Mick Grove
116aac2f83
- Updating to support Bitbucket App Passwords
...
- Improved boundaries for several rules
- Added more rules
2025-11-20 16:34:13 -08:00
Mick Grove
17e0ca3594
- Updating to support Bitbucket App Passwords
...
- Improved boundaries for several rules
- Added more rules
2025-11-20 16:33:28 -08:00
Mick Grove
42797b747d
v1.65.0
2025-11-16 23:30:14 -08:00
Mick Grove
bc4591a814
- Skip reporting MongoDB and Postgres findings when their connection strings cannot be parsed, even when validation is disabled.
...
- Improve MySQL detection by broadening URI coverage and adding live validation that skips clearly invalid connection strings.
2025-11-16 23:26:02 -08:00
Mick Grove
c6b10f0b47
- Skip reporting MongoDB and Postgres findings when their connection strings cannot be parsed, even when validation is disabled.
...
- Improve MySQL detection by broadening URI coverage and adding live validation that skips clearly invalid connection strings.
2025-11-16 23:25:42 -08:00
Mick Grove
377a220f89
- Skip reporting MongoDB and Postgres findings when their connection strings cannot be parsed, even when validation is disabled.
...
- Improve MySQL detection by broadening URI coverage and adding live validation that skips clearly invalid connection strings.
2025-11-15 08:46:53 -08:00
Mick Grove
8d77f9d298
- Skip reporting MongoDB and Postgres findings when their connection strings cannot be parsed, even when validation is disabled.
...
- Improve MySQL detection by broadening URI coverage and adding live validation that skips clearly invalid connection strings.
2025-11-15 08:43:54 -08:00
Mick Grove
9853d346a6
- Skip reporting MongoDB and Postgres findings when their connection strings cannot be parsed, even when validation is disabled.
...
- Improve MySQL detection by broadening URI coverage and adding live validation that skips clearly invalid connection strings.
2025-11-15 08:23:06 -08:00
Mick Grove
f9d75eaadd
- Skip reporting MongoDB and Postgres findings when their connection strings cannot be parsed, even when validation is disabled.
...
- Improve MySQL detection by broadening URI coverage and adding live validation that skips clearly invalid connection strings.
2025-11-15 08:11:25 -08:00
Mick Grove
debf3beb8e
Fixed broken tests
2025-11-13 15:22:48 -08:00
Mick Grove
426acac892
Filter out empty 'KF_BITBUCKET_*' environment values when constructing the Bitbucket authentication configuration so blank variables no longer override valid credentials
2025-11-13 14:30:27 -08:00
Mick Grove
c399a7a9d1
added jdbc rule and validator
2025-11-12 22:58:31 -08:00
Mick Grove
554ca07803
added jdbc rule and validator
2025-11-12 22:26:29 -08:00
Mick Grove
2ed94f75d7
added jdbc rule and validator
2025-11-12 22:25:33 -08:00
Mick Grove
d6c1dfc9d0
updated allocator
2025-11-11 13:24:06 -08:00
Mick Grove
97fbcef1ba
updated allocator
2025-11-10 21:32:52 -08:00
Mick Grove
12eda3141a
updated allocator
2025-11-10 21:24:48 -08:00
Mick Grove
dca955a95c
v1.63.0
2025-11-10 18:47:51 -08:00
Mick Grove
4433b6e27b
Fixing CI builds for Windows on GitHub Actions
2025-11-10 07:35:08 -08:00
Mick Grove
a4afbfc8d4
Fixing CI builds for Windows on GitHub Actions
2025-11-09 22:24:12 -08:00
Mick Grove
249967dd7f
Fixing CI builds for Windows on GitHub Actions
2025-11-09 22:22:11 -08:00
Mick Grove
da47c8009b
Fixing CI builds for Windows on GitHub Actions
2025-11-09 20:44:42 -08:00
Mick Grove
7558ae51d6
Fixing CI builds for Windows on GitHub Actions
2025-11-09 20:05:58 -08:00
Mick Grove
6a9860089f
Fixing CI builds for Windows on GitHub Actions
2025-11-09 17:34:21 -08:00
Mick Grove
1cc05e718b
Fixing CI builds for Windows on GitHub Actions
2025-11-09 17:34:14 -08:00
Mick Grove
02b84a0084
Fixing CI builds for Windows on GitHub Actions
