Commit graph

248 commits

Author SHA1 Message Date
Mick Grove
14fccc9cc6 - Added support for scanning gitlab subgroups, with 'kingfisher scan --gitlab-group my-group --gitlab-include-subgroups' 2025-08-14 09:25:18 -07:00
Mick Grove
e83b171694 added rule for Vercel 2025-08-13 15:35:04 -07:00
Mick Grove
67b570816f fixed test 2025-08-13 09:23:03 -07:00
Mick Grove
deef538835 fixed test 2025-08-13 09:20:36 -07:00
Mick Grove
f90c0a6eff Improved Tailscale api key detectors 2025-08-13 09:13:50 -07:00
Mick Grove
8c71eae231 Dropped the “prevalidated” flag from rule definitions and validation logic so every finding now flows through the standard active/inactive/unknown pipeline, simplifying rule configuration and preventing special‑case bypasses 2025-08-13 08:22:53 -07:00
Mick Grove
98ce4b9296 Added support for scanning Confluence pages 2025-08-11 09:03:58 -07:00
Mick Grove
35e4b9011d Added support for scanning Confluence pages 2025-08-11 08:26:49 -07:00
Mick Grove
39588cc098 Added support for scanning Confluence pages 2025-08-11 08:25:24 -07:00
Mick Grove
38371b538e Added support for scanning Confluence pages 2025-08-11 08:04:52 -07:00
Mick Grove
0e7a0b57dd Added support for scanning Confluence pages 2025-08-10 21:57:35 -07:00
Mick Grove
4489b576f8 Added support for scanning Confluence pages 2025-08-10 21:55:45 -07:00
Mick Grove
053d1a3224 Added support for scanning Confluence pages 2025-08-10 21:54:26 -07:00
Mick Grove
22c5594b53 Added support for scanning Confluence pages 2025-08-10 21:51:31 -07:00
Mick Grove
f4a1e85b26 removed unused cli argument, snippet-length 2025-08-10 17:27:36 -07:00
Mick Grove
706723e384 removed unused cli argument, snippet-length 2025-08-10 17:25:32 -07:00
Mick Grove
9275fb5541 - --quiet now suppresses scan summaries and rule statistics unless --rule-stats is explicitly provided
- Added X Consumer key detection and validation
2025-08-09 15:52:00 -07:00
Mick Grove
2fd6cd30e1 - --quiet now suppresses scan summaries and rule statistics unless --rule-stats is explicitly provided
- Added X Consumer key detection and validation
2025-08-09 15:36:12 -07:00
Mick Grove
3458c37d33 Added X Consumer key detection and validation 2025-08-09 08:46:07 -07:00
Mick Grove
f1c3bcb56a Added X Consumer key detection and validation 2025-08-09 08:45:27 -07:00
Mick Grove
3c487de38e GitLab: include nested subgroup projects when enumerating group repositories 2025-08-08 21:43:01 -07:00
Mick Grove
c419c164a8 GitLab: include nested subgroup projects when enumerating group repositories 2025-08-08 21:42:49 -07:00
Mick Grove
2c7b0f7705 GitLab: include nested subgroup projects when enumerating group repositories 2025-08-08 18:08:17 -07:00
Mick Grove
b0ce44f709 GitLab: include nested subgroup projects when enumerating group repositories 2025-08-08 15:12:33 -07:00
Mick Grove
96a08ed8ed GitLab: include nested subgroup projects when enumerating group repositories 2025-08-08 15:11:44 -07:00
Mick Grove
97956bcc3f GitLab: include nested subgroup projects when enumerating group repositories 2025-08-08 15:11:36 -07:00
Mick Grove
5f1c4fb236 changes in response to code review 2025-08-07 18:45:46 -07:00
Mick Grove
dafc123eb9 JWT tokens without both 'iss' and 'aud' are no longer reported as active credentials 2025-08-07 18:30:40 -07:00
Mick Grove
d4e8900d37 JWT tokens without both 'iss' and 'aud' are no longer reported as active credentials 2025-08-07 17:36:39 -07:00
Mick Grove
d8624972ec JWT tokens without both 'iss' and 'aud' are no longer reported as active credentials 2025-08-07 17:21:31 -07:00
Mick Grove
ac5b9fb594 JWT tokens without both 'iss' and 'aud' are no longer reported as active credentials 2025-08-07 17:21:16 -07:00
Mick Grove
63125b3a7f Fixed GitHub organization and GitLab group scans when using '--git-history=none' 2025-08-07 16:13:57 -07:00
Mick Grove
fb2b91595b Fixed validation logic for clarifai rule 2025-08-06 21:31:02 -07:00
Mick Grove
6fe4d0e789 fixed issue where --redact did not function properly 2025-08-06 21:23:27 -07:00
Mick Grove
6cbde61099 Remote scans with --git-history=none now clone repositories with a working tree and scan the current files instead of erroring with 'No inputs to scan.' 2025-08-06 19:16:22 -07:00
Mick Grove
a81cfb963a Remote scans with --git-history=none now clone repositories with a working tree and scan the current files instead of erroring with 'No inputs to scan.' 2025-08-06 19:15:50 -07:00
Mick Grove
a502375f78 fixing github action failure for linux-arm6 when making deb 2025-08-05 18:06:09 -07:00
Mick Grove
646e6175d2 Updated Supabase rule to detect project url's and validate their corresponding tokens 2025-08-05 16:25:22 -07:00
Mick Grove
5931847300 - Use system TLS root certificates to support self-hosted GitLab instances with internal CAs
- Added new rule: Coze personal access token
2025-08-05 14:45:51 -07:00
Mick Grove
8ff147c08c - Fixed header precedence so custom HTTP validation headers like "Accept" are preserved
- Added new Heroku rule
2025-08-04 21:38:23 -07:00
Mick Grove
ff5250c9a2 - Fixed header precedence so custom HTTP validation headers like "Accept" are preserved
- Added new Heroku rule
2025-08-04 19:32:42 -07:00
Mick Grove
28fd24c9b4 - Fixed header precedence so custom HTTP validation headers like "Accept" are preserved
- Added new Heroku rule
2025-08-04 19:32:19 -07:00
Mick Grove
be35bb532f added progress bar to s3 downloads, and attempting to fix linux-arm64 test failure due to code 143 2025-08-04 12:32:19 -07:00
Mick Grove
55f2c27ed5 fixed issues found by pr review 2025-08-04 09:21:49 -07:00
Mick Grove
1f7653c288 Update src/reporter.rs
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Mick Grove <mick.grove@mongodb.com>
2025-08-04 09:09:51 -07:00
Mick Grove
dcf31e8150 refactored output reporting and formatting logic 2025-08-04 08:58:20 -07:00
Mick Grove
bc05c3e5f2 refactored output reporting and formatting logic 2025-08-04 08:58:06 -07:00
Mick Grove
bbe1c38c93 updating s3 feature 2025-08-03 20:59:58 -07:00
Mick Grove
0a8e153842 Merge pull request #70 from micksmix/main
Added support for scanning s3 buckets
2025-08-03 10:37:33 -07:00
Mick Grove
cb5595be23 Apply suggestions from code review
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2025-08-03 10:37:02 -07:00