Mick Grove
|
ac1bd81e37
|
- Fixed header precedence so custom HTTP validation headers like "Accept" are preserved
- Added new Heroku rule
|
2025-08-04 19:32:42 -07:00 |
|
Mick Grove
|
664cfd0e5c
|
- Fixed header precedence so custom HTTP validation headers like "Accept" are preserved
- Added new Heroku rule
|
2025-08-04 19:32:19 -07:00 |
|
Mick Grove
|
ce2126608a
|
added progress bar to s3 downloads, and attempting to fix linux-arm64 test failure due to code 143
|
2025-08-04 12:32:19 -07:00 |
|
Mick Grove
|
f14c2b6e61
|
fixed issues found by pr review
|
2025-08-04 09:21:49 -07:00 |
|
Mick Grove
|
3ac5e04ea0
|
Update src/reporter.rs
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Mick Grove <mick.grove@mongodb.com>
|
2025-08-04 09:09:51 -07:00 |
|
Mick Grove
|
27b37245e7
|
refactored output reporting and formatting logic
|
2025-08-04 08:58:06 -07:00 |
|
Mick Grove
|
141640ef4a
|
Update src/scanner/runner.rs
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
|
2025-08-03 10:35:52 -07:00 |
|
Mick Grove
|
10d604418b
|
improved integration test and updated README
|
2025-08-03 09:45:52 -07:00 |
|
Mick Grove
|
ef6ba415f2
|
improving s3 bucket scanning feature
|
2025-08-03 08:13:08 -07:00 |
|
Mick Grove
|
96ab0d4b59
|
-Added support for scanning AWS S3 buckets via --s3-bucket and optional --s3-prefix
- Added --role-arn and --aws-local-profile flags for S3 authentication alongside KF_AWS_KEY/KF_AWS_SECRET
|
2025-08-02 20:40:16 -07:00 |
|
Mick Grove
|
8a74eba160
|
- New rules: Telegram bot token, OpenWeatherMap, Apify
- New OpenAI detectors added (@joshlarsen)
- Fixed bug that broke validation when using unnamed group captures
|
2025-08-01 16:56:04 -07:00 |
|
Mick Grove
|
0ef4144710
|
Fixed validation caching for HTTP validators to include rendered headers so inactive secrets no longer appear active, in some cases. Removed pre-commit installation hook, due to bugs
|
2025-08-01 09:18:29 -07:00 |
|
Mick Grove
|
97135c01fd
|
Fixed validation caching for HTTP validators to include rendered headers so inactive secrets no longer appear active, in some cases
|
2025-08-01 09:15:24 -07:00 |
|
Mick Grove
|
f0a99dcfcd
|
bug fixes in response to code review. Also added support for ed25519 coinbase cdp api keys
|
2025-07-31 18:29:21 -07:00 |
|
Mick Grove
|
51bc64339c
|
- Fixed issue when more than 1 named capture group is used in a rule variable
- Added 2 new liquid template filters: 'b64dec' and 'es256_sign'
- Added custom validator for Coinbase, and a Coinbase rule that uses it
|
2025-07-31 16:52:50 -07:00 |
|
Mick Grove
|
a15631026b
|
Added support for Slack. Wrote a basic integration test
|
2025-07-29 20:55:44 -07:00 |
|
Mick Grove
|
3320863962
|
Added support for Slack
|
2025-07-29 19:00:49 -07:00 |
|
Mick Grove
|
f00e0683d7
|
Removed println statements used for debugging
|
2025-07-29 10:25:58 -07:00 |
|
Mick Grove
|
d648756a03
|
Fixed broken windows build script
|
2025-07-29 10:12:40 -07:00 |
|
Mick Grove
|
a270d8ecb2
|
improved precommit hook, to allow global installation
|
2025-07-28 10:26:32 -07:00 |
|
Mick Grove
|
4b032214f6
|
improved precommit hook, to allow global installation
|
2025-07-28 10:25:11 -07:00 |
|
Mick Grove
|
d9e3a61689
|
changed from oci-distribution to newer oci-client
|
2025-07-28 09:55:48 -07:00 |
|
Mick Grove
|
97dbda8f51
|
Adding support for scanning Docker images
|
2025-07-27 20:25:45 -07:00 |
|
Mick Grove
|
c4dd956443
|
Adding support for scanning Docker images
|
2025-07-27 19:03:43 -07:00 |
|
Mick Grove
|
f48ea7ca0a
|
Adding support for scanning Docker images
|
2025-07-27 17:54:26 -07:00 |
|
Mick Grove
|
29b97b4091
|
WIP: Adding support for scanning Docker images
|
2025-07-27 14:59:19 -07:00 |
|
Mick Grove
|
2d8550aa15
|
WIP: Adding support for scanning Docker images
|
2025-07-27 13:17:49 -07:00 |
|
Mick Grove
|
9a3fabdbf2
|
WIP: Adding support for scanning Docker images
|
2025-07-27 12:20:20 -07:00 |
|
Mick Grove
|
3d580ad8f7
|
removed openssl dependency from jira-query
|
2025-07-25 21:50:28 -07:00 |
|
Mick Grove
|
eedfabc8f8
|
Update src/reporter/sarif_format.rs
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
|
2025-07-25 21:04:47 -07:00 |
|
Mick Grove
|
5c8f7d88ef
|
Added support for scanning issues returned from a JQL search using --jira-url and --jql
|
2025-07-25 17:23:18 -07:00 |
|
Mick Grove
|
793b9e847c
|
Fixed Gitlab support. Added pre-commit and pre-receive installation scripts.