2025-11-09 17:09:58 -08:00
Mick Grove
06aa69b91d
Fixing CI builds for Windows on GitHub Actions
2025-11-09 17:06:20 -08:00
Mick Grove
03ee57377b
Fixing CI builds for Windows on GitHub Actions
2025-11-09 16:51:16 -08:00
Mick Grove
22188647bb
Fixing CI builds for Windows on GitHub Actions
2025-11-09 16:50:29 -08:00
Mick Grove
da2fb6700d
changes in response to code review
2025-11-09 09:16:50 -08:00
Mick Grove
b5d964d5b0
updated confluent rule with a checksum. Added zuplo rule with a checksum
2025-11-09 08:47:19 -08:00
Mick Grove
4efdcc35e1
updated confluent rule with a checksum. Added zuplo rule with a checksum
2025-11-09 08:42:16 -08:00
Mick Grove
94a51c3d04
updated confluent rule with a checksum. Added zuplo rule with a checksum
2025-11-08 16:01:58 -08:00
Mick Grove
7eb7be72cd
fixing rules
2025-11-08 15:03:53 -08:00
Mick Grove
8aac161603
fixing rules
2025-11-08 10:48:00 -08:00
Mick Grove
a06bd0a32b
Added checksum comparisons to pattern_requirements, new suffix, crc32, and base62 Liquid filters, and verbose logging so mismatched checksums are skipped with context rather than reported as findings.
2025-11-07 18:49:03 -08:00
Mick Grove
331f4b7b75
Added checksum comparisons to pattern_requirements, new suffix, crc32, and base62 Liquid filters, and verbose logging so mismatched checksums are skipped with context rather than reported as findings.
2025-11-07 16:31:52 -08:00
Mick Grove
ccbbbad5bc
Added checksum comparisons to pattern_requirements, new suffix, crc32, and base62 Liquid filters, and verbose logging so mismatched checksums are skipped with context rather than reported as findings.
2025-11-07 16:31:24 -08:00
Mick Grove
9c4e459a14
updated ci
2025-11-06 16:22:35 -08:00
Mick Grove
dd55d45b9a
updated ci
2025-11-06 09:11:24 -08:00
Mick Grove
303f715a80
updated ci
2025-11-05 22:35:29 -08:00
Mick Grove
2f7410bcb4
updated ci
2025-11-05 18:30:21 -08:00
Mick Grove
f606f59f93
Added an optional exclude_words list to PatternRequirements so matches containing case-insensitive placeholder words are filtered out, with accompanying tests to cover the new behavior.
2025-11-05 17:19:11 -08:00
Mick Grove
6a5a62a5b5
Added an optional exclude_words list to PatternRequirements so matches containing case-insensitive placeholder words are filtered out, with accompanying tests to cover the new behavior.
2025-11-04 13:07:24 -08:00
Mick Grove
a88bef4ca2
Added an optional exclude_words list to PatternRequirements so matches containing case-insensitive placeholder words are filtered out, with accompanying tests to cover the new behavior.
2025-11-04 14:16:23 -05:00
Mick Grove
bd8bc09d0e
Added an optional exclude_words list to PatternRequirements so matches containing case-insensitive placeholder words are filtered out, with accompanying tests to cover the new behavior.
2025-11-04 14:15:04 -05:00
Mick Grove
a3e426e6ee
Automatically set --no-dedup whenever --manage-baseline is supplied so baseline management retains every occurrence of a finding
2025-11-04 14:06:35 -05:00
Mick Grove
0f953f59a5
pattern_requirements for rules — Post-regex character-class gating to cut false positives without lookarounds. Authors can now require minimum counts of digits, uppercase, lowercase, and special characters, with an optional custom special-char set.
...
Why: Hyperscan doesn’t support lookaheads/behinds, so many “must contain X and Y” checks had to be baked into the regex (hurting readability) or were impossible. pattern_requirements applies lightweight, in-memory checks after a match is found, keeping patterns fast and clean.
2025-11-04 13:55:31 -05:00
Mick Grove
4edee36034
updated README
2025-10-31 16:34:09 -07:00
Mick Grove
9297592792
updated README
2025-10-31 16:32:35 -07:00
