Mick Grove
37afe7fff5
- Map SARIF result levels from rule confidence
...
- Added tag selection support to the bash and PowerShell install scripts.
2025-12-22 11:31:13 -08:00
Mick Grove
c66069fe4b
- Map SARIF result levels from rule confidence
...
- Added tag selection support to the bash and PowerShell install scripts.
2025-12-22 09:45:58 -08:00
Mick Grove
61986c469c
updated ci build
2025-12-22 09:04:36 -08:00
Mick Grove
c0e0c7bc2d
updated jsonwebtoken
2025-12-22 00:26:21 -08:00
Mick Grove
f1d139242f
Aliased "kingfisher self-update" as "kingfisher update"
2025-12-21 23:55:39 -08:00
Mick Grove
957f95d456
Aliased "kingfisher self-update" as "kingfisher update"
2025-12-21 23:43:01 -08:00
Mick Grove
587dfc5892
- Fixed deduplication for dependency-provider rules so dependent validations run per blob
...
- Updated Artifactory rule entropy and added new artifactory rule
2025-12-21 22:07:45 -08:00
Mick Grove
2ec6aa5915
fixing test failures
2025-12-16 23:51:22 -08:00
Mick Grove
14d41d560f
updated README
2025-12-16 21:13:00 -08:00
Mick Grove
e67a827e45
improved Jira support and fixed salesforce rule
2025-12-16 18:28:10 -08:00
Mick Grove
d155a33334
improved Jira support and working on salesforce rule, which is broken atm
2025-12-16 16:53:02 -08:00
Mick Grove
9c5e78ccfb
bug fix
2025-12-12 21:51:57 -08:00
Mick Grove
962f3ad9ba
bug fix
2025-12-12 21:30:51 -08:00
Mick Grove
195f086afc
added dark mode for finding + access map viewer
2025-12-12 17:21:17 -08:00
Mick Grove
f603c474f6
Updated precommit behavior and docs
2025-12-09 14:56:32 -08:00
Mick Grove
f1a77a736c
Updated precommit behavior and docs
2025-12-09 12:56:55 -08:00
Mick Grove
fc2fa58748
Added a 'kingfisher view' subcommand that serves the bundled access-map HTML viewer from the binary so users can load JSON or JSONL reports passed on the CLI (or upload them in the browser) over a configurable local-only port.
2025-12-06 12:06:47 -08:00
Mick Grove
3be190edac
Added a 'kingfisher view' subcommand that serves the bundled access-map HTML viewer from the binary so users can load JSON or JSONL reports passed on the CLI (or upload them in the browser) over a configurable local-only port.
2025-12-05 22:41:39 -08:00
Mick Grove
19cd75293f
Added a 'kingfisher view' subcommand that serves the bundled access-map HTML viewer from the binary so users can load JSON or JSONL reports passed on the CLI (or upload them in the browser) over a configurable local-only port.
2025-12-05 22:24:16 -08:00
Mick Grove
33412d04be
Added a 'kingfisher view' subcommand that serves the bundled access-map HTML viewer from the binary so users can load JSON or JSONL reports passed on the CLI (or upload them in the browser) over a configurable local-only port.
2025-12-05 21:57:20 -08:00
Mick Grove
e0587f12ba
cleanup'
2025-12-05 10:26:58 -08:00
Mick Grove
078fa16e6a
- Reduced per-match memory usage by compacting stored source locations and interning repeated capture names.
...
- Stored optional validation response bodies as boxed strings to avoid allocating empty payloads and to streamline validator caches.
- Parallelized git cloning based on the configured job count and begin scanning repositories as soon as each clone finishes to reduce end-to-end scan times.
- Combined per-repository results into a single aggregate summary after scans complete.
- Added initial access-map support and report viewer html file. Currently beta features.
2025-12-04 22:02:30 -08:00
Mick Grove
2f69219b5c
Fixed Bitbucket authenticated cloning bug
2025-11-24 23:43:11 -08:00
Mick Grove
d15afe7cea
updated tests
2025-11-24 12:49:06 -08:00
Mick Grove
eeafe2fe6b
updated tests
2025-11-24 11:08:31 -08:00
Mick Grove
0acaaa0680
Updated Summary to include scan date, kingfisher version ran, and latest kingfisher version available
2025-11-24 10:36:58 -08:00
Mick Grove
ec1e3a3432
- Fixed deduplication to consider rule identifiers so overlapping patterns are not merged before validation
...
