Commit graph

8 commits

Author SHA1 Message Date
Mick Grove
8c07fb3f3c - Enhanced Access Map View: added fingerprint display, enabled searching by fingerprint, and implemented bidirectional navigation between Findings and Access Map nodes.
- Added Slack Access Map support with granular permissions in the tree view.
2026-01-14 21:45:55 -08:00
Akshay Jain
69d447dcc9 Add detection for short sk-None- prefixed OpenAI API keys
OpenAI issues keys with sk-None- prefix in both short (56 char) and long
(130+ char) formats. The existing openai.2 rule only matches long keys
with {100,} minimum length. This adds openai.3 to detect the short variant:
sk-None- followed by exactly 48 alphanumeric characters.

Fixes detection gap where trufflehog found valid keys that kingfisher missed.
2026-01-13 13:40:16 +05:30
Mick Grove
92b5a74822 - Updating to support Bitbucket App Passwords
- Improved boundaries for several rules
- Added more rules
2025-11-20 16:33:28 -08:00
Mick Grove
c0e4910d1f pattern_requirements for rules — Post-regex character-class gating to cut false positives without lookarounds. Authors can now require minimum counts of digits, uppercase, lowercase, and special characters, with an optional custom special-char set.
Why: Hyperscan doesn’t support lookaheads/behinds, so many “must contain X and Y” checks had to be baked into the regex (hurting readability) or were impossible. pattern_requirements applies lightweight, in-memory checks after a match is found, keeping patterns fast and clean.
2025-11-04 13:55:31 -05:00
Mick Grove
4e4bf28723
Update data/rules/openai.yml
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2025-08-01 15:31:29 -07:00
Josh Larsen
bcc3153700
add newer OpenAI API key formats 2025-08-01 15:04:37 -04:00
Mick Grove
a6b64307bf Updated formatting of several rules 2025-06-26 11:31:41 -07:00
Mick Grove
fc4aee9e41 preparing for v1.12 2025-06-24 17:17:16 -07:00