🐛 Trufflehog3: Remove null characters

dojo/tools/trufflehog3/parser.py

@@ -156,7 +156,7 @@ def get_finding_current(self, json_data, test, dupes):
                 title=title,
                 test=test,
                 cwe=798,
-                description=description,
+                description=description.replace("\x00", "\uFFFD"),
                 severity=severity,
                 mitigation="Secrets and passwords should be stored in a secure vault or secure storage.",
                 impact="This weakness can lead to the exposure of resources or functionality to unintended actors, possibly providing attackers with sensitive information or even execute arbitrary code.",

unittests/tools/test_trufflehog3_parser.py

@@ -99,3 +99,9 @@ def test_many_vulns_current(self):
         self.assertEqual('env-file.txt', finding.file_path)
         self.assertEqual(10, finding.line)
         self.assertEqual(1, finding.nb_occurences)
+
+    def test_issue_6999(self):
+        test_file = open(sample_path("issue_6999.json"))
+        parser = TruffleHog3Parser()
+        findings = parser.get_findings(test_file, Test())
+        self.assertEqual(len(findings), 1)