Zachary Rice
458c79165a
fix extra log messages ( #1253 )
...
* fix extra log messages
* add small test, move flag to isindex
2023-04-13 09:53:21 -05:00
Dustin Decker
1db22599af
update circle test because workflows expire and need re-running ( #1251 )
2023-04-10 16:21:19 -07:00
Miccah
562f3aaa2a
Generate protos ( #1250 )
2023-04-10 17:15:53 -05:00
Zubair Khan
2c1d8fbba4
THOG-920/add oss proto ( #1240 )
...
* add sharepoint source proto
* create sharepoint oss protos
* add email field, remove oauth2 type, update token to refresh_token
* rename path to link
* restore clientcredentials
* restore s3 and confluence proto changes from make command
2023-04-10 10:30:47 -07:00
ahrav
c451f9daf8
Use persistable cache for GCS progress tracking ( #1204 )
...
* Add in-memory caching lib, used by the GCS source.
* Use cache for tracking progress for the GCS source.
* fix merge issue.
* fix merge issue.
* fix test.
* Fix static check.
* Add test for NewWithData.
* Use cache for tracking progress for the GCS source.
* fix merge issue.
* fix merge issue.
* fix test.
* update comment.
* update comments.
* Use cache for tracking progress for the GCS source.
* fix merge issue.
* fix merge issue.
* fix test.
* remove unused dep.
* address comments.
* Add exists method.
* Use cache for tracking progress for the GCS source.
* fix merge issue.
* fix merge issue.
* fix test.
* rebase.
* fix test.
* Use cache for tracking progress for the GCS source.
* fix merge issue.
* fix merge issue.
* fix test.
* rebase.
* rebase.
* split encode resume by comma.
* Use a persistable cache.
* fix merge.
* fix merge.
* Add progress as part of the cache given it will be the persistence layer.
* Add test for making sure the cache doesn't persist when the increment value is not met.
* fix tests.
2023-04-10 07:55:00 -07:00
ahrav
f107e1b497
Use defautl endpoints when no custom verifier provided. ( #1242 )
2023-04-06 08:35:01 -07:00
iamjpotts
b3d917f9c7
Resolve #1167 by adding support for the AWS_SESSION_TOKEN ( #1170 )
...
* Resolve #1167 by adding support for the AWS_SESSION_TOKEN environment variable and adding a --session-token cli arg
* fix error message
---------
Co-authored-by: Dustin Decker <dustin@trufflesec.com>
2023-04-03 14:56:43 -07:00
Dustin Decker
20d5683199
fix linting step ( #1235 )
2023-04-03 13:21:58 -07:00
Dustin Decker
8f10938bf7
forager requires direct access to gitparse.FromReader ( #1233 )
2023-04-02 17:54:43 -07:00
Batuhan Ceylan
9b941efa1a
Bump go
from 1.18
to 1.20
( #1230 )
...
* Bump `go` from `1.18` to `1.20`
* satisfy linter
---------
Co-authored-by: Dustin Decker <dustin@trufflesec.com>
2023-03-31 14:37:03 -07:00
Bill Rich
762641d970
Add DetectorName to Result ( #1223 )
...
* Add DetectorName to Result
* Use GetName method instead of Name
2023-03-30 09:40:05 -07:00
ahrav
2cf6f831d4
Use OAuth2 http client with GCS ( #1220 )
...
* Use OAuth2 http client with GCS.
* rename variable.
2023-03-29 19:40:27 -07:00
ahrav
dfc38a135a
Add oauth2 cred as auth type for Teams. ( #1221 )
2023-03-29 19:37:41 -07:00
ahrav
0052f60090
Allow for custom verifier ( #1070 )
...
* allow for custom verifier.
* Update engine.
* use custom detectors.
* set cap.
* Update verifiers.
* Remove nil check.
* resolved nit
* handle uppercase values
* updating missing url logs
* adding more descriptive variable names
* updating logs to use correct variables
* Removing toLower for urls
* if else nits
* Adding versioning for github and gitlab
---------
Co-authored-by: ahmed <ahmed.zahran@trufflesec.com>
Co-authored-by: ah̳̕mͭͭͨͩ̐e̘ͬ́͋ͬ̊̓͂d <13666360+0x1@users.noreply.github.com>
2023-03-29 12:26:39 -07:00
Gobind Singh
66eb87f414
Update verification endpoint ( #1179 )
2023-03-29 06:41:27 -07:00
Zachary Rice
c4f08e3f17
Run golang lint on entire repo instead of patches ( #1214 )
...
