Mick Grove
ef45ead4b1
updated smoke_branch tests
2025-10-26 11:53:29 -07:00
Mick Grove
8aced005b8
- Added first-class Hugging Face scanning support, including CLI enumeration, token authentication, and integration with remote scans.
...
- Condensed GitError formatting to report the exit status and the first informative lines from stdout/stderr, producing concise git clone failure logs.
- Added support for scanning Google Cloud Storage buckets via --gcs-bucket, including optional prefixes and service-account authentication.
- Added --skip-aws-account (now accepting comma-separated values) and --skip-aws-account-file to bypass live AWS validation for known canary/honey-token account IDs without triggering alerts. Kingfisher now ships with several canary AWS account IDs pre-seeded in the skip list and now reports matching findings as "Not Attempted" with the "Response" containing "(skip list entry)" so its clear that validation was intentionally skipped and why.
2025-10-15 22:47:40 -07:00
Mick Grove
3ef9086759
Added a new CLI flag, --user-agent-suffix to allow developers to append additional information to the user-agent
2025-09-18 14:11:54 -07:00
Mick Grove
065449a483
updated user-agent
2025-09-10 16:13:28 -07:00
Mick Grove
9cabccc195
updated user-agent
2025-09-10 16:08:33 -07:00
Mick Grove
7b193f89a7
- Enabled MongoDB URI validation
...
- AWS + GCP validators now respect HTTPS_PROXY and share a consistent user agent across AWS, GCP, and HTTP validation
2025-09-09 22:35:17 -07:00
Mick Grove
611f19fd74
- Enabled MongoDB URI validation
...
- AWS + GCP validators now respect HTTPS_PROXY and share a consistent user agent across AWS, GCP, and HTTP validation
2025-09-09 16:45:02 -07:00
Mick Grove
ac34f35f61
Optimized memory usage via string interning and extensive data sharing
2025-09-02 19:54:44 -07:00
Mick Grove
984231e25c
Decode Base64 blobs and scan their contents for secrets while skipping short strings for performance
2025-08-30 16:44:55 -07:00
Mick Grove
b2b5791190
- Improved rules: github oauth2, diffbot, mailchimp, aws
...
- Added validation to SauceLabs rule
- Added rules: shodan, bitly, flickr
2025-08-29 17:24:26 -07:00
Mick Grove
1a6f03df26
refactored rule loading
2025-08-15 13:13:33 -07:00
Mick Grove
8a74eba160
- New rules: Telegram bot token, OpenWeatherMap, Apify
...
- New OpenAI detectors added (@joshlarsen)
- Fixed bug that broke validation when using unnamed group captures
2025-08-01 16:56:04 -07:00
Mick Grove
97135c01fd
Fixed validation caching for HTTP validators to include rendered headers so inactive secrets no longer appear active, in some cases
2025-08-01 09:15:24 -07:00
Mick Grove
51bc64339c
- Fixed issue when more than 1 named capture group is used in a rule variable
...
- Added 2 new liquid template filters: 'b64dec' and 'es256_sign'
- Added custom validator for Coinbase, and a Coinbase rule that uses it
2025-07-31 16:52:50 -07:00
Mick Grove
793b9e847c
Fixed Gitlab support. Added pre-commit and pre-receive installation scripts.
2025-07-23 19:57:33 -07:00
Mick Grove
352d8ff659
change that hoists the redirect-free reqwest::Client into a single, lazily-initialized static so every call to validate_jwt re-uses the same handle (and therefore the same connection-pool, DNS cache, TLS session cache, etc)
2025-07-14 17:22:51 -07:00
Mick Grove
93f1e3b1da
JWT validation performs OpenID Connect discovery using the iss claim and verifies signatures via JWKS
2025-07-14 15:31:44 -07:00
Mick Grove
cd4f626502
Added support for HTTP request bodies in rule validation. Added mistral and perplexity rule
2025-07-08 17:49:12 -07:00
Mick Grove
28af26b23a
Introduced flag – skip files/dirs whose path resembles tests (, , , , ), reducing noise.
2025-06-28 09:16:42 -07:00
Mick Grove
87d2a83e3e
Fix: HTML detection now requires both HTML content-type and html tag, fixing webhook false negatives
2025-06-27 15:28:34 -07:00
Mick Grove
18e0b3c9b4
Fixed malformed rules. Now validating that response_matcher is present in validation section of all rules
2025-06-25 23:29:46 -07:00
Mick Grove
0d3513b6f9
Fixed malformed rules. Now validating that response_matcher is present in validation section of all rules
2025-06-25 22:17:37 -07:00
Mick Grove
fc4aee9e41
preparing for v1.12
2025-06-24 17:17:16 -07:00
