Mick Grove
9cabccc195
updated user-agent
2025-09-10 16:08:33 -07:00
Mick Grove
26995696e5
updated rule for AWS Secret Access key
2025-09-10 16:00:21 -07:00
Mick Grove
e74a42c20b
updated rule for AWS Secret Access key
2025-09-10 13:29:19 -07:00
Mick Grove
6785e61768
Increase max-file-size default to 256 mb (up from 64 mb)
2025-09-09 22:40:00 -07:00
Mick Grove
7b193f89a7
- Enabled MongoDB URI validation
...
- AWS + GCP validators now respect HTTPS_PROXY and share a consistent user agent across AWS, GCP, and HTTP validation
2025-09-09 22:35:17 -07:00
Mick Grove
611f19fd74
- Enabled MongoDB URI validation
...
- AWS + GCP validators now respect HTTPS_PROXY and share a consistent user agent across AWS, GCP, and HTTP validation
2025-09-09 16:45:02 -07:00
Mick Grove
9035a862f4
fixed ascii coloring in update check
2025-09-06 15:13:34 -07:00
Mick Grove
3a67fcc81c
fix windows x64 builds
2025-09-05 13:14:12 -07:00
Mick Grove
44b64d0648
preparing for v1.48.0
2025-09-05 10:20:41 -07:00
Mick Grove
9dd8487d54
preparing for v1.48.0
2025-09-05 09:31:52 -07:00
Mick Grove
3b9f177865
preparing for v1.48.0
2025-09-05 09:31:43 -07:00
Mick Grove
f4aa334a97
updated readme
2025-09-05 07:57:14 -07:00
Mick Grove
fa9639ff48
updated readme
2025-09-05 07:54:50 -07:00
Mick Grove
3a18d52245
updated readme
2025-09-04 23:52:43 -07:00
Mick Grove
2ee204ce3c
updated jwt rule
2025-09-04 23:31:34 -07:00
Mick Grove
e538807536
updated sha1 crate
2025-09-04 22:24:30 -07:00
Mick Grove
49afc71803
- Improved error message when self-update cannot find the current binary
...
- Optimized memory usage via string interning and extensive data sharing
- Replaced quadratic match filtering with a per-rule span map, fixing missed secrets in extremely large files and improving scan performance
- Support scanning extremely large files by chunking input into 1 GiB segments with small overlaps, avoiding vectorscan buffer limits while preserving match offsets
- Always use chunked vectorscan, eliminating the slow regex fallback for blobs over 4 GiB
- Skip Base64 scanning for blobs over 64 MB to avoid a second pass over massive files
- Increased max-file-size default to 64 MB (up from 25 MB)
2025-09-04 21:51:24 -07:00
Mick Grove
bf60c5584b
Optimized memory usage via string interning and extensive data sharing
2025-09-03 09:52:49 -07:00
Mick Grove
ac34f35f61
Optimized memory usage via string interning and extensive data sharing
2025-09-02 19:54:44 -07:00
Mick Grove
1575d35601
Improved error message when self-update cannot find the current binary
2025-09-02 13:59:01 -07:00
Mick Grove
2a85f66e4a
fix windows x64 builds
2025-08-31 17:26:30 -07:00
Mick Grove
e03ab5972d
fix ci build error
2025-08-31 10:27:16 -07:00
Mick Grove
40ef76fd00
fix ci build error
2025-08-30 22:24:13 -07:00
Mick Grove
db0cd8d4ff
Fix tests
2025-08-30 21:25:12 -07:00
Mick Grove
3bed8b36f2
Fix changes in response to code review
2025-08-30 20:07:31 -07:00
Mick Grove
eaa1de928f
Decode Base64 blobs and scan their contents for secrets while skipping short strings for performance. This has a small performance impact and can be disabled with --no-base64
2025-08-30 20:02:53 -07:00
Mick Grove
aa2c3ba0cc
Decode Base64 blobs and scan their contents for secrets while skipping short strings for performance. This has a small performance impact and can be disabled with --no-base64
2025-08-30 19:40:22 -07:00
Mick Grove
fc0be774b4
Decode Base64 blobs and scan their contents for secrets while skipping short strings for performance. This has a small performance impact and can be disabled with --no-base64
2025-08-30 19:40:11 -07:00
Mick Grove
984231e25c
Decode Base64 blobs and scan their contents for secrets while skipping short strings for performance
2025-08-30 16:44:55 -07:00
Mick Grove
b2b5791190
- Improved rules: github oauth2, diffbot, mailchimp, aws
...
