Commit graph

59 commits

Author SHA1 Message Date
Mick Grove
46d0ecce3b - New rules: Telegram bot token, OpenWeatherMap, Apify
- New OpenAI detectors added (@joshlarsen)
- Fixed bug that broke validation when using unnamed group captures
2025-08-01 16:56:04 -07:00
Mick Grove
3ecce947ab Fixed validation caching for HTTP validators to include rendered headers so inactive secrets no longer appear active, in some cases. Removed pre-commit installation hook, due to bugs 2025-08-01 09:18:29 -07:00
Mick Grove
f48eeb79e2 Fixed validation caching for HTTP validators to include rendered headers so inactive secrets no longer appear active, in some cases 2025-08-01 09:15:24 -07:00
Mick Grove
902446d754 bug fixes in response to code review. Also added support for ed25519 coinbase cdp api keys 2025-07-31 18:29:21 -07:00
Mick Grove
e73aec9d70 - Fixed issue when more than 1 named capture group is used in a rule variable
- Added 2 new liquid template filters: 'b64dec' and 'es256_sign'
- Added custom validator for Coinbase, and a Coinbase rule that uses it
2025-07-31 16:52:50 -07:00
Mick Grove
aaabcbd499 Added support for Slack. Wrote a basic integration test 2025-07-29 20:55:44 -07:00
Mick Grove
bcf2b60e0b Added support for Slack 2025-07-29 19:00:49 -07:00
Mick Grove
fc1ac8500a Removed println statements used for debugging 2025-07-29 10:25:58 -07:00
Mick Grove
d3fbffcb84 Fixed broken windows build script 2025-07-29 10:12:40 -07:00
Mick Grove
dcbdb51746 improved precommit hook, to allow global installation 2025-07-28 10:26:32 -07:00
Mick Grove
787a5aaf22 improved precommit hook, to allow global installation 2025-07-28 10:25:11 -07:00
Mick Grove
cdbf3ffac1 changed from oci-distribution to newer oci-client 2025-07-28 09:55:48 -07:00
Mick Grove
34b533a59d Adding support for scanning Docker images 2025-07-27 20:25:45 -07:00
Mick Grove
112c8c3057 Adding support for scanning Docker images 2025-07-27 19:03:43 -07:00
Mick Grove
7cf37969dd Adding support for scanning Docker images 2025-07-27 17:54:26 -07:00
Mick Grove
8739c92572 WIP: Adding support for scanning Docker images 2025-07-27 14:59:19 -07:00
Mick Grove
17586c5b57 WIP: Adding support for scanning Docker images 2025-07-27 13:17:49 -07:00
Mick Grove
627ef98881 WIP: Adding support for scanning Docker images 2025-07-27 12:20:20 -07:00
Mick Grove
86b3ba4947 removed openssl dependency from jira-query 2025-07-25 21:50:28 -07:00
Mick Grove
981ccf80a2 Update src/reporter/sarif_format.rs
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2025-07-25 21:04:47 -07:00
Mick Grove
63a757fba8 Added support for scanning issues returned from a JQL search using --jira-url and --jql 2025-07-25 17:23:18 -07:00
Mick Grove
9b4856d7d5 Fixed Gitlab support. Added pre-commit and pre-receive installation scripts. 2025-07-23 19:57:33 -07:00
Mick Grove
955118e483 Added precommit and prereceive hook installations. Fixing Gitlab support 2025-07-23 18:14:43 -07:00
Mick Grove
8b2c79e70f Updating GitHub Action to generate Docker image. Added rules for Diffbot, ai21, baseten. Fixed supabase rule. Added 'alg' to JWT validation output 2025-07-18 15:26:18 -07:00
Mick Grove
7d28ab531d updated README 2025-07-17 15:11:35 -07:00
Mick Grove
6bcfd6bc48 upgraded cargo dependencies 2025-07-17 14:31:09 -07:00
Mick Grove
5f8ffcd940 updated github actions to upgrade build from 1.85.0 to 1.88.0 2025-07-14 19:44:28 -07:00
Mick Grove
0830606260 change that hoists the redirect-free reqwest::Client into a single, lazily-initialized static so every call to validate_jwt re-uses the same handle (and therefore the same connection-pool, DNS cache, TLS session cache, etc) 2025-07-14 17:22:51 -07:00
Mick Grove
8fb78c8c65 change that hoists the redirect-free reqwest::Client into a single, lazily-initialized static so every call to validate_jwt re-uses the same handle (and therefore the same connection-pool, DNS cache, TLS session cache, etc) 2025-07-14 17:22:37 -07:00
Mick Grove
959a6b3043 Removed --ignore-tests argument, because the --exclude flag provides more granular functionality 2025-07-14 17:10:53 -07:00
Mick Grove
533fc49c54 Removed --ignore-tests argument, because the --exclude flag provides more granular functionality 2025-07-14 16:55:19 -07:00
Mick Grove
601ca05fc8 JWT validation performs OpenID Connect discovery using the iss claim and verifies signatures via JWKS 2025-07-14 15:31:44 -07:00
Mick Grove
3520c5fba5 Added baseline feature with --baseline-file and --manage-baseline flags. Introduced --exclude option for skipping paths 2025-07-14 13:18:24 -07:00
Mick Grove
0ab21ace99 improved azure storage rule. Added rule to detect TravisCI encrypted values 2025-07-12 22:44:34 -07:00
Mick Grove
b2a4263669 Added PR review suggestions 2025-07-09 16:00:54 -07:00
Mick Grove
23c0d23722 Set GIT_TERMINAL_PROMPT=0 when cloning git repos 2025-07-09 15:49:03 -07:00
Mick Grove
cadc2e44c5 Set GIT_TERMINAL_PROMPT=0 when cloning git repos 2025-07-09 15:34:36 -07:00
Mick Grove
dcb2191fe8 Added validation for Alibaba rule 2025-07-09 15:03:07 -07:00
Mick Grove
cd4f626502 Added support for HTTP request bodies in rule validation. Added mistral and perplexity rule 2025-07-08 17:49:12 -07:00
Mick Grove
2280bee6e2 JSON output was missing committer name and email 2025-07-02 15:13:31 -07:00
Mick Grove
c6567ee04b Restored --version cli argument. Added a test for it 2025-07-01 10:31:09 -07:00
Mick Grove
65de1b0290 added rules for deepseek, xai. Removed branding. Added a NOTICE file 2025-06-30 17:04:29 -07:00
Mick Grove
16bc75020b updated test 2025-06-28 09:30:22 -07:00
Mick Grove
488635e9c6 updated test 2025-06-28 09:20:44 -07:00
Mick Grove
28af26b23a Introduced flag – skip files/dirs whose path resembles tests (, , , , ), reducing noise. 2025-06-28 09:16:42 -07:00
Mick Grove
26b5b7918f Added ruels for sonarcloud, sonarqube, sourcegraph 2025-06-28 08:34:15 -07:00
Mick Grove
87d2a83e3e Fix: HTML detection now requires both HTML content-type and html tag, fixing webhook false negatives 2025-06-27 15:28:34 -07:00
Mick Grove
abeac9cde9 Fixed Snyk rule 2025-06-26 15:46:14 -07:00
Mick Grove
579828c520 Improved Updater text. Cleaned up more rules and the examples included with them. 2025-06-26 14:55:35 -07:00
Mick Grove
37cdf1fb69 Improved Updater text. Cleaned up more rules and the examples included with them. 2025-06-26 14:29:36 -07:00