Mick Grove
|
aa2c3ba0cc
|
Decode Base64 blobs and scan their contents for secrets while skipping short strings for performance. This has a small performance impact and can be disabled with --no-base64
|
2025-08-30 19:40:22 -07:00 |
|
Mick Grove
|
fc0be774b4
|
Decode Base64 blobs and scan their contents for secrets while skipping short strings for performance. This has a small performance impact and can be disabled with --no-base64
|
2025-08-30 19:40:11 -07:00 |
|
Mick Grove
|
984231e25c
|
Decode Base64 blobs and scan their contents for secrets while skipping short strings for performance
|
2025-08-30 16:44:55 -07:00 |
|
Mick Grove
|
87094ad773
|
- Added '--repo-artifacts' flag to scan repository issues, gists/snippets, and wikis when cloning via '--git-url'
|
2025-08-20 20:41:19 -07:00 |
|
Mick Grove
|
a3d9d22d6c
|
- Added '--repo-artifacts' flag to scan repository issues, gists/snippets, and wikis when cloning via '--git-url'
|
2025-08-20 20:41:11 -07:00 |
|
Mick Grove
|
bf08d973b4
|
Added '--skip-regex' and '--skip-word' flags to ignore secrets matching custom patterns or skipwords
|
2025-08-19 19:18:25 -07:00 |
|
Mick Grove
|
36f51afd63
|
- Fixed issue with self-update on Linux
- Reverted the change to json and jsonl outputs by rule
|
2025-08-19 11:55:28 -07:00 |
|
Mick Grove
|
41a4ebb60f
|
- Added rules for clearbit, kickbox, azure container registry, improved Azure Storage key
- Grouped JSON and JSONL outputs by rule, restoring matches arrays in reports
|
2025-08-18 22:56:34 -07:00 |
|
Mick Grove
|
92bbe70487
|
fixing windows tests
|
2025-08-17 21:11:09 -07:00 |
|
Mick Grove
|
c81e8a763d
|
fixed failing tests
|
2025-08-17 17:41:51 -07:00 |
|
Mick Grove
|
068448193f
|
fixed failing tests
|
2025-08-17 17:41:34 -07:00 |
|
Mick Grove
|
6619705459
|
removed serde_utils and added Authress rule
|
2025-08-16 07:33:36 -07:00 |
|
Mick Grove
|
b8ffa3ba0c
|
- Added support for scanning gitlab subgroups, with 'kingfisher scan --gitlab-group my-group --gitlab-include-subgroups'
|
2025-08-14 09:25:18 -07:00 |
|
Mick Grove
|
1054476a3b
|
fixed test
|
2025-08-13 09:23:03 -07:00 |
|
Mick Grove
|
a062e82728
|
fixed test
|
2025-08-13 09:20:36 -07:00 |
|
Mick Grove
|
e7a8da6b3c
|
Dropped the “prevalidated” flag from rule definitions and validation logic so every finding now flows through the standard active/inactive/unknown pipeline, simplifying rule configuration and preventing special‑case bypasses
|
2025-08-13 08:22:53 -07:00 |
|
Mick Grove
|
94e2e11de3
|
Added support for scanning Confluence pages
|
2025-08-10 21:54:26 -07:00 |
|
Mick Grove
|
baa7b6e761
|
Added support for scanning Confluence pages
|
2025-08-10 21:51:31 -07:00 |
|
Mick Grove
|
9ca6ea5fb6
|
removed unused cli argument, snippet-length
|
2025-08-10 17:27:36 -07:00 |
|
Mick Grove
|
690db297e3
|
removed unused cli argument, snippet-length
|
2025-08-10 17:25:32 -07:00 |
|
Mick Grove
|
c9c0aba687
|
- --quiet now suppresses scan summaries and rule statistics unless --rule-stats is explicitly provided
- Added X Consumer key detection and validation
|
2025-08-09 15:36:12 -07:00 |
|
Mick Grove
|
c763780905
|
GitLab: include nested subgroup projects when enumerating group repositories
|
2025-08-08 15:11:44 -07:00 |
|
Mick Grove
|
a912043eb9
|
changes in response to code review
|
2025-08-07 18:45:46 -07:00 |
|
Mick Grove
|
0bdd68c900
|
JWT tokens without both 'iss' and 'aud' are no longer reported as active credentials
|
2025-08-07 18:30:40 -07:00 |
|
Mick Grove
|
b71fb5e6e2
|
JWT tokens without both 'iss' and 'aud' are no longer reported as active credentials
|
2025-08-07 17:21:16 -07:00 |
|
Mick Grove
|
8d32662c1a
|
fixed issue where --redact did not function properly
|
2025-08-06 21:23:27 -07:00 |
|
Mick Grove
|
e48b9617c8
|
Remote scans with --git-history=none now clone repositories with a working tree and scan the current files instead of erroring with 'No inputs to scan.'
