Mick Grove
|
816a75e3e4
|
add docker --archive support
|
2026-05-28 13:54:59 -07:00 |
|
Mick Grove
|
aca11be36d
|
preparing for v1.99.0
|
2026-05-04 23:47:48 -07:00 |
|
Mick Grove
|
20e08105cf
|
improved github organization scanning
|
2026-04-30 16:40:43 -07:00 |
|
Mick Grove
|
1337588c7b
|
Added first-class **Postman** scanning target: new kingfisher scan postman subcommand (and equivalent --postman-* flags) fetches workspaces, collections, and environments via the Postman API and scans them for hard-coded credentials in request auth blocks, pre-request/test scripts, saved example responses, and — notably — secret-typed environment variables, which the API returns in plaintext despite the UI mask. Selectors: --workspace, --collection, --environment, --all, with optional --include-mocks-monitors and --api-url for self-hosted endpoints. Authenticates via KF_POSTMAN_TOKEN (or POSTMAN_API_KEY) sent as X-Api-Key; honors X-RateLimit-RetryAfter on 429s. Findings link back to https://go.postman.co/... URLs in reports.
|
2026-04-29 11:46:17 -07:00 |
|
Mick Grove
|
997480ffc7
|
Added first-class **Postman** scanning target: new kingfisher scan postman subcommand (and equivalent --postman-* flags) fetches workspaces, collections, and environments via the Postman API and scans them for hard-coded credentials in request auth blocks, pre-request/test scripts, saved example responses, and — notably — secret-typed environment variables, which the API returns in plaintext despite the UI mask. Selectors: --workspace, --collection, --environment, --all, with optional --include-mocks-monitors and --api-url for self-hosted endpoints. Authenticates via KF_POSTMAN_TOKEN (or POSTMAN_API_KEY) sent as X-Api-Key; honors X-RateLimit-RetryAfter on 429s. Findings link back to https://go.postman.co/... URLs in reports.
|
2026-04-29 08:12:08 -07:00 |
|
Mick Grove
|
60931c11a9
|
added Teams support
|
2026-03-13 17:39:34 -07:00 |
|
Mick Grove
|
3220ed3a80
|
Merge branch 'codex/pr-244-mergeable' into development
* codex/pr-244-mergeable:
Add Jira comment and changelog scanning
|
2026-02-28 11:14:19 -07:00 |
|
Mick Grove
|
719b91301d
|
Add Jira comment and changelog scanning
|
2026-02-28 11:13:00 -07:00 |
|
Mick Grove
|
0ae4e8445c
|
Updated kingfisher scan to accept Git repository URLs as positional targets (for example kingfisher scan github.com/org/repo or kingfisher scan https://gitlab.com/group/project.git) without requiring --git-url.
|
2026-02-26 23:14:18 -07:00 |
|
Mick Grove
|
8491b03ff0
|
dockerhub rule update and docs update
|
2026-01-31 21:54:08 -08:00 |
|