Commit graph

7 commits

Author SHA1 Message Date
Mick Grove
c0e4910d1f pattern_requirements for rules — Post-regex character-class gating to cut false positives without lookarounds. Authors can now require minimum counts of digits, uppercase, lowercase, and special characters, with an optional custom special-char set.
Why: Hyperscan doesn’t support lookaheads/behinds, so many “must contain X and Y” checks had to be baked into the regex (hurting readability) or were impossible. pattern_requirements applies lightweight, in-memory checks after a match is found, keeping patterns fast and clean.
2025-11-04 13:55:31 -05:00
Mick Grove
69c14f7451 Populate the finding path from git blob metadata so history-derived secrets display their file location instead of an empty path 2025-09-24 10:06:47 -07:00
Mick Grove
0ab21ace99 improved azure storage rule. Added rule to detect TravisCI encrypted values 2025-07-12 22:44:34 -07:00
Mick Grove
37cdf1fb69 Improved Updater text. Cleaned up more rules and the examples included with them. 2025-06-26 14:29:36 -07:00
Mick Grove
a6b64307bf Updated formatting of several rules 2025-06-26 11:31:41 -07:00
Mick Grove
0d3513b6f9 Fixed malformed rules. Now validating that response_matcher is present in validation section of all rules 2025-06-25 22:17:37 -07:00
Mick Grove
fc4aee9e41 preparing for v1.12 2025-06-24 17:17:16 -07:00