|
2025-08-06 19:16:22 -07:00 |
|
Mick Grove
|
0b8e8fcc75
|
Remote scans with --git-history=none now clone repositories with a working tree and scan the current files instead of erroring with 'No inputs to scan.'
|
2025-08-06 19:15:50 -07:00 |
|
Mick Grove
|
27b37245e7
|
refactored output reporting and formatting logic
|
2025-08-04 08:58:06 -07:00 |
|
Mick Grove
|
10d604418b
|
improved integration test and updated README
|
2025-08-03 09:45:52 -07:00 |
|
Mick Grove
|
9a3d27f881
|
added integration test
|
2025-08-03 08:56:22 -07:00 |
|
Mick Grove
|
96ab0d4b59
|
-Added support for scanning AWS S3 buckets via --s3-bucket and optional --s3-prefix
- Added --role-arn and --aws-local-profile flags for S3 authentication alongside KF_AWS_KEY/KF_AWS_SECRET
|
2025-08-02 20:40:16 -07:00 |
|
Mick Grove
|
8a74eba160
|
- New rules: Telegram bot token, OpenWeatherMap, Apify
- New OpenAI detectors added (@joshlarsen)
- Fixed bug that broke validation when using unnamed group captures
|
2025-08-01 16:56:04 -07:00 |
|
Mick Grove
|
86ea3540e3
|
Added support for Slack. Wrote a basic integration test
|
2025-07-29 20:20:33 -07:00 |
|
Mick Grove
|
3320863962
|
Added support for Slack
|
2025-07-29 19:00:49 -07:00 |
|
Mick Grove
|
2d8550aa15
|
WIP: Adding support for scanning Docker images
|
2025-07-27 13:17:49 -07:00 |
|
Mick Grove
|
9a3fabdbf2
|
WIP: Adding support for scanning Docker images
|
2025-07-27 12:20:20 -07:00 |
|
Mick Grove
|
75aa9906d8
|
fixed failing test
|
2025-07-25 19:40:40 -07:00 |
|
Mick Grove
|
5c8f7d88ef
|
Added support for scanning issues returned from a JQL search using --jira-url and --jql
|
2025-07-25 17:23:18 -07:00 |
|
Mick Grove
|
ee6332a78d
|
change that hoists the redirect-free reqwest::Client into a single, lazily-initialized static so every call to validate_jwt re-uses the same handle (and therefore the same connection-pool, DNS cache, TLS session cache, etc)
|
2025-07-14 17:22:37 -07:00 |
|
Mick Grove
|
45e735ec89
|
Removed --ignore-tests argument, because the --exclude flag provides more granular functionality
|
2025-07-14 16:55:19 -07:00 |
|
Mick Grove
|
3520c5fba5
|
Added baseline feature with --baseline-file and --manage-baseline flags. Introduced --exclude option for skipping paths
|
2025-07-14 13:18:24 -07:00 |
|
Mick Grove
|
b2a4263669
|
Added PR review suggestions
|
2025-07-09 16:00:54 -07:00 |
|
Mick Grove
|
2280bee6e2
|
JSON output was missing committer name and email
|
2025-07-02 15:13:31 -07:00 |
|
Mick Grove
|
c6567ee04b
|
Restored --version cli argument. Added a test for it
|
2025-07-01 10:31:09 -07:00 |
|
Mick Grove
|
a3060ec144
|
Added test to prevent this and similar issues
|
2025-06-29 22:50:16 -07:00 |
|
Mick Grove
|
366f6fab5b
|
Added test to prevent this and similar issues
|
2025-06-29 22:01:25 -07:00 |
|
Mick Grove
|
28af26b23a
|
Introduced flag – skip files/dirs whose path resembles tests (, , , , ), reducing noise.
|
2025-06-28 09:16:42 -07:00 |
|
Mick Grove
|
3add34be78
|
Added rules for readme, rubygems, salesforce, segment, snyk, pulumi, pubnub
|
2025-06-26 15:37:51 -07:00 |
|
Mick Grove
|
d5f9d40027
|
Ensuring temp files are cleaned up. Applying visual style to the update check output
|
2025-06-26 09:45:14 -07:00 |
|