Commit graph

477 commits

Author SHA1 Message Date
Mick Grove
12eda3141a updated allocator 2025-11-10 21:24:48 -08:00
Mick Grove
dca955a95c v1.63.0 2025-11-10 18:47:51 -08:00
Mick Grove
4433b6e27b Fixing CI builds for Windows on GitHub Actions 2025-11-10 07:35:08 -08:00
Mick Grove
a4afbfc8d4 Fixing CI builds for Windows on GitHub Actions 2025-11-09 22:24:12 -08:00
Mick Grove
249967dd7f Fixing CI builds for Windows on GitHub Actions 2025-11-09 22:22:11 -08:00
Mick Grove
da47c8009b Fixing CI builds for Windows on GitHub Actions 2025-11-09 20:44:42 -08:00
Mick Grove
7558ae51d6 Fixing CI builds for Windows on GitHub Actions 2025-11-09 20:05:58 -08:00
Mick Grove
6a9860089f Fixing CI builds for Windows on GitHub Actions 2025-11-09 17:34:21 -08:00
Mick Grove
1cc05e718b Fixing CI builds for Windows on GitHub Actions 2025-11-09 17:34:14 -08:00
Mick Grove
02b84a0084 Fixing CI builds for Windows on GitHub Actions 2025-11-09 17:09:58 -08:00
Mick Grove
06aa69b91d Fixing CI builds for Windows on GitHub Actions 2025-11-09 17:06:20 -08:00
Mick Grove
03ee57377b Fixing CI builds for Windows on GitHub Actions 2025-11-09 16:51:16 -08:00
Mick Grove
22188647bb Fixing CI builds for Windows on GitHub Actions 2025-11-09 16:50:29 -08:00
Mick Grove
da2fb6700d changes in response to code review 2025-11-09 09:16:50 -08:00
Mick Grove
b5d964d5b0 updated confluent rule with a checksum. Added zuplo rule with a checksum 2025-11-09 08:47:19 -08:00
Mick Grove
4efdcc35e1 updated confluent rule with a checksum. Added zuplo rule with a checksum 2025-11-09 08:42:16 -08:00
Mick Grove
94a51c3d04 updated confluent rule with a checksum. Added zuplo rule with a checksum 2025-11-08 16:01:58 -08:00
Mick Grove
7eb7be72cd fixing rules 2025-11-08 15:03:53 -08:00
Mick Grove
8aac161603 fixing rules 2025-11-08 10:48:00 -08:00
Mick Grove
a06bd0a32b Added checksum comparisons to pattern_requirements, new suffix, crc32, and base62 Liquid filters, and verbose logging so mismatched checksums are skipped with context rather than reported as findings. 2025-11-07 18:49:03 -08:00
Mick Grove
331f4b7b75 Added checksum comparisons to pattern_requirements, new suffix, crc32, and base62 Liquid filters, and verbose logging so mismatched checksums are skipped with context rather than reported as findings. 2025-11-07 16:31:52 -08:00
Mick Grove
ccbbbad5bc Added checksum comparisons to pattern_requirements, new suffix, crc32, and base62 Liquid filters, and verbose logging so mismatched checksums are skipped with context rather than reported as findings. 2025-11-07 16:31:24 -08:00
Mick Grove
9c4e459a14 updated ci 2025-11-06 16:22:35 -08:00
Mick Grove
dd55d45b9a updated ci 2025-11-06 09:11:24 -08:00
Mick Grove
303f715a80 updated ci 2025-11-05 22:35:29 -08:00
Mick Grove
2f7410bcb4 updated ci 2025-11-05 18:30:21 -08:00
Mick Grove
f606f59f93 Added an optional exclude_words list to PatternRequirements so matches containing case-insensitive placeholder words are filtered out, with accompanying tests to cover the new behavior. 2025-11-05 17:19:11 -08:00
Mick Grove
6a5a62a5b5 Added an optional exclude_words list to PatternRequirements so matches containing case-insensitive placeholder words are filtered out, with accompanying tests to cover the new behavior. 2025-11-04 13:07:24 -08:00
Mick Grove
a88bef4ca2 Added an optional exclude_words list to PatternRequirements so matches containing case-insensitive placeholder words are filtered out, with accompanying tests to cover the new behavior. 2025-11-04 14:16:23 -05:00
Mick Grove
bd8bc09d0e Added an optional exclude_words list to PatternRequirements so matches containing case-insensitive placeholder words are filtered out, with accompanying tests to cover the new behavior. 2025-11-04 14:15:04 -05:00
Mick Grove
a3e426e6ee Automatically set --no-dedup whenever --manage-baseline is supplied so baseline management retains every occurrence of a finding 2025-11-04 14:06:35 -05:00
Mick Grove
0f953f59a5 pattern_requirements for rules — Post-regex character-class gating to cut false positives without lookarounds. Authors can now require minimum counts of digits, uppercase, lowercase, and special characters, with an optional custom special-char set.
