Skip to content

Conversation

shahzadhaider1
Copy link
Contributor

Description:

This PR updates the go-mssqldb library from version v1.8.0 to v1.8.2 to resolve an issue in the SQL Server detector.
The previous version of the driver was unable to correctly parse the PWD field in connection strings, causing the detector to skip secrets where passwords were specified using the PWD key.

By upgrading to v1.8.2, which includes a fix for this parsing issue, the detector can now accurately process and detect secrets containing PWD.

Checklist:

  • Tests passing (make test-community)?
  • Lint passing (make lint this requires golangci-lint)?

@shahzadhaider1 shahzadhaider1 requested a review from a team as a code owner June 3, 2025 12:05
@shahzadhaider1 shahzadhaider1 self-assigned this Jun 3, 2025
@shahzadhaider1 shahzadhaider1 requested a review from a team June 3, 2025 12:17
@amanfcp
Copy link
Contributor

amanfcp commented Jun 3, 2025

Thank you @shahzadhaider1 for creating issue on their end and for continued follow ups 🥳

@zricethezav zricethezav merged commit 45655e9 into trufflesecurity:main Jun 3, 2025
12 checks passed
@shahzadhaider1 shahzadhaider1 deleted the fix/sqlserver-detector branch June 4, 2025 05:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Trufflehog cannot find sql server connection string that uses "pwd" instead of "password"
4 participants