Mick Grove
22b111fd96
Merge pull request #143 from mongodb/development
...
v1.63.0
2025-11-10 18:59:30 -08:00
Mick Grove
03a6699fe8
v1.63.0
2025-11-10 18:47:51 -08:00
Mick Grove
1b8bb0edab
Merge pull request #142 from mongodb/development
...
v1.62.0
2025-11-10 07:35:50 -08:00
Mick Grove
7f5afe0ddb
Fixing CI builds for Windows on GitHub Actions
2025-11-10 07:35:08 -08:00
Mick Grove
64c02380b2
Merge pull request #141 from mongodb/development
...
v1.62.0
2025-11-09 22:24:55 -08:00
Mick Grove
c3c40c3eb6
Fixing CI builds for Windows on GitHub Actions
2025-11-09 22:24:12 -08:00
Mick Grove
0aabe954a0
Fixing CI builds for Windows on GitHub Actions
2025-11-09 22:22:11 -08:00
Mick Grove
07dfa47019
Fixing CI builds for Windows on GitHub Actions
2025-11-09 20:44:42 -08:00
Mick Grove
1558288132
Fixing CI builds for Windows on GitHub Actions
2025-11-09 20:05:58 -08:00
Mick Grove
35c4e824ea
Fixing CI builds for Windows on GitHub Actions
2025-11-09 17:34:21 -08:00
Mick Grove
8cd052613a
Fixing CI builds for Windows on GitHub Actions
2025-11-09 17:34:14 -08:00
Mick Grove
5d666c136f
Fixing CI builds for Windows on GitHub Actions
2025-11-09 17:09:58 -08:00
Mick Grove
6e4f77bbb3
Fixing CI builds for Windows on GitHub Actions
2025-11-09 17:06:20 -08:00
Mick Grove
e564e6146c
Fixing CI builds for Windows on GitHub Actions
2025-11-09 16:51:16 -08:00
Mick Grove
133d59b367
Fixing CI builds for Windows on GitHub Actions
2025-11-09 16:50:29 -08:00
Mick Grove
4ce710b544
Merge pull request #140 from mongodb/development
...
v1.62.0
2025-11-09 10:31:05 -08:00
Mick Grove
77bcbd6130
changes in response to code review
2025-11-09 09:16:50 -08:00
Mick Grove
778303f0ae
updated confluent rule with a checksum. Added zuplo rule with a checksum
2025-11-09 08:47:19 -08:00
Mick Grove
c856373fb5
updated confluent rule with a checksum. Added zuplo rule with a checksum
2025-11-09 08:42:16 -08:00
Mick Grove
1ee9e804b0
updated confluent rule with a checksum. Added zuplo rule with a checksum
2025-11-08 16:01:58 -08:00
Mick Grove
0c07f3729f
fixing rules
2025-11-08 15:03:53 -08:00
Mick Grove
065b26a220
fixing rules
2025-11-08 10:48:00 -08:00
Mick Grove
76a7422666
Added checksum comparisons to pattern_requirements, new suffix, crc32, and base62 Liquid filters, and verbose logging so mismatched checksums are skipped with context rather than reported as findings.
2025-11-07 18:49:03 -08:00
Mick Grove
bd13877b0d
Added checksum comparisons to pattern_requirements, new suffix, crc32, and base62 Liquid filters, and verbose logging so mismatched checksums are skipped with context rather than reported as findings.
2025-11-07 16:31:52 -08:00
Mick Grove
12730bb609
Added checksum comparisons to pattern_requirements, new suffix, crc32, and base62 Liquid filters, and verbose logging so mismatched checksums are skipped with context rather than reported as findings.
2025-11-07 16:31:24 -08:00
Mick Grove
5b9c4743a5
updated ci
2025-11-06 16:22:35 -08:00
Mick Grove
724690dba8
updated ci
2025-11-06 09:11:24 -08:00
Mick Grove
563c1a4be0
updated ci
2025-11-05 22:35:29 -08:00
Mick Grove
c9555422b4
updated ci
2025-11-05 18:30:21 -08:00
Mick Grove
dc02abac63
Added an optional exclude_words list to PatternRequirements so matches containing case-insensitive placeholder words are filtered out, with accompanying tests to cover the new behavior.