- Moved 'URI with Username and Secret' to a low-confidence rule
2025-11-23 11:32:27 -08:00
Mick Grove
ae01a24414
Added checksum to GitLab rule
2025-11-21 12:33:10 -08:00
Mick Grove
116aac2f83
- Updating to support Bitbucket App Passwords
...
- Improved boundaries for several rules
- Added more rules
2025-11-20 16:34:13 -08:00
Mick Grove
17e0ca3594
- Updating to support Bitbucket App Passwords
...
- Improved boundaries for several rules
- Added more rules
2025-11-20 16:33:28 -08:00
Mick Grove
c6b10f0b47
- Skip reporting MongoDB and Postgres findings when their connection strings cannot be parsed, even when validation is disabled.
...
- Improve MySQL detection by broadening URI coverage and adding live validation that skips clearly invalid connection strings.
2025-11-16 23:25:42 -08:00
Mick Grove
377a220f89
- Skip reporting MongoDB and Postgres findings when their connection strings cannot be parsed, even when validation is disabled.
...
- Improve MySQL detection by broadening URI coverage and adding live validation that skips clearly invalid connection strings.
2025-11-15 08:46:53 -08:00
Mick Grove
8d77f9d298
- Skip reporting MongoDB and Postgres findings when their connection strings cannot be parsed, even when validation is disabled.
...
- Improve MySQL detection by broadening URI coverage and adding live validation that skips clearly invalid connection strings.
2025-11-15 08:43:54 -08:00
Mick Grove
f9d75eaadd
- Skip reporting MongoDB and Postgres findings when their connection strings cannot be parsed, even when validation is disabled.
...
- Improve MySQL detection by broadening URI coverage and adding live validation that skips clearly invalid connection strings.
2025-11-15 08:11:25 -08:00
Mick Grove
426acac892
Filter out empty 'KF_BITBUCKET_*' environment values when constructing the Bitbucket authentication configuration so blank variables no longer override valid credentials
2025-11-13 14:30:27 -08:00
Mick Grove
c399a7a9d1
added jdbc rule and validator
2025-11-12 22:58:31 -08:00
Mick Grove
2ed94f75d7
added jdbc rule and validator
2025-11-12 22:25:33 -08:00
Mick Grove
d6c1dfc9d0
updated allocator
2025-11-11 13:24:06 -08:00
Mick Grove
97fbcef1ba
updated allocator
2025-11-10 21:32:52 -08:00
Mick Grove
12eda3141a
updated allocator
2025-11-10 21:24:48 -08:00
Mick Grove
dca955a95c
v1.63.0
2025-11-10 18:47:51 -08:00
Mick Grove
da2fb6700d
changes in response to code review
2025-11-09 09:16:50 -08:00
Mick Grove
b5d964d5b0
updated confluent rule with a checksum. Added zuplo rule with a checksum
2025-11-09 08:47:19 -08:00
Mick Grove
4efdcc35e1
updated confluent rule with a checksum. Added zuplo rule with a checksum
2025-11-09 08:42:16 -08:00
Mick Grove
94a51c3d04
updated confluent rule with a checksum. Added zuplo rule with a checksum
2025-11-08 16:01:58 -08:00
Mick Grove
7eb7be72cd
fixing rules
2025-11-08 15:03:53 -08:00
Mick Grove
8aac161603
fixing rules
2025-11-08 10:48:00 -08:00
Mick Grove
ccbbbad5bc
Added checksum comparisons to pattern_requirements, new suffix, crc32, and base62 Liquid filters, and verbose logging so mismatched checksums are skipped with context rather than reported as findings.
2025-11-07 16:31:24 -08:00
Mick Grove
f606f59f93
Added an optional exclude_words list to PatternRequirements so matches containing case-insensitive placeholder words are filtered out, with accompanying tests to cover the new behavior.
2025-11-05 17:19:11 -08:00
Mick Grove
6a5a62a5b5
Added an optional exclude_words list to PatternRequirements so matches containing case-insensitive placeholder words are filtered out, with accompanying tests to cover the new behavior.
2025-11-04 13:07:24 -08:00
