Commit graph

3420 commits

Author SHA1 Message Date
renovate[bot]
0d704030b2
fix(deps): update module github.com/aws/aws-sdk-go to v1.54.11 (#3025)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-07-01 09:14:34 -07:00
renovate[bot]
c9b05d715a
fix(deps): update module github.com/charmbracelet/bubbletea to v0.26.6 (#2998)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-07-01 08:57:13 -07:00
dylanTruffle
f404525975
fixing docs (#3022)
* fixing docs

* Update Adding_Detectors_external.md
2024-06-30 12:14:51 -07:00
joeleonjr
9ad24f6999
Update README.md (#3019) 2024-06-27 13:46:21 -05:00
joeleonjr
01a1499600
New Source: HuggingFace (#3000)
* initial spike on hf

* added in user and org enum

* adding huggingface source

* updated with lint suggestions

* updated readme

* addressing resources that require org approval to access

* removing unneeded code

* updating with new error msg for 403

* deleted unused code + added resource check in main
2024-06-27 13:22:06 -04:00
Shreyas Sriram
e9206c66bb
Add endorlabs detector (#3015)
* Add endorlabs detector

* Remove unrelated changes

* Addrss comments

* remove prefix regex

---------

Co-authored-by: Ahrav Dutta <ahrav.dutta@trufflesec.com>
2024-06-26 21:28:19 -07:00
orionooooo
b9dd330365
added "example" (#3010) 2024-06-25 14:01:22 -05:00
Richard Gomez
f210767394
ci(detector-tests): test detectors if integration fails (#2994) 2024-06-24 13:19:43 -05:00
Cody Rose
ed62b8b563
Pin STARRY-S/zip #2999 2024-06-24 13:26:43 -04:00
Abdul Basit
dddeca5224
Adding Larksuite Detectors + Tests (#3008)
* implemented larksuite detectores for tokens and api keys.
test implemented for larksuite token based detectors.

* implemented test for larksuiteapikey detector

* load credentials from GCP secret manager for larksuite api keys
2024-06-24 11:05:56 -05:00
Richard Gomez
3c20b000e1
fix(git): set GIT_DIR based on ScanOptions.Bare (#3004) 2024-06-24 07:37:45 -07:00
Cody Rose
de19a39f2c
Return targeted scan errors (#2995)
Targeted scans should return their errors so that consumers can process them. By creating a type that combines an error with a targeted secret ID, we can return these errors without having to modify the Source interface.
2024-06-21 13:50:56 -04:00
renovate[bot]
a150103e2b
fix(deps): update module github.com/aws/aws-sdk-go to v1.54.6 (#2996)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-21 08:11:35 -07:00
renovate[bot]
e3d5227a4c
fix(deps): update module github.com/googleapis/gax-go/v2 to v2.12.5 (#2993)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-20 18:00:54 -07:00
Richard Gomez
9176e25a26
ci(detector-tests): disambiguate step names (#2989) 2024-06-20 11:43:11 -05:00
renovate[bot]
5eaad839a5
fix(deps): update module github.com/aws/aws-sdk-go to v1.54.5 (#2992)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-20 07:59:28 -07:00
Zachary Rice
d5b9157d2b
clone more refs (#2988) 2024-06-20 09:40:03 -05:00
renovate[bot]
007fbf5768
fix(deps): update module google.golang.org/api to v0.185.0 (#2987)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-19 08:24:05 -07:00
ahrav
347e8a6683
[feat] - Add Option to Retain False Positives During Detection (#2967)
* provide a mechanism to retain false positive findings

* update

* reorganzie

* revert comment

* update test

* typo

* fix test

* fix test

* update

* update
2024-06-18 09:40:21 -07:00
renovate[bot]
a0108df67a
fix(deps): update module github.com/getsentry/sentry-go to v0.28.1 (#2986)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-18 08:15:02 -07:00
renovate[bot]
981c568d15
fix(deps): update module github.com/elastic/go-elasticsearch/v8 to v8.14.0 (#2981)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-18 08:04:57 -04:00
renovate[bot]
32d714bd86
fix(deps): update module github.com/bradleyfalzon/ghinstallation/v2 to v2.11.0 (#2980)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-17 11:32:52 -04:00
renovate[bot]
204e57489f
fix(deps): update module cloud.google.com/go/storage to v1.42.0 (#2977)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-17 07:31:44 -07:00
renovate[bot]
48c1d528aa
fix(deps): update module go.mongodb.org/mongo-driver to v1.15.1 (#2975)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-16 12:48:41 -07:00
renovate[bot]
86a0ea74ef
fix(deps): update module github.com/google/go-containerregistry to v0.19.2 (#2973)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-16 10:16:41 -07:00
renovate[bot]
57d5f96ecc
fix(deps): update golang.org/x/exp digest to 7f521ea (#2972)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-16 00:34:27 -07:00
renovate[bot]
177a3c343d
fix(deps): update module github.com/aws/aws-sdk-go to v1.54.2 (#2962)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-15 10:38:03 -07:00
Dustin Decker
e851b7bb28
patch dependency (#2971) 2024-06-15 08:09:58 -04:00
ahrav
a0618348fe
[fix] - implement MaxSecretSizeProvider for auth0managementapitoken detector (#2953)
* updates

