Mick Grove
1636b07810
preparing for v1.100.0
2026-05-18 09:42:04 -07:00
Mick Grove
1619737e2c
improved access map viewer
2026-04-30 18:11:10 -07:00
Mick Grove
19dafa42ea
Added provider endpoint overrides for validation and revocation via global --endpoint PROVIDER=URL and --endpoint-config FILE, with built-in support for self-hosted GitHub, GitLab, Gitea, Jira, Confluence, and Artifactory instances.
2026-04-27 13:20:16 -07:00
Mick Grove
745b32011d
performance improvements and rule improvements
2026-04-19 22:04:10 -07:00
Mick Grove
c50b3ba292
performance improvements and rule improvements
2026-04-19 16:33:13 -07:00
Mick Grove
e4cd6dd164
performance improvements and rule improvements
2026-04-17 16:53:21 -07:00
Mick Grove
74cad26aed
performance improvements and rule improvements
2026-04-17 11:01:46 -07:00
Mick Grove
c3d686cfac
performance improvements and access map viewer improvements
2026-04-16 09:56:56 -07:00
Mick Grove
c89e527053
bug fix
2026-04-16 06:44:12 -07:00
Mick Grove
d2008dc3b7
cleaned up dependency tree
2026-04-13 20:43:09 -07:00
Mick Grove
eee7697e24
changes in response to PR review
2026-04-08 09:42:37 -07:00
Mick Grove
19fe52a9bf
added more access-maps
2026-04-01 10:20:52 -07:00
Mick Grove
f0a3bee587
added --max-validation-response-length <BYTES>
2026-03-16 22:25:32 -07:00
Mick Grove
e54b87a322
added Teams support
2026-03-13 22:53:05 -07:00
Mick Grove
02538a6ac4
added more access-maps
2026-02-19 20:51:12 -08:00
Mick Grove
05002fe4d6
added more access-maps
2026-02-19 20:39:07 -08:00
Mick Grove
a9c5d8524f
added more access-maps
2026-02-19 18:19:20 -08:00
Mick Grove
3b1085baa6
added buildkit and harness to access-map
2026-02-17 22:58:29 -08:00
Mick Grove
816d5c40ba
wip 1.83
2026-02-13 16:41:28 -08:00
Mick Grove
5882468177
Added optional validation rate limiting via --validation-rps (global) and repeatable --validation-rps-rule <RULE_SELECTOR=RPS> (per-rule override) for both scan and validate. Throttling now applies across built-in validator types (HTTP/gRPC plus AWS, GCP, Coinbase, MongoDB, Postgres, MySQL, JDBC, JWT, and Azure Storage). Rule selectors support the short form (for example, github=2 matches kingfisher.github.*) with longest-prefix precedence when multiple selectors apply.
2026-02-12 12:33:59 -08:00
Mick Grove
5253204c2a
preparing for v1.78.0
2026-02-02 23:22:08 -08:00
Mick Grove
63f1d515ae
preparing for v1.78.0
2026-02-02 18:39:24 -08:00
Mick Grove
b4feb86f47
- Fixed validation deduplication for rules with nested unnamed captures (e.g. (?<REGEX>...(ABC|DEF)...)) to use the primary capture for grouping, ensuring each unique match triggers a separate validation request.
...
- Added trace-level (-vv) logging for internal validation dedup keys and grouping to aid debugging.
2026-01-21 13:13:43 -08:00
Mick Grove
26f41fcf7a
- Enhanced Access Map View: added fingerprint display, enabled searching by fingerprint, and implemented bidirectional navigation between Findings and Access Map nodes.
...
- Added Slack Access Map support with granular permissions in the tree view.
2026-01-14 17:19:02 -08:00
Mick Grove
7237a931d5
v1.73.0
2026-01-01 22:24:57 -08:00
Mick Grove
078fa16e6a
- Reduced per-match memory usage by compacting stored source locations and interning repeated capture names.
...
- Stored optional validation response bodies as boxed strings to avoid allocating empty payloads and to streamline validator caches.
- Parallelized git cloning based on the configured job count and begin scanning repositories as soon as each clone finishes to reduce end-to-end scan times.
- Combined per-repository results into a single aggregate summary after scans complete.
- Added initial access-map support and report viewer html file. Currently beta features.
2025-12-04 22:02:30 -08:00
Mick Grove
d6c1dfc9d0
updated allocator
2025-11-11 13:24:06 -08:00
Mick Grove
ba12a5b2be
preparing for v1.48.0
2025-09-05 09:31:52 -07:00
Mick Grove
c3513ea206
Optimized memory usage via string interning and extensive data sharing
2025-09-02 19:54:44 -07:00
Mick Grove
8c71eae231
Dropped the “prevalidated” flag from rule definitions and validation logic so every finding now flows through the standard active/inactive/unknown pipeline, simplifying rule configuration and preventing special‑case bypasses
2025-08-13 08:22:53 -07:00
Mick Grove
ac5b9fb594
JWT tokens without both 'iss' and 'aud' are no longer reported as active credentials
2025-08-07 17:21:16 -07:00
Mick Grove
fc4aee9e41
preparing for v1.12
2025-06-24 17:17:16 -07:00
