Mick Grove
|
9ca6ea5fb6
|
removed unused cli argument, snippet-length
|
2025-08-10 17:27:36 -07:00 |
|
Mick Grove
|
690db297e3
|
removed unused cli argument, snippet-length
|
2025-08-10 17:25:32 -07:00 |
|
Mick Grove
|
c9c0aba687
|
- --quiet now suppresses scan summaries and rule statistics unless --rule-stats is explicitly provided
- Added X Consumer key detection and validation
|
2025-08-09 15:36:12 -07:00 |
|
Mick Grove
|
0a53a58ac1
|
GitLab: include nested subgroup projects when enumerating group repositories
|
2025-08-08 21:42:49 -07:00 |
|
Mick Grove
|
4dd8a4531b
|
GitLab: include nested subgroup projects when enumerating group repositories
|
2025-08-08 18:08:17 -07:00 |
|
Mick Grove
|
cdfdd5f54e
|
GitLab: include nested subgroup projects when enumerating group repositories
|
2025-08-08 15:12:33 -07:00 |
|
Mick Grove
|
c763780905
|
GitLab: include nested subgroup projects when enumerating group repositories
|
2025-08-08 15:11:44 -07:00 |
|
Mick Grove
|
02803a9bb2
|
GitLab: include nested subgroup projects when enumerating group repositories
|
2025-08-08 15:11:36 -07:00 |
|
Mick Grove
|
a912043eb9
|
changes in response to code review
|
2025-08-07 18:45:46 -07:00 |
|
Mick Grove
|
0bdd68c900
|
JWT tokens without both 'iss' and 'aud' are no longer reported as active credentials
|
2025-08-07 18:30:40 -07:00 |
|
Mick Grove
|
b3ddc119a4
|
JWT tokens without both 'iss' and 'aud' are no longer reported as active credentials
|
2025-08-07 17:36:39 -07:00 |
|
Mick Grove
|
b71fb5e6e2
|
JWT tokens without both 'iss' and 'aud' are no longer reported as active credentials
|
2025-08-07 17:21:16 -07:00 |
|
Mick Grove
|
de181634cb
|
Fixed GitHub organization and GitLab group scans when using '--git-history=none'
|
2025-08-07 16:13:57 -07:00 |
|
Mick Grove
|
8d32662c1a
|
fixed issue where --redact did not function properly
|
2025-08-06 21:23:27 -07:00 |
|
Mick Grove
|
e48b9617c8
|
Remote scans with --git-history=none now clone repositories with a working tree and scan the current files instead of erroring with 'No inputs to scan.'
|
2025-08-06 19:16:22 -07:00 |
|
Mick Grove
|
0b8e8fcc75
|
Remote scans with --git-history=none now clone repositories with a working tree and scan the current files instead of erroring with 'No inputs to scan.'
|
2025-08-06 19:15:50 -07:00 |
|
Mick Grove
|
ac1bd81e37
|
- Fixed header precedence so custom HTTP validation headers like "Accept" are preserved
- Added new Heroku rule
|
2025-08-04 19:32:42 -07:00 |
|
Mick Grove
|
664cfd0e5c
|
- Fixed header precedence so custom HTTP validation headers like "Accept" are preserved
- Added new Heroku rule
|
2025-08-04 19:32:19 -07:00 |
|
Mick Grove
|
ce2126608a
|
added progress bar to s3 downloads, and attempting to fix linux-arm64 test failure due to code 143
|
2025-08-04 12:32:19 -07:00 |
|
Mick Grove
|
f14c2b6e61
|
fixed issues found by pr review
|
2025-08-04 09:21:49 -07:00 |
|
Mick Grove
|
3ac5e04ea0
|
Update src/reporter.rs
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Mick Grove <mick.grove@mongodb.com>
|
2025-08-04 09:09:51 -07:00 |
|
Mick Grove
|
27b37245e7
|
refactored output reporting and formatting logic
|
2025-08-04 08:58:06 -07:00 |
|
Mick Grove
|
141640ef4a
|
Update src/scanner/runner.rs
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
|
2025-08-03 10:35:52 -07:00 |
|
Mick Grove
|
10d604418b
|
improved integration test and updated README
|
2025-08-03 09:45:52 -07:00 |
|
Mick Grove
|
ef6ba415f2
|
improving s3 bucket scanning feature
|
2025-08-03 08:13:08 -07:00 |
|
Mick Grove
|
96ab0d4b59
