Mick Grove
8a83203e3f
Added --github-exclude and --gitlab-exclude options to skip specific repositories when scanning or listing GitHub and GitLab sources, including support for gitignore-style glob patterns
2025-09-15 21:26:51 -07:00
Mick Grove
26995696e5
updated rule for AWS Secret Access key
2025-09-10 16:00:21 -07:00
Mick Grove
7b193f89a7
- Enabled MongoDB URI validation
...
- AWS + GCP validators now respect HTTPS_PROXY and share a consistent user agent across AWS, GCP, and HTTP validation
2025-09-09 22:35:17 -07:00
Mick Grove
49afc71803
- Improved error message when self-update cannot find the current binary
...
- Optimized memory usage via string interning and extensive data sharing
- Replaced quadratic match filtering with a per-rule span map, fixing missed secrets in extremely large files and improving scan performance
- Support scanning extremely large files by chunking input into 1 GiB segments with small overlaps, avoiding vectorscan buffer limits while preserving match offsets
- Always use chunked vectorscan, eliminating the slow regex fallback for blobs over 4 GiB
- Skip Base64 scanning for blobs over 64 MB to avoid a second pass over massive files
- Increased max-file-size default to 64 MB (up from 25 MB)
2025-09-04 21:51:24 -07:00
Mick Grove
fc0be774b4
Decode Base64 blobs and scan their contents for secrets while skipping short strings for performance. This has a small performance impact and can be disabled with --no-base64
2025-08-30 19:40:11 -07:00
Mick Grove
332f2c59f9
added top level 'self-update' cli sub command to update the binary independently. Now supports updating over homebrew managed binary
2025-08-27 15:35:01 -07:00
Mick Grove
c2de3bc25c
added rules for zhipu
2025-08-27 12:43:41 -07:00
Mick Grove
7f3846c8e7
Added a new install-precommit subcommand that installs a git pre-commit hook, prompting or accepting --global/--repo flags to control scope and configuring the hook to run kingfisher --quiet --only-valid --no-update-check
2025-08-22 17:33:03 -07:00
Mick Grove
2f1385f5f1
Added a new install-precommit subcommand that installs a git pre-commit hook, prompting or accepting --global/--repo flags to control scope and configuring the hook to run kingfisher --quiet --only-valid --no-update-check
2025-08-22 17:26:48 -07:00
Mick Grove
a3d9d22d6c
- Added '--repo-artifacts' flag to scan repository issues, gists/snippets, and wikis when cloning via '--git-url'
2025-08-20 20:41:11 -07:00
Mick Grove
bf08d973b4
Added '--skip-regex' and '--skip-word' flags to ignore secrets matching custom patterns or skipwords
2025-08-19 19:18:25 -07:00
Mick Grove
b8ffa3ba0c
- Added support for scanning gitlab subgroups, with 'kingfisher scan --gitlab-group my-group --gitlab-include-subgroups'
2025-08-14 09:25:18 -07:00
Mick Grove
baa7b6e761
Added support for scanning Confluence pages
2025-08-10 21:51:31 -07:00
Mick Grove
9ca6ea5fb6
removed unused cli argument, snippet-length
2025-08-10 17:27:36 -07:00
Mick Grove
690db297e3
removed unused cli argument, snippet-length
2025-08-10 17:25:32 -07:00
Mick Grove
cdfdd5f54e
GitLab: include nested subgroup projects when enumerating group repositories
2025-08-08 15:12:33 -07:00
Mick Grove
02803a9bb2
GitLab: include nested subgroup projects when enumerating group repositories
2025-08-08 15:11:36 -07:00
Mick Grove
0bdd68c900
JWT tokens without both 'iss' and 'aud' are no longer reported as active credentials
2025-08-07 18:30:40 -07:00
Mick Grove
b3ddc119a4
JWT tokens without both 'iss' and 'aud' are no longer reported as active credentials
2025-08-07 17:36:39 -07:00
Mick Grove
de181634cb
Fixed GitHub organization and GitLab group scans when using '--git-history=none'
2025-08-07 16:13:57 -07:00
Mick Grove
27b37245e7
refactored output reporting and formatting logic
2025-08-04 08:58:06 -07:00
Mick Grove
96ab0d4b59
-Added support for scanning AWS S3 buckets via --s3-bucket and optional --s3-prefix
...
- Added --role-arn and --aws-local-profile flags for S3 authentication alongside KF_AWS_KEY/KF_AWS_SECRET
2025-08-02 20:40:16 -07:00
Mick Grove
3320863962
Added support for Slack
2025-07-29 19:00:49 -07:00
Mick Grove
9a3fabdbf2
WIP: Adding support for scanning Docker images
2025-07-27 12:20:20 -07:00
Mick Grove
5c8f7d88ef
Added support for scanning issues returned from a JQL search using --jira-url and --jql
2025-07-25 17:23:18 -07:00
Mick Grove
45e735ec89
Removed --ignore-tests argument, because the --exclude flag provides more granular functionality
2025-07-14 16:55:19 -07:00
Mick Grove
3520c5fba5
Added baseline feature with --baseline-file and --manage-baseline flags. Introduced --exclude option for skipping paths
2025-07-14 13:18:24 -07:00
Mick Grove
b2a4263669
Added PR review suggestions
2025-07-09 16:00:54 -07:00
Mick Grove
c6567ee04b
Restored --version cli argument. Added a test for it
2025-07-01 10:31:09 -07:00
Mick Grove
65de1b0290
added rules for deepseek, xai. Removed branding. Added a NOTICE file
2025-06-30 17:04:29 -07:00
Mick Grove
28af26b23a
Introduced flag – skip files/dirs whose path resembles tests (, , , , ), reducing noise.
2025-06-28 09:16:42 -07:00
Mick Grove
fc4aee9e41
preparing for v1.12
2025-06-24 17:17:16 -07:00
