This website requires JavaScript.
Explore
Help
Sign in
eblume
/
kingfisher
Watch
1
Star
0
Fork
You've already forked kingfisher
0
forked from
mirrors/kingfisher
Code
Pull requests
Activity
Actions
0e1fe0cede
kingfisher
/
.github
/
workflows
History
Download ZIP
Download TAR.GZ
Mick Grove
44d67cea1b
added SLSA provenance
2026-05-02 00:14:31 -07:00
..
cflite_batch.yml
improve OpenSSF scorecard: tighten token permissions and add build provenance
2026-03-26 19:36:18 -07:00
cflite_pr.yml
improve OpenSSF scorecard: tighten token permissions and add build provenance
2026-03-26 19:36:18 -07:00
ci.yml
Revert msys2/setup-msys2 to v2.31.0
2026-04-29 12:57:56 -07:00
docs.yml
Added first-class **Postman** scanning target: new kingfisher scan postman subcommand (and equivalent --postman-* flags) fetches workspaces, collections, and environments via the Postman API and scans them for hard-coded credentials in request auth blocks, pre-request/test scripts, saved example responses, and — notably — secret-typed environment variables, which the API returns in plaintext despite the UI mask. Selectors: --workspace, --collection, --environment, --all, with optional --include-mocks-monitors and --api-url for self-hosted endpoints. Authenticates via KF_POSTMAN_TOKEN (or POSTMAN_API_KEY) sent as X-Api-Key; honors X-RateLimit-RetryAfter on 429s. Findings link back to
https://go.postman.co/
... URLs in reports.
2026-04-29 11:09:47 -07:00
pypi.yml
Added first-class **Postman** scanning target: new kingfisher scan postman subcommand (and equivalent --postman-* flags) fetches workspaces, collections, and environments via the Postman API and scans them for hard-coded credentials in request auth blocks, pre-request/test scripts, saved example responses, and — notably — secret-typed environment variables, which the API returns in plaintext despite the UI mask. Selectors: --workspace, --collection, --environment, --all, with optional --include-mocks-monitors and --api-url for self-hosted endpoints. Authenticates via KF_POSTMAN_TOKEN (or POSTMAN_API_KEY) sent as X-Api-Key; honors X-RateLimit-RetryAfter on 429s. Findings link back to
https://go.postman.co/
... URLs in reports.
2026-04-29 11:09:47 -07:00
release-docker.yml
fixed github actions
2026-03-28 11:59:22 -07:00
release.yml
added SLSA provenance
2026-05-02 00:14:31 -07:00