Why: Hyperscan doesn’t support lookaheads/behinds, so many “must contain X and Y” checks had to be baked into the regex (hurting readability) or were impossible. pattern_requirements applies lightweight, in-memory checks after a match is found, keeping patterns fast and clean.
2025-11-04 13:55:31 -05:00
Mick Grove
4edee36034 updated README 2025-10-31 16:34:09 -07:00
Mick Grove
9297592792 updated README 2025-10-31 16:32:35 -07:00
Mick Grove
2839d0a941 updated README 2025-10-31 16:22:48 -07:00
Mick Grove
cf5bd92970 updated README 2025-10-31 16:21:23 -07:00
Mick Grove
933acd13fe fixed bug in bash installer 2025-10-31 15:02:30 -07:00
Mick Grove
ca3f175427 updated for v1.61.0 2025-10-30 22:50:41 -07:00
Mick Grove
cb22388bd1 updated smoke_branch tests 2025-10-26 11:53:29 -07:00
Mick Grove
36a06c5a5c updated smoke_branch tests 2025-10-26 00:13:40 -07:00
Mick Grove
bd83568644 updated smoke_branch tests 2025-10-26 00:13:31 -07:00
Mick Grove
2e5fcf1c15 - Fixed local filesystem scans to keep open_path_as_is enabled when opening Git repositories and only disable it for diff-based scans.
- Created Linux and Windows specific installer script
- Updated diff-focused scanning so --branch-root-commit can be provided alongside --branch, letting you diff from a chosen commit while targeting a specific branch tip (still defaulting back to the --branch ref when the commit is omitted).
2025-10-25 17:25:29 -07:00
Mick Grove
4ee15b9363 - Fixed local filesystem scans to keep open_path_as_is enabled when opening Git repositories and only disable it for diff-based scans.
- Created Linux and Windows specific installer script
- Updated diff-focused scanning so --branch-root-commit can be provided alongside --branch, letting you diff from a chosen commit while targeting a specific branch tip (still defaulting back to the --branch ref when the commit is omitted).
2025-10-25 17:13:16 -07:00
Mick Grove
7d9d3be132 - Fixed local filesystem scans to keep open_path_as_is enabled when opening Git repositories and only disable it for diff-based scans.
- Created Linux and Windows specific installer script
- Updated diff-focused scanning so --branch-root-commit can be provided alongside --branch, letting you diff from a chosen commit while targeting a specific branch tip (still defaulting back to the --branch ref when the commit is omitted).
2025-10-25 17:12:51 -07:00
Mick Grove
43d5a06b15 Merge pull request #135 from mongodb/development
v1.60.0
2025-10-23 22:22:57 -07:00
Mick Grove
1dcaa21bb5 Fixed bug in test when run on Windows 2025-10-23 22:04:01 -07:00
Mick Grove
5626e667bc Merge pull request #134 from mongodb/development
v1.60.0
2025-10-23 21:48:51 -07:00
Mick Grove
ea1bd2a022 Fixed bug in test when run on Windows 2025-10-23 21:28:37 -07:00
Mick Grove
8fda3eaa3b Fixed bug in test when run on Windows 2025-10-23 21:04:26 -07:00
Mick Grove
2f0d483a60 Merge pull request #131 from mongodb/development
v1.60.0
2025-10-23 18:49:33 -07:00