Commit graph

1,225 commits

Author SHA1 Message Date
Mick Grove
d28bbafcf6 Fix ADF text flattening 2026-02-26 23:25:50 -07:00
Sorevitnod
f680f31e54 Fix Jira ADF description not being scanned on Jira Cloud
Jira Cloud API v3 returns issue descriptions and comment bodies in
Atlassian Document Format (ADF) — a nested JSON tree — rather than as
plain strings. Previously, the raw ADF object was serialized to disk
and the scanner found 0 bytes of meaningful content, producing no
findings even when secrets were present.

This commit adds `extract_adf_text()` which recursively walks the ADF
`content` tree and collects all leaf `"type":"text"` node values into a
single plain string. `download_issues_to_dir()` now replaces any ADF
`description` or comment `body` fields with their extracted plain text
before writing the issue JSON to disk.

Fixes #242

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-02-21 19:08:46 +00:00
Mick Grove
c1717a69d7
Merge pull request #240 from mongodb/development v1.84.0
v1.84.0
2026-02-19 22:15:49 -08:00
Mick Grove
8ae2ba1a1e fixed tests 2026-02-19 22:15:14 -08:00
Mick Grove
02538a6ac4 added more access-maps 2026-02-19 20:51:12 -08:00
Mick Grove
05002fe4d6 added more access-maps 2026-02-19 20:39:07 -08:00
Mick Grove
f38df8a953 added more access-maps 2026-02-19 19:36:43 -08:00
Mick Grove
a9c5d8524f added more access-maps 2026-02-19 18:19:20 -08:00
Mick Grove
17bb433227 improved GCP access mapping support 2026-02-19 14:58:10 -08:00
Mick Grove
3b1085baa6 added buildkit and harness to access-map 2026-02-17 22:58:29 -08:00
Mick Grove
32d40c0b53 added pipedrive and amplitude 2026-02-17 16:42:44 -08:00
Mick Grove
ea0f6ba834
Merge pull request #238 from hamirmahal/fix/around-20-warnings-in-release-workflow
fix: around 20 warnings in release workflow
2026-02-17 08:27:26 -08:00
Hamir
1e06504477
fix: around 20 set-output command warnings 2026-02-16 15:15:04 -08:00
Hamir
2afb747872
chore: changes from formatting on save 2026-02-16 15:14:35 -08:00
Mick Grove
d2f8f51c5d
Merge pull request #236 from mongodb/development v1.83.0
1.83.0
2026-02-16 09:44:18 -08:00
Mick Grove
51d782a917 Fixes in response to PR review 2026-02-16 09:43:16 -08:00
Mick Grove
0ddf3fc10f Fixes in response to PR review 2026-02-16 07:34:32 -08:00
Mick Grove
8cf09936fc Kingfisher can now generate an auditor-friendly HTML report 2026-02-15 23:50:39 -08:00
Mick Grove
39a4e217e3 Kingfisher can now generate an auditor-friendly HTML report 2026-02-15 14:29:42 -08:00
Mick Grove
470120369b refactored code 2026-02-14 14:08:48 -08:00
Mick Grove
d3e659491d refactored code 2026-02-14 13:12:26 -08:00
Mick Grove
f62bfe103b tree sitter scanning improvements 2026-02-14 11:13:59 -08:00
Mick Grove
7468230f47 html report viewer improvements 2026-02-13 22:36:48 -08:00
Mick Grove
fdf85f09fc html report viewer improvements 2026-02-13 18:35:36 -08:00
Mick Grove
79102a073b html report viewer improvements 2026-02-13 18:19:18 -08:00
Mick Grove
7653acb433 wip 1.83 2026-02-13 17:37:31 -08:00
Mick Grove
816d5c40ba wip 1.83 2026-02-13 16:41:28 -08:00
Mick Grove
88d3f780fa
Merge pull request #233 from mongodb/development v1.82.0
Fixed CI runner failure when executing tests
2026-02-13 12:31:11 -08:00
Mick Grove
a36634c4b4 Fixed CI runner failure when executing tests 2026-02-13 10:04:18 -08:00
Mick Grove
09ed89eec2 Fixed CI runner failure when executing tests 2026-02-13 09:57:44 -08:00
Mick Grove
56827ae342 Fixed CI runner failure when executing tests 2026-02-13 09:39:41 -08:00
Mick Grove
409e1557de Fixed CI runner failure when executing tests 2026-02-13 09:35:04 -08:00
Mick Grove
cfc01eab68 Fixed CI runner failure when executing tests 2026-02-13 09:19:02 -08:00
Mick Grove
78ed92494b
Merge pull request #232 from mongodb/development
Fixed CI runner failure when executing tests
2026-02-13 08:41:13 -08:00
Mick Grove
0ba79df1f4 Fixed CI runner failure when executing tests 2026-02-13 08:40:04 -08:00
Mick Grove
368ba8e288
Merge pull request #231 from mongodb/development
Fixed CI runner failure when executing tests
2026-02-13 07:55:59 -08:00
Mick Grove
0c9ca048ea Fixed CI runner failure when executing tests 2026-02-13 07:55:17 -08:00
Mick Grove
d50c74d26a
Merge pull request #230 from mongodb/development
Fixed CI runner failure when executing tests
2026-02-12 22:27:09 -08:00
Mick Grove
1583df7a64 Fixed CI runner failure when executing tests 2026-02-12 21:56:07 -08:00
Mick Grove
dfa4375152 Fixed CI runner failure when executing tests 2026-02-12 21:46:17 -08:00
Mick Grove
e9f253577c
Merge pull request #229 from mongodb/development
Fixed CI runner failure when executing tests
2026-02-12 21:12:38 -08:00
Mick Grove
20a05a643c Fixed CI runner failure when executing tests 2026-02-12 21:11:50 -08:00
Mick Grove
66276ad205
Merge pull request #228 from mongodb/development
v1.82.0
2026-02-12 19:23:39 -08:00
Mick Grove
1a8651ecb0 Fixed CI runner failure when executing tests 2026-02-12 17:26:28 -08:00
Mick Grove
1503b4f661 Fixed CI runner failure when executing tests 2026-02-12 17:25:49 -08:00
Mick Grove
6a9a3b35ed Fixed CI runner failure when executing tests 2026-02-12 17:23:03 -08:00
Mick Grove
e72f40b169 Fixed CI runner failure when executing tests 2026-02-12 16:51:55 -08:00
Mick Grove
dfe6554b1c Fixed CI runner failure when executing tests 2026-02-12 16:07:55 -08:00
Mick Grove
60c72292c7 Added optional validation rate limiting via --validation-rps (global) and repeatable --validation-rps-rule <RULE_SELECTOR=RPS> (per-rule override) for both scan and validate. Throttling now applies across built-in validator types (HTTP/gRPC plus AWS, GCP, Coinbase, MongoDB, Postgres, MySQL, JDBC, JWT, and Azure Storage). Rule selectors support the short form (for example, github=2 matches kingfisher.github.*) with longest-prefix precedence when multiple selectors apply. 2026-02-12 13:15:51 -08:00
Mick Grove
5882468177 Added optional validation rate limiting via --validation-rps (global) and repeatable --validation-rps-rule <RULE_SELECTOR=RPS> (per-rule override) for both scan and validate. Throttling now applies across built-in validator types (HTTP/gRPC plus AWS, GCP, Coinbase, MongoDB, Postgres, MySQL, JDBC, JWT, and Azure Storage). Rule selectors support the short form (for example, github=2 matches kingfisher.github.*) with longest-prefix precedence when multiple selectors apply. 2026-02-12 12:33:59 -08:00