* lint on all branches to catch warnings earlier
* lint entire source on PRs
* fix lint
2023-03-28 15:01:44 -05:00
Dustin Decker
cb454bfc05
Add GitHub Actions output ( #1201 )
...
* Add GitHub Actions output
Co-authored-by: Mike Vanbuskirk <mike.vanbuskirk@trufflesec.com>
2023-03-28 09:07:26 -07:00
Zachary Rice
fb9ae75661
Support for exclude globs at the git log
level ( #1202 )
...
* init
* seems to be working
* better comment
* rm conditional
* Add more context to exclude-globs description
2023-03-28 10:46:03 -05:00
ahrav
ac19de75bf
Delete progress tracking from GCS source ( #1190 )
...
* Add in-memory caching lib, used by the GCS source.
* Use cache for tracking progress for the GCS source.
* fix merge issue.
* fix merge issue.
* fix test.
* Fix static check.
* Add test for NewWithData.
* Use cache for tracking progress for the GCS source.
* fix merge issue.
* fix merge issue.
* fix test.
* update comment.
* update comments.
* Use cache for tracking progress for the GCS source.
* fix merge issue.
* fix merge issue.
* fix test.
* remove unused dep.
* address comments.
* Add exists method.
* Use cache for tracking progress for the GCS source.
* fix merge issue.
* fix merge issue.
* fix test.
* rebase.
* fix test.
* Use cache for tracking progress for the GCS source.
* fix merge issue.
* fix merge issue.
* fix test.
* rebase.
* rebase.
* split encode resume by comma.
* update comment.
add comment for shouldCache.
remove redundant return.
* delete old code.
* delete more code.
* update comment.
2023-03-27 10:39:16 -07:00
ahrav
b8467ee17e
Add Oauth creds to GCS. ( #1212 )
2023-03-27 10:29:21 -07:00
ahrav
03a534d59f
Use correct date format for Date posted. ( #1211 )
2023-03-27 10:27:28 -07:00
Dustin Decker
31d5655308
Fix OpenAI test ( #1186 )
...
* Add OpenAI Detector
* Add OpenAI Detector tests
* Add OpenAI Detector to defaults.go
* Removing references to github detector in tests
* update test
---------
Co-authored-by: Yassine Ilmi <Yassine.Ilmi@thomsonreuters.com>
2023-03-27 10:07:57 -07:00
ahrav
ffbd9c1ead
[chore] - log enumeration duration ( #1187 )
...
* log enumeration duration.
* use defer to print enumeration duration stat.
* remove temp var.
2023-03-21 09:14:58 -07:00
ahrav
62d44f59f5
Add in-memory caching pkg ( #1189 )
...
* Add in-memory caching lib, used by the GCS source.
* Fix static check.
* Add test for NewWithData.
* update comment.
* update comments.
* remove unused dep.
* address comments.
* Add exists method.
* fix test.
2023-03-20 16:16:49 -07:00
garg472
3e4496156c
added new detectors and fixed mesibo detector ( #1166 )
...
* added new detectors and fixed mesibo detector
* added bscscan.com API detector
* added coinmarketcap detector
* update alchemy
* update blocknative
* update bscscan test
* update cmc test
* update tests
---------
Co-authored-by: Dustin Decker <dustin@trufflesec.com>
2023-03-16 18:57:08 -07:00
Yassine Ilmi
d382d5cb1c
Add OpenAI API Tokens detector ( #1142 )
...
* Add OpenAI Detector
* Add OpenAI Detector tests
* Add OpenAI Detector to defaults.go
* Removing references to github detector in tests
2023-03-16 17:58:22 -07:00
ahrav
c617bd7a4e
Add resuming capability to GCS source ( #1161 )
...
* Add resuming capability to GCS source.
* Handle no auth scans.
* complete resume logic
* Use custom function type.
* remove functions.
* linter.
* fix test.
* fix test.
* Handle concurrent map writes.
* use string as CLI flag for include/exclude.
* handle emtpy buckets.
* Handle enumeration on initial job run.
* Rename stats to attributes.
* remove redundant return.
* If test fails due to 400, that is fine, it's expected.
* Add unauth GCS source type.
* comments.
* update proto.
* Use short flag.
* address comments.