- Added validation to SauceLabs rule
- Added rules: shodan, bitly, flickr
2025-08-29 17:24:26 -07:00
Mick Grove
96f1784953
changes in response to code review
2025-08-27 15:43:31 -07:00
Mick Grove
332f2c59f9
added top level 'self-update' cli sub command to update the binary independently. Now supports updating over homebrew managed binary
2025-08-27 15:35:01 -07:00
Mick Grove
c2de3bc25c
added rules for zhipu
2025-08-27 12:43:41 -07:00
Mick Grove
d1bd843567
added rules for together.ai
2025-08-27 12:20:44 -07:00
Mick Grove
4194b01306
added rules for nvidia nim
2025-08-27 11:39:32 -07:00
Mick Grove
49640c5338
added rules for cerbras, friendli, fireworks.ai
2025-08-27 11:25:39 -07:00
Mick Grove
8135bf6b37
Added rule for 'weights and biases'
2025-08-27 10:20:04 -07:00
Mick Grove
bbbb0f33bb
added ollama rule
2025-08-26 10:22:18 -07:00
Mick Grove
7f3846c8e7
Added a new install-precommit subcommand that installs a git pre-commit hook, prompting or accepting --global/--repo flags to control scope and configuring the hook to run kingfisher --quiet --only-valid --no-update-check
2025-08-22 17:33:03 -07:00
Mick Grove
2f1385f5f1
Added a new install-precommit subcommand that installs a git pre-commit hook, prompting or accepting --global/--repo flags to control scope and configuring the hook to run kingfisher --quiet --only-valid --no-update-check
2025-08-22 17:26:48 -07:00
Mick Grove
96293385f5
- Improved rules: AWS, pem
2025-08-22 16:16:00 -07:00
Mick Grove
6f06b1acb3
mproved AWS rule
2025-08-22 13:26:54 -07:00
Mick Grove
f51abc00b0
fixed failing tests
2025-08-21 16:13:03 -07:00
Mick Grove
29e09906b7
fixed failing tests
2025-08-21 16:11:34 -07:00
Mick Grove
910196d11d
fixed failing tests
2025-08-21 16:10:52 -07:00
Mick Grove
245fb20670
- Added '--repo-artifacts' flag to scan repository issues, gists/snippets, and wikis when cloning via '--git-url'
...
- Added rules for sendbird, mattermost, langchain, notion
- JWT validation hardened to reject alg:none by default (only allowed if explicitly configured), require iss for OIDC/JWKS verification, ensuring Active Credential means cryptographically verified and time-valid, not just unexpired
- Updated the Git cloning logic to include all refs and minimize clone output, allowing Kingfisher to analyze pull request and deleted branch history
2025-08-21 15:39:04 -07:00
Mick Grove
87094ad773
- Added '--repo-artifacts' flag to scan repository issues, gists/snippets, and wikis when cloning via '--git-url'
2025-08-20 20:41:19 -07:00
Mick Grove
a3d9d22d6c
- Added '--repo-artifacts' flag to scan repository issues, gists/snippets, and wikis when cloning via '--git-url'
2025-08-20 20:41:11 -07:00
Mick Grove
90405c77dd
Added '--skip-regex' and '--skip-word' flags to ignore secrets matching custom patterns or skipwords
2025-08-19 19:19:13 -07:00
Mick Grove
bf08d973b4
Added '--skip-regex' and '--skip-word' flags to ignore secrets matching custom patterns or skipwords
2025-08-19 19:18:25 -07:00