|
-Added support for scanning AWS S3 buckets via --s3-bucket and optional --s3-prefix
- Added --role-arn and --aws-local-profile flags for S3 authentication alongside KF_AWS_KEY/KF_AWS_SECRET
|
2025-08-02 20:40:16 -07:00 |
|
Mick Grove
|
8a74eba160
|
- New rules: Telegram bot token, OpenWeatherMap, Apify
- New OpenAI detectors added (@joshlarsen)
- Fixed bug that broke validation when using unnamed group captures
|
2025-08-01 16:56:04 -07:00 |
|
Mick Grove
|
0ef4144710
|
Fixed validation caching for HTTP validators to include rendered headers so inactive secrets no longer appear active, in some cases. Removed pre-commit installation hook, due to bugs
|
2025-08-01 09:18:29 -07:00 |
|
Mick Grove
|
97135c01fd
|
Fixed validation caching for HTTP validators to include rendered headers so inactive secrets no longer appear active, in some cases
|
2025-08-01 09:15:24 -07:00 |
|
Mick Grove
|
f0a99dcfcd
|
bug fixes in response to code review. Also added support for ed25519 coinbase cdp api keys
|
2025-07-31 18:29:21 -07:00 |
|
Mick Grove
|
51bc64339c
|
- Fixed issue when more than 1 named capture group is used in a rule variable
- Added 2 new liquid template filters: 'b64dec' and 'es256_sign'
- Added custom validator for Coinbase, and a Coinbase rule that uses it
|
2025-07-31 16:52:50 -07:00 |
|
Mick Grove
|
a15631026b
|
Added support for Slack. Wrote a basic integration test
|
2025-07-29 20:55:44 -07:00 |
|
Mick Grove
|
3320863962
|
Added support for Slack
|
2025-07-29 19:00:49 -07:00 |
|
Mick Grove
|
f00e0683d7
|
Removed println statements used for debugging
|
2025-07-29 10:25:58 -07:00 |
|
Mick Grove
|
d648756a03
|
Fixed broken windows build script
|
2025-07-29 10:12:40 -07:00 |
|
Mick Grove
|
a270d8ecb2
|
improved precommit hook, to allow global installation
|
2025-07-28 10:26:32 -07:00 |
|
Mick Grove
|
4b032214f6
|
improved precommit hook, to allow global installation
|
2025-07-28 10:25:11 -07:00 |
|
Mick Grove
|
d9e3a61689
|
changed from oci-distribution to newer oci-client
|
2025-07-28 09:55:48 -07:00 |
|
Mick Grove
|
97dbda8f51
|
Adding support for scanning Docker images
|
2025-07-27 20:25:45 -07:00 |
|
Mick Grove
|
c4dd956443
|
Adding support for scanning Docker images
|
2025-07-27 19:03:43 -07:00 |
|
Mick Grove
|
f48ea7ca0a
|
Adding support for scanning Docker images
|
2025-07-27 17:54:26 -07:00 |
|
Mick Grove
|
29b97b4091
|
WIP: Adding support for scanning Docker images
|
2025-07-27 14:59:19 -07:00 |
|
Mick Grove
|
2d8550aa15
|
WIP: Adding support for scanning Docker images
|
2025-07-27 13:17:49 -07:00 |
|
Mick Grove
|
9a3fabdbf2
|
WIP: Adding support for scanning Docker images
|
2025-07-27 12:20:20 -07:00 |
|
Mick Grove
|
3d580ad8f7
|
removed openssl dependency from jira-query
|
2025-07-25 21:50:28 -07:00 |
|
Mick Grove
|
eedfabc8f8
|
Update src/reporter/sarif_format.rs
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
|
2025-07-25 21:04:47 -07:00 |
|
Mick Grove
|
5c8f7d88ef
|
Added support for scanning issues returned from a JQL search using --jira-url and --jql
|
2025-07-25 17:23:18 -07:00 |
|
Mick Grove
|
793b9e847c
|
Fixed Gitlab support. Added pre-commit and pre-receive installation scripts.
|
2025-07-23 19:57:33 -07:00 |
|
Mick Grove
|
c9818e0da3
|
Added precommit and prereceive hook installations. Fixing Gitlab support
|
2025-07-23 18:14:43 -07:00 |
|
Mick Grove
|
8f587f62de
|
Updating GitHub Action to generate Docker image. Added rules for Diffbot, ai21, baseten. Fixed supabase rule. Added 'alg' to JWT validation output
|
2025-07-18 15:26:18 -07:00 |
|