2023-03-16 17:53:42 -07:00
ahrav
6193509098
add support for json service account and service account file. ( #1185 )
2023-03-16 13:04:36 -07:00
raju-kamble
3c1bb45bfb
updating browserstack detector user and key PrefixRegex strings ( #1176 )
...
Co-authored-by: raju-bs <raju@browserstack.com>
2023-03-16 08:41:29 -07:00
Miccah
0fe9bf0868
Ignore errors from CustomRegex so the channel doesn't leak ( #1149 )
2023-03-15 17:26:03 -05:00
Zachary Rice
f0b6b5d0d9
add a break statement when iterating through keywords ( #1184 )
2023-03-15 16:51:03 -05:00
Miccah
ef9488c77d
[chore] Log git output on error ( #1180 )
2023-03-15 15:32:29 -05:00
Tim Walter
a7abd6231d
Fix git commit date string formatting ( #1181 )
2023-03-14 22:39:12 -05:00
ahrav
17e8d7030e
Add unauth GCS source type. ( #1178 )
2023-03-13 16:54:45 -07:00
Dustin Decker
585bd82d47
update integration test excludes ( #1169 )
2023-03-10 14:41:29 -08:00
trufflesteeeve
2b1c42ceb1
Make slack webhook detector regex more specific ( #1168 )
...
* Make slack webhook detector regex more specific
* fixup - add better body contains check
2023-03-10 14:01:10 -08:00
ahrav
cbf299aa77
Add gcs scanning integration ( #1153 )
...
* Setup for GCS scanning.
* Update GCS engine w/ projectID req.
* Add concurrency field to gcsManager.
* add errgroup to gcsManager.
* Update gcs manager.
* Use defautl ADC.
* use ADC.'
* Add TOOD.
* add log to iterator completion.
* use a BinaryReader instead of concrete object for channel type.
* initial test for Chunks.
* Add tests for chunking objects.
* Add concurrency.
* update metadata to include content type and acls.
* Add object reading code.
* Add integration test.
* Add entrypoint.
* Add removed wg.Wait().
* remove dead code.
* remove build.
* Remove period from file extension.
* remove used.
* Add comment.
* Setup for GCS scanning.
* Update GCS engine w/ projectID req.
* Add concurrency field to gcsManager.
* add errgroup to gcsManager.
* Update gcs manager.
* Use defautl ADC.
* use ADC.'
* Add TOOD.
* add log to iterator completion.
* use a BinaryReader instead of concrete object for channel type.
* initial test for Chunks.
* Add tests for chunking objects.
* Add concurrency.
* update metadata to include content type and acls.
* Add object reading code.
* Add integration test.
* Add entrypoint.
* Add removed wg.Wait().
* remove dead code.
* remove build.
* remove used.
* Add file type for objects.
* Add check for file type and size.
* Add default file size.
* Add additinoal auth options and remaining CLI flags.
* Handle errors in go routines.
* Handle resuming for buckets.
* Remove redundant words in comment.
* remove ok check on bool check.
* remove extra blank line.
* Add return if handler handles chunk.
* Add comment.
* remove extra blank line.
* cleanup comment.
* Add comment.
* move up fxn.
* go mod tidy.
* Add exclusion to perf testing buckets.
* Handle blocking the channel.
* remove unused const.
* fix tests.
* fix tests.
* Handle gcs manger options better.
* update fxn name.
* Remove arg name.
* ignore buckets in gcsManager test.
* fix test.
* propulate gsManagerOpts.
* inline err check.
* Add readme.
* update readme spelling.
* fix test.
2023-03-07 17:32:04 -08:00
ahrav
5c99a1e754
Remove period from file extension ( #1154 )
...
* Remove period from file extension.
* Add comment.
2023-03-06 14:49:16 -08:00
Miccah
e6846ede54
Support filtering detectors by version ( #1150 )
...
* Adjust types to use DetectorID struct
* Parse versions with detector include and exclude input
* Update detectors filter to use version
Co-authored-by: steeeve <steve@trufflesec.com>
* Implement Versioner for github, gitlab, and npm detectors
Co-authored-by: steeeve <steve@trufflesec.com>
---------
Co-authored-by: steeeve <steve@trufflesec.com>
2023-03-02 16:33:56 -06:00
Zachary Rice
4777b77ec6
Keyword optimization ( #1144 )
...