* remove ey as a keyword
2024-06-14 14:21:17 -07:00
Cody Rose
15719c2c4f
Fix integration tests (#2970)
The recent engine changes (#2887) broke some integration tests. This PR fixes them. I also fixed an unrelated linter issue.
2024-06-14 14:30:18 -04:00
Richard Gomez
2964b3b2d2
feat(detectors): log falsepositive reason (#2969) 2024-06-14 08:26:05 -07:00
Richard Gomez
235b27964b
fix(handlers): workaround for max archive depth (#2965) 2024-06-14 08:18:05 -07:00
ahrav
523a915143
add metrics to the pipeline (#2968) 2024-06-14 07:57:52 -07:00
āh̳̕mͭͭͨͩ̐e̘ͬ́͋ͬ̊̓͂d
7bf3a9b5e2
adding eraser ai detector (#2961)
* adding eraser ai detector

* add eraser to defaults
2024-06-14 10:10:37 -04:00
ahrav
cb072603dc
Modularize scanning engine (#2887)
* POC: Modularize scanning engine.

* fix typo

* update interface name

* fix tests

* update test

* fix moar tests

* fix bug

* fixes.

* fix merge

* add detector verification overrides

* handle --no-verification flag

* support fp

* add test

* update name

* filter

* update test

* explicit use of detector

* updates
2024-06-13 13:47:09 -07:00
Richard Gomez
4addd81e29
test: fix compile errors (#2964) 2024-06-13 08:22:25 -07:00
Abdul Basit
cb4d332cbf
adding twitter + Consumer key detector (#2963)
* updated the twitter regex.

* updated regex for bearer token.

* clean up the code for existing twitter detector
added and Implemented new detector for twitter consumer key & secrets with test.
proto generated.

* string updated.

* written test for twitter consumer key detector

* reverted the file to avoid conflicts

* corrected the regex library in twitter detector
2024-06-13 09:32:24 -04:00
renovate[bot]
5c1344d9ad
fix(deps): update golang.org/x/exp digest to fc45aab (#2931) 2024-06-12 03:41:49 -07:00
ahrav
433a57adaf
use @master (#2959) 2024-06-11 10:44:12 -07:00
ahrav
e173c2908d
pin archiver dependency (#2958) 2024-06-11 10:18:52 -07:00
ahrav
bf77251543
[feat] - Update span calculation logic to use offset magnitude (#2957)
* Add a default start offset

* update

* use keywordIdx
2024-06-11 09:12:31 -07:00
ahrav
68bea576db
[fix] - Refactor Filtering Logic to Fix Known False Positive Handling in Overlapping Cases (#2946)
* Filter results for verification overlap results

* add test
2024-06-11 07:25:12 -07:00
ahrav
11b80dbdf9
[chore] - Update discordwebhook detector keyword (#2954)
* update keyword

* use stdlib var
2024-06-11 07:24:34 -07:00
Richard Gomez
6b52d5ad40
fix(maxmind): prevent npd panic (#2948) 2024-06-11 08:27:42 -04:00
Richard Gomez
ca67a8aa83
refactor(filesystem): change symlink err handling (#2941) 2024-06-10 13:05:42 -07:00
ahrav
2f7a0d0699
[bug] - Ensure BufferedFileWriter Flushes Buffer Contents to File Correctly (#2943)
* flush butter before writing to file

* revert

* remove redundant Reset

* add test case
2024-06-10 07:27:01 -07:00
renovate[bot]
3a029ea193
fix(deps): update module github.com/launchdarkly/go-server-sdk/v7 to v7.4.1 (#2947)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-09 11:10:03 -07:00
renovate[bot]
4e21590cbe
fix(deps): update module github.com/aws/aws-sdk-go to v1.53.19 (#2944)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-09 08:15:50 -07:00
renovate[bot]
4403988151
fix(deps): update module github.com/snowflakedb/gosnowflake to v1.10.1 (#2913)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-08 08:45:30 -07:00
Ben Bridts
f122b295bf
Make the github action work with a path as input (#2908)
This change executes all shell commands relative to `path`, and makes sure
that `git` is always working by running `git status` first. If the `path` is
not a git repository, `git status` should give a clear error message about
this.
2024-06-07 08:21:28 -07:00