From 4c0dd5e9b57f596ccbde2f5163f5fb613e0420f9 Mon Sep 17 00:00:00 2001
From: "renovate-sh-app[bot]"
 <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Date: Thu, 14 May 2026 20:00:58 +0000
Subject: [PATCH] chore(deps): update trufflesecurity/trufflehog docker tag to
 v3.95.3

| datasource      | package                    | from    | to      |
| --------------- | -------------------------- | ------- | ------- |
| docker          | trufflesecurity/trufflehog | 3.88.29 | 3.95.3  |
| github-releases | trufflesecurity/trufflehog | v3.94.0 | v3.95.3 |


Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
---
 .github/workflows/reusable-trufflehog.yml | 2 +-
 pre-commit/trufflehog.sh                  | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/reusable-trufflehog.yml b/.github/workflows/reusable-trufflehog.yml
index 1fd37f23..3f600724 100644
--- a/.github/workflows/reusable-trufflehog.yml
+++ b/.github/workflows/reusable-trufflehog.yml
@@ -30,7 +30,7 @@ permissions:
 
 env:
   # renovate: datasource=github-releases depName=trufflesecurity/trufflehog
-  TRUFFLEHOG_VERSION: v3.94.0
+  TRUFFLEHOG_VERSION: v3.95.3
 
 jobs:
   trufflehog-scan:
diff --git a/pre-commit/trufflehog.sh b/pre-commit/trufflehog.sh
index 16177e42..a97cd289 100755
--- a/pre-commit/trufflehog.sh
+++ b/pre-commit/trufflehog.sh
@@ -3,7 +3,7 @@
 set -euo pipefail
 
 # renovate: datasource=docker depName=trufflesecurity/trufflehog
-TRUFFLEHOG_DEFAULT_VERSION="3.88.29@sha256:6375b4dd7d045656bf78f52ac5a6e992eff344da9def96f0953cda26f791ffb7"
+TRUFFLEHOG_DEFAULT_VERSION="3.95.3@sha256:9cc33bb080cac0efbbf228a17667172875b529eeeab01efcc4697adfb55f568a"
 TRUFFLEHOG_VERSION="${TRUFFLEHOG_VERSION:-${TRUFFLEHOG_DEFAULT_VERSION}}"
 
 docker \