* init
* ignore trufflehog binary and added comment
* remove unused keywords in chunk, better comment
* remove keywords from engine struct
2023-03-02 11:32:37 -06:00
ahrav
aa47e5e248
Only scanned staged git changes. ( #1143 )
2023-03-01 08:58:36 -08:00
Miccah
3870be256c
Close response bodies ( #1137 )
2023-02-28 10:43:00 -06:00
ah̳̕mͭͭͨͩ̐e̘ͬ́͋ͬ̊̓͂d
2315192fda
Custom regex parallel verify ( #1127 )
...
* Refactor generating CustomRegex results into a helper function
* Added errGroup for createResults, and ensure goroutines are non-blocking
* clean return
---------
Co-authored-by: Miccah Castorina <m.castorina93@gmail.com>
2023-02-28 11:12:24 -05:00
Miccah
6209a80ce1
[chore] Address more linter errors ( #1134 )
...
* Address lint errors in detectors
* Update deprecated ioutil call
2023-02-28 10:00:41 -06:00
Miccah
4efe5313f4
[chore] Address lint errors ( #1133 )
...
* Update strings.Title to cases.Title
* Migrate go-genproto to google-cloud-go
See: https://github.com/googleapis/google-cloud-go/blob/main/migration.md
* Check error in test
* Check error from sem.Acquire
* Remove unused code
2023-02-27 21:03:47 -06:00
Miccah
d2d03426ed
Implement String for ScanErrors ( #1131 )
...
This will concatenate all errors together into a single string. When
possible, it would be better to log the actual errors slice to take
advantage of structured logging.
2023-02-27 21:02:59 -06:00
Miccah
dd39848709
Add ability to include and exclude detectors ( #1106 )
...
* Add ability to include and exclude detectors
* Trim space before checking for empty items
* Explicitly check for integer overflow
* Use strconv.ParseInt instead of strconv.Atoi
* Address comments
2023-02-27 16:46:45 -06:00
Miccah
c5b4d6f28b
Support file scanning in filesystem source ( #1030 )
...
* Rename directories to paths
* Generate protos
* Add file scanning support to filesystem source
* Add directories back to filesystem proto
* Generate protos
* Combine paths and directories from in source
* Add filesystem filter
* Address comments
2023-02-27 12:15:05 -06:00
Bill Rich
ae2d510ced
Gitparse message fix ( #1125 )
...
* Fix messages being reused
* Add comment about change.
2023-02-23 15:20:54 -08:00
raju-kamble
d151c1363e
fixing browserstack regex username detection ( #1123 )
2023-02-22 08:17:48 -08:00
ah̳̕mͭͭͨͩ̐e̘ͬ́͋ͬ̊̓͂d
ee5b028c67
Adding initial protos for Google Drive scanner ( #1121 )
2023-02-22 10:04:46 -05:00
raju-kamble
d20f43b5c6
fix browserstack detector ( #1120 )
...
* fixing browserstack regex username detection
* fixing browserstack regex username detection
* fixing browserstack regex username detection
* fix patterns
* fix patterns
---------
Co-authored-by: raju-bs <raju@browserstack.com>
Co-authored-by: Dustin Decker <dustin@trufflesec.com>
2023-02-21 15:33:16 -08:00
Bill Rich
f1582aafa9
Drop tabs for filenames with spaces ( #1115 )
2023-02-16 17:15:32 -08:00
Bill Rich
9158dcaa80
Correctly parse most filenames with ' and ' ( #1113 )
2023-02-16 14:11:35 -08:00
Miccah
161e499142
[chore] Remove logrus from trufflehog ( #1095 )
...
* [chore] Remove logrus from trufflehog
* Minor fixes
* Fix logFatal call
* Fix logrus call
2023-02-14 17:00:07 -06:00
Miccah
c6826c4574
Fix nil scan options ( #1107 )
2023-02-14 12:09:45 -06:00
SAYGIN Metin
f2139a7615
Github filter support for exclude and include ( #1087 )
...
* test
* Add missing head and base hash back.
---------
Co-authored-by: Ahrav Dutta <ahravdutta02@gmail.com>
2023-02-14 08:40:53 -08:00
Dustin Decker
26c455d302
add more confluence options ( #1105 )
2023-02-13 13:58:02 -08:00
trufflesteeeve
4f13090c01
Remove duplicated detectors ( #1092 )
...
In this case just Heroku and LinearAPI. But this includes the Moonclerck
detector, which appears to be a typo that got turned into a separate
detector type.
