Commit graph

309 commits

Author SHA1 Message Date
Mick Grove
8a7de90d4f Merge pull request #99 from mongodb/development
v1.46.0
2025-08-27 16:49:25 -07:00
Mick Grove
4f77706d0c changes in response to code review 2025-08-27 15:43:31 -07:00
Mick Grove
b3f80d7a33 added top level 'self-update' cli sub command to update the binary independently. Now supports updating over homebrew managed binary 2025-08-27 15:35:01 -07:00
Mick Grove
c4cda65690 added rules for zhipu 2025-08-27 12:43:41 -07:00
Mick Grove
8798d799f9 added rules for together.ai 2025-08-27 12:20:44 -07:00
Mick Grove
41b237740b added rules for nvidia nim 2025-08-27 11:39:32 -07:00
Mick Grove
0bd7a428f6 added rules for cerbras, friendli, fireworks.ai 2025-08-27 11:25:39 -07:00
Mick Grove
1945d65a70 Added rule for 'weights and biases' 2025-08-27 10:20:04 -07:00
Mick Grove
b54f9894c2 added ollama rule 2025-08-26 10:22:18 -07:00
Mick Grove
639fc60955 Added a new install-precommit subcommand that installs a git pre-commit hook, prompting or accepting --global/--repo flags to control scope and configuring the hook to run kingfisher --quiet --only-valid --no-update-check 2025-08-22 17:33:03 -07:00
Mick Grove
231b92e52e Added a new install-precommit subcommand that installs a git pre-commit hook, prompting or accepting --global/--repo flags to control scope and configuring the hook to run kingfisher --quiet --only-valid --no-update-check 2025-08-22 17:26:48 -07:00
Mick Grove
78b9f3dd8d - Improved rules: AWS, pem 2025-08-22 16:16:00 -07:00
Mick Grove
ef4cb03226 mproved AWS rule 2025-08-22 13:26:54 -07:00
Mick Grove
24a0898245 Merge pull request #96 from mongodb/development
v1.45.0
2025-08-21 17:29:15 -07:00
Mick Grove
71d0e02fc4 fixed failing tests 2025-08-21 16:13:03 -07:00
Mick Grove
36d9ba54a1 fixed failing tests 2025-08-21 16:11:34 -07:00
Mick Grove
d841b72e6c fixed failing tests 2025-08-21 16:10:52 -07:00
Mick Grove
81d2f47c67 - Added '--repo-artifacts' flag to scan repository issues, gists/snippets, and wikis when cloning via '--git-url'
- Added rules for sendbird, mattermost, langchain, notion
- JWT validation hardened to reject alg:none by default (only allowed if explicitly configured), require iss for OIDC/JWKS verification, ensuring Active Credential means cryptographically verified and time-valid, not just unexpired
- Updated the Git cloning logic to include all refs and minimize clone output, allowing Kingfisher to analyze pull request and deleted branch history
2025-08-21 15:39:04 -07:00
Mick Grove
f820aaad6e - Added '--repo-artifacts' flag to scan repository issues, gists/snippets, and wikis when cloning via '--git-url' 2025-08-20 20:41:19 -07:00
Mick Grove
6e4c94ddc3 - Added '--repo-artifacts' flag to scan repository issues, gists/snippets, and wikis when cloning via '--git-url' 2025-08-20 20:41:11 -07:00
Mick Grove
fa72b106cf Merge pull request #94 from mongodb/development
v1.44.0
2025-08-19 20:11:28 -07:00
Mick Grove
32b11dd409 Added '--skip-regex' and '--skip-word' flags to ignore secrets matching custom patterns or skipwords 2025-08-19 19:19:13 -07:00
Mick Grove
d3bf941c5f Added '--skip-regex' and '--skip-word' flags to ignore secrets matching custom patterns or skipwords 2025-08-19 19:18:25 -07:00
Mick Grove
2411b86b78 - Fixed issue with self-update on Linux
- Reverted the change to json and jsonl outputs by rule
2025-08-19 11:55:28 -07:00
Mick Grove
343c08ed00 Fixed issue with self-update on Linux 2025-08-19 09:30:26 -07:00
Mick Grove
a5f142f6b7 Merge pull request #92 from mongodb/development
v1.43.0
2025-08-18 23:34:39 -07:00
Mick Grove
4602ea8754 fixed example in rule 2025-08-18 23:32:15 -07:00
Mick Grove
951b62d61e - Added rules for clearbit, kickbox, azure container registry, improved Azure Storage key
- Grouped JSON and JSONL outputs by rule, restoring matches arrays in reports
2025-08-18 22:56:34 -07:00
Mick Grove
2de3d53404 Merge pull request #91 from mongodb/development
fixing windows tests
2025-08-17 21:11:52 -07:00
Mick Grove
ab6ac8943a fixing windows tests 2025-08-17 21:11:09 -07:00
Mick Grove
2e6fd5d878 Merge pull request #90 from mongodb/development
v1.42.0
2025-08-17 19:05:45 -07:00
Mick Grove
14cd646ece fixing issues reported by code review 2025-08-17 18:02:36 -07:00
Mick Grove
2b062163e2 fixed failing tests 2025-08-17 17:41:51 -07:00
Mick Grove
125858c060 fixed failing tests 2025-08-17 17:41:34 -07:00
Mick Grove
262adf658b added more rules 2025-08-16 20:36:22 -07:00
Mick Grove
6d669b4bb7 added more rules 2025-08-16 20:23:27 -07:00
Mick Grove
a2965bcf47 added more rules 2025-08-16 14:54:01 -07:00
Mick Grove
1d2522882a added clickhouse rule and validation 2025-08-16 08:41:39 -07:00
Mick Grove
7b08f5d447 removed serde_utils and added Authress rule 2025-08-16 07:35:52 -07:00
Mick Grove
80058136af removed serde_utils and added Authress rule 2025-08-16 07:34:02 -07:00
Mick Grove
6fb119d501 removed serde_utils and added Authress rule 2025-08-16 07:33:36 -07:00
Mick Grove
695b051e24 Improved language detection 2025-08-15 16:08:46 -07:00
Mick Grove
19baf9c43d refactored rule loading 2025-08-15 13:13:54 -07:00
Mick Grove
5b8e83f5e7 refactored rule loading 2025-08-15 13:13:33 -07:00
Mick Grove
9b282cb33f code cleanup' 2025-08-15 09:07:25 -07:00
Mick Grove
87a97b2811 Merge pull request #88 from mongodb/development
v1.41.0
2025-08-14 11:19:01 -07:00
Mick Grove
a3a7efb96e fixed aiven regex to pass test 2025-08-14 10:17:16 -07:00
Mick Grove
737e4829ac - Added support for scanning gitlab subgroups, with 'kingfisher scan --gitlab-group my-group --gitlab-include-subgroups' 2025-08-14 09:26:44 -07:00
Mick Grove
14fccc9cc6 - Added support for scanning gitlab subgroups, with 'kingfisher scan --gitlab-group my-group --gitlab-include-subgroups' 2025-08-14 09:25:18 -07:00
Mick Grove
e83b171694 added rule for Vercel 2025-08-13 15:35:04 -07:00