SAST's secrets analyzer uses two upstream dependencies to do its work. * gitleaks * Trufflehog We're currently shipping gitleaks v1.24.0. However, [v3.3.0 shipped Feb 1, 2020](https://github.com/zricethezav/gitleaks/releases/tag/v3.3.0). We need to update to the latest and greatest. We're also shipping trufflehog v2.0.98. However, [v2.0.99 shipped 6 May, 2019](https://pypi.org/project/truffleHog/2.0.99/). We need to also update this dependency. ### Addressing breaking changes New versions of gitleaks remove one of the CLI options we rely on (see https://gitlab.com/gitlab-org/gitlab/issues/12948#note_287252726), so we will need to address the incompatibility issue with some additional logic to convert the passed ENV variable into a configuration option within `gitleaks.toml`