2025-11-05 17:19:11 -08:00
Mick Grove
046ac6a052
Added an optional exclude_words list to PatternRequirements so matches containing case-insensitive placeholder words are filtered out, with accompanying tests to cover the new behavior.
2025-11-04 13:07:24 -08:00
Mick Grove
c89841a958
Added an optional exclude_words list to PatternRequirements so matches containing case-insensitive placeholder words are filtered out, with accompanying tests to cover the new behavior.
2025-11-04 14:16:23 -05:00
Mick Grove
3b3a4e5030
Added an optional exclude_words list to PatternRequirements so matches containing case-insensitive placeholder words are filtered out, with accompanying tests to cover the new behavior.
2025-11-04 14:15:04 -05:00
Mick Grove
8c9a0ad771
Automatically set --no-dedup whenever --manage-baseline is supplied so baseline management retains every occurrence of a finding
2025-11-04 14:06:35 -05:00
Mick Grove
c0e4910d1f
pattern_requirements for rules — Post-regex character-class gating to cut false positives without lookarounds. Authors can now require minimum counts of digits, uppercase, lowercase, and special characters, with an optional custom special-char set.
...
Why: Hyperscan doesn’t support lookaheads/behinds, so many “must contain X and Y” checks had to be baked into the regex (hurting readability) or were impossible. pattern_requirements applies lightweight, in-memory checks after a match is found, keeping patterns fast and clean.
2025-11-04 13:55:31 -05:00
Mick Grove
5faee1b7af
Merge pull request #139 from mongodb/development
...
updated README
2025-10-31 16:34:35 -07:00
Mick Grove
d7ae80a948
updated README
2025-10-31 16:34:09 -07:00
Mick Grove
86640a4a89
Merge pull request #138 from mongodb/development
...
updated README
2025-10-31 16:33:19 -07:00
Mick Grove
5074342e12
updated README
2025-10-31 16:32:35 -07:00
Mick Grove
1196fcd6bd
updated README
2025-10-31 16:22:48 -07:00
Mick Grove
45de80a3e7
updated README
2025-10-31 16:21:23 -07:00
Mick Grove
b7d8e29436
Merge pull request #137 from mongodb/development
...
v1.61.0
2025-10-31 15:02:55 -07:00
Mick Grove
ea60add5e3
fixed bug in bash installer
2025-10-31 15:02:30 -07:00
Mick Grove
96f268d638
updated for v1.61.0
2025-10-30 22:50:41 -07:00
Mick Grove
ef45ead4b1
updated smoke_branch tests
2025-10-26 11:53:29 -07:00
Mick Grove
701c08814f
updated smoke_branch tests
2025-10-26 00:13:40 -07:00
Mick Grove
d99f7af005
updated smoke_branch tests
2025-10-26 00:13:31 -07:00
Mick Grove
8dd17650f8
- Fixed local filesystem scans to keep open_path_as_is enabled when opening Git repositories and only disable it for diff-based scans.
...
- Created Linux and Windows specific installer script
- Updated diff-focused scanning so --branch-root-commit can be provided alongside --branch, letting you diff from a chosen commit while targeting a specific branch tip (still defaulting back to the --branch ref when the commit is omitted).
2025-10-25 17:25:29 -07:00
Mick Grove
a3bddfbea8
- Fixed local filesystem scans to keep open_path_as_is enabled when opening Git repositories and only disable it for diff-based scans.
...
- Created Linux and Windows specific installer script
- Updated diff-focused scanning so --branch-root-commit can be provided alongside --branch, letting you diff from a chosen commit while targeting a specific branch tip (still defaulting back to the --branch ref when the commit is omitted).
2025-10-25 17:13:16 -07:00
Mick Grove
3627323cb0
- Fixed local filesystem scans to keep open_path_as_is enabled when opening Git repositories and only disable it for diff-based scans.
...
- Created Linux and Windows specific installer script
- Updated diff-focused scanning so --branch-root-commit can be provided alongside --branch, letting you diff from a chosen commit while targeting a specific branch tip (still defaulting back to the --branch ref when the commit is omitted).
2025-10-25 17:12:51 -07:00