|
2025-07-23 19:57:33 -07:00 |
|
Mick Grove
|
c9818e0da3
|
Added precommit and prereceive hook installations. Fixing Gitlab support
|
2025-07-23 18:14:43 -07:00 |
|
Mick Grove
|
8f587f62de
|
Updating GitHub Action to generate Docker image. Added rules for Diffbot, ai21, baseten. Fixed supabase rule. Added 'alg' to JWT validation output
|
2025-07-18 15:26:18 -07:00 |
|
Mick Grove
|
b06baeb7bd
|
updated README
|
2025-07-17 15:11:35 -07:00 |
|
Mick Grove
|
572d8146e7
|
upgraded cargo dependencies
|
2025-07-17 14:31:09 -07:00 |
|
Mick Grove
|
3946818bf1
|
updated github actions to upgrade build from 1.85.0 to 1.88.0
|
2025-07-14 19:44:28 -07:00 |
|
Mick Grove
|
352d8ff659
|
change that hoists the redirect-free reqwest::Client into a single, lazily-initialized static so every call to validate_jwt re-uses the same handle (and therefore the same connection-pool, DNS cache, TLS session cache, etc)
|
2025-07-14 17:22:51 -07:00 |
|
Mick Grove
|
ee6332a78d
|
change that hoists the redirect-free reqwest::Client into a single, lazily-initialized static so every call to validate_jwt re-uses the same handle (and therefore the same connection-pool, DNS cache, TLS session cache, etc)
|
2025-07-14 17:22:37 -07:00 |
|
Mick Grove
|
d72452159b
|
Removed --ignore-tests argument, because the --exclude flag provides more granular functionality
|
2025-07-14 17:10:53 -07:00 |
|
Mick Grove
|
45e735ec89
|
Removed --ignore-tests argument, because the --exclude flag provides more granular functionality
|
2025-07-14 16:55:19 -07:00 |
|
Mick Grove
|
93f1e3b1da
|
JWT validation performs OpenID Connect discovery using the iss claim and verifies signatures via JWKS
|
2025-07-14 15:31:44 -07:00 |
|
Mick Grove
|
3520c5fba5
|
Added baseline feature with --baseline-file and --manage-baseline flags. Introduced --exclude option for skipping paths
|
2025-07-14 13:18:24 -07:00 |
|
Mick Grove
|
0ab21ace99
|
improved azure storage rule. Added rule to detect TravisCI encrypted values
|
2025-07-12 22:44:34 -07:00 |
|
Mick Grove
|
b2a4263669
|
Added PR review suggestions
|
2025-07-09 16:00:54 -07:00 |
|
Mick Grove
|
23c0d23722
|
Set GIT_TERMINAL_PROMPT=0 when cloning git repos
|
2025-07-09 15:49:03 -07:00 |
|
Mick Grove
|
cadc2e44c5
|
Set GIT_TERMINAL_PROMPT=0 when cloning git repos
|
2025-07-09 15:34:36 -07:00 |
|
Mick Grove
|
dcb2191fe8
|
Added validation for Alibaba rule
|
2025-07-09 15:03:07 -07:00 |
|
Mick Grove
|
cd4f626502
|
Added support for HTTP request bodies in rule validation. Added mistral and perplexity rule
|
2025-07-08 17:49:12 -07:00 |
|
Mick Grove
|
2280bee6e2
|
JSON output was missing committer name and email
|
2025-07-02 15:13:31 -07:00 |
|