /debcraft/source/debian/_build/src/github.com/alecthomas/chroma/go.mod: no such file or directory
    
        src/github.com/trufflesecurity/trufflehog/v3/main.go:13:2: github.com/dlclark/regexp2@v1.4.0 (replaced by ./src/github.com/dlclark/regexp2): reading src/github.com/dlclark/regexp2/go.mod: open /debcraft/source/debian/_build/src/github.com/dlclark/regexp2/go.mod: no such file or directory
        src/github.com/trufflesecurity/trufflehog/v3/main.go:14:2: github.com/dlclark/regexp2@v1.4.0 (replaced by ./src/github.com/dlclark/regexp2): reading src/github.com/dlclark/regexp2/go.mod: open /debcraft/source/debian/_build/src/github.com/dlclark/regexp2/go.mod: no such file or directory
        src/github.com/trufflesecurity/trufflehog/v3/main.go:15:2: github.com/dlclark/regexp2@v1.4.0 (replaced by ./src/github.com/dlclark/regexp2): reading src/github.com/dlclark/regexp2/go.mod: open /debcraft/source/debian/_build/src/github.com/dlclark/regexp2/go.mod: no such file or directory
        src/github.com/trufflesecurity/trufflehog/v3/main.go:16:2: github.com/dlclark/regexp2@v1.4.0 (replaced by ./src/github.com/dlclark/regexp2): reading src/github.com/dlclark/regexp2/go.mod: open /debcraft/source/debian/_build/src/github.com/dlclark/regexp2/go.mod: no such file or directory
    
    Fix this by intentionally depending on the v0 version of the indirect
    dependency to force the correct version to be available regardless of
    any issues in indirect dependency tree.

commit 0fceefd7dc319edbc4eba297f0d21803d0bf3397
Author: Otto Kekäläinen <otto@debian.org>
Date:   Mon Sep 7 20:43:01 2026 +0300

    Make the XS-Go-Import-Path line match the go.mod contents to fix build
    
    The new module aware build system in dh-go expects the import path to
    match the exact path (with major version included) as in go.mod.
    
    This fixes the build error:
    
        dh_auto_build: error: Unable to open directory debian/_build/src/github.com/trufflesecurity/trufflehog/v3 No such file or directory


https://salsa.debian.org/api/v4/projects/go-team%2Fpackages%2Ftrufflehog API request failed: 401 Unauthorized at /srv/qa.debian.org/data/vcswatch/vcswatch line 410.
Created: 2026-09-14 Last update: 2026-09-14 11:32
lintian reports 1 warning normal
Lintian reports 1 warning about this package. You should make the package lintian clean getting rid of them.
Created: 2026-08-10 Last update: 2026-08-10 23:31
debian/patches: 4 patches to forward upstream low

Among the 4 debian patches available in version 3.60.0-1 of the package, we noticed the following issues:

  • 4 patches where the metadata indicates that the patch has not yet been forwarded upstream. You should either forward the patch upstream or update the metadata to document its real status.
Created: 2026-08-10 Last update: 2026-08-10 23:18
testing migrations
  • excuses:
    • Migration status for trufflehog (- to 3.60.0-1): BLOCKED: Rejected/violates migration policy/introduces a regression
    • Issues preventing migration:
    • ∙ ∙ New but not reproduced on i386 - info: trufflehog
    • Additional info (not blocking):
    • ∙ ∙ Piuparts tested OK - https://piuparts.debian.org/sid/source/t/trufflehog.html
    • ∙ ∙ Autopkgtest for trufflehog/3.60.0-1: amd64: Pass, arm64: Pass, armhf: Pass, i386: Pass, ppc64el: Pass, riscv64: Pass
    • ∙ ∙ Reproduced on amd64 - info
    • ∙ ∙ Reproduced on arm64 - info
    • ∙ ∙ Reproduced on armhf - info
    • ∙ ∙ Required age reduced by 3 days because of autopkgtest
    • ∙ ∙ 35 days old (needed 2 days)
    • Not considered
news
[rss feed]
  • [2026-08-10] Accepted trufflehog 3.60.0-1 (source amd64) into unstable (Debian FTP Masters) (signed by: Otto Kekäläinen)
bugs [bug history graph]
  • all: 1
  • RC: 0
  • I&N: 0
  • M&W: 1
  • F&P: 0
  • patch: 0
links
  • homepage
  • lintian (0, 1)
  • buildd: logs, cross
  • popcon
  • browse source code
  • other distros
  • debian patches
ubuntu Ubuntu logo [Information about Ubuntu for Debian Developers]
  • version: 3.60.0-1

Debian Package Tracker — Copyright 2013-2025 The Distro Tracker Developers
Report problems to the tracker.debian.org pseudo-package in the Debian BTS.
Documentation — Bugs — Git Repository — Contributing