Co-authored-by: zubairk14 <zubair.khan@trufflesec.com>
2023-02-13 11:44:19 -05:00
Dustin Decker
0c66d30c1f
Revert "Make detectors configurable ( #1084 )" ( #1097 )
...
This reverts commit 67784f6928
.
2023-02-11 08:12:13 -08:00
ahrav
67784f6928
Make detectors configurable ( #1084 )
...
* Make detectors configurable.
* remove redundant check.
* add number of detectors.
* update comment.
* remove reflect.
* inline key.
* replace name w/ type.
* remove temp var.
* fix test name.
* fix engine start.
* add filter unverified to engine.
* reorder engine args.
* Address comments.
* Add include and exclude.
* update comments.
* add comment.
* add comment.
2023-02-10 16:30:38 -08:00
ahrav
c5c8d10d28
[chore] - Remove monolithic config struct ( #1091 )
...
* REmove monolithic config struct.
* fix broken test.
2023-02-10 12:43:00 -08:00
Miccah
d317ddb51a
[chore] Remove logrus from circleci, filesystem, gitlab, and s3 sources ( #1089 )
...
* [chore] Remove logrus from circleci, filesystem, gitlab, and s3 sources
* Address comments
2023-02-10 11:02:55 -06:00
Miccah
0ce72ccda3
[chore] Remove logrus from github source ( #1086 )
...
* [chore] Remove logrus from github source
* Fix handleRateLimit test
* Fix tests
2023-02-09 18:02:04 -06:00
Miccah
58e8c1e4ac
[chore] Remove logrus from engine package ( #1085 )
2023-02-09 16:55:19 -06:00
trufflesteeeve
114f4b6989
Add Type() to detector interface ( #1088 )
...
* Add Type() to detector interface
The goal here is to allow the detector type information to be used
without the need for reflection. This could possibly allow us to more
easily inject information into detectors or filter them out if
necessary.
Co-authored-by: ahmed <ahmed.zahran@trufflesec.com>
* remove test detector
---------
Co-authored-by: ahmed <ahmed.zahran@trufflesec.com>
2023-02-09 14:46:03 -08:00
ahrav
e47cc2451f
Dont pre-allocate errors slice. ( #1083 )
2023-02-08 17:33:30 -08:00
Miccah
1f0fd91205
Skip repo and continue scanning when encountering an error ( #1080 )
2023-02-08 11:33:01 -06:00
ahrav
0d73dbe638
[chore] - Add tests for errors ( #1071 )
2023-02-08 04:15:44 -08:00
Bill Rich
7dd2b74f1f
Make archive handler configurable ( #1077 )
...
* Make archive handler configurable.
* Use common.IsDone()
2023-02-07 15:25:14 -08:00
Bill Rich
b37080e6a5
Add max commit size ( #1079 )
...
* Add max commit size
* Use common.IsDone
* Use breaks instead of return
2023-02-07 15:25:00 -08:00
ahrav
3f30216356
Add incclude exclude spaces for confluence source. ( #1073 )
2023-02-06 08:49:45 -08:00
Bill Rich
af6e3f8fdf
Pull gitparse config options out of pkg consts ( #1072 )
...
* Pull gitparse config options out of pkg consts.
* Adjust naming
2023-02-04 13:19:23 -08:00
ahrav
8be89a593b
Handle errors in a thread safe manner ( #1052 )
...
* Handle errors in a thread safe manner.
* fix test.
* fix linter.
* address comments.
2023-02-02 11:05:33 -08:00
ahrav
80a68b84c2
update webex detector regex ( #1062 )
...
* update webex detector regex.
* fix regex.
2023-02-01 18:37:51 -08:00
ahrav
58b78b6a5a
Update float detector with correct User-Agent and regex ( #1061 )
...
* Update float detector with correct User-Agent and regex.
* update import order.
* update emial.
* Delete http.go
* add http back.
2023-02-01 09:48:13 -08:00
swdbo
a53758c4c4
braintree detector: use production API URL instead of the test sandbox version ( #1054 )
2023-02-01 08:41:52 -08:00
Miccah
8df9db6ecc
Remove false positive detection for CustomRegex ( #1050 )
...
Checking for false positives can lead to results being removed before
ever getting the opportunity to verify them. Users are already
responsible for verification of custom detectors, so let's not interfere
with how they choose to use it.
2023-01-27 11:57:10 -06:00
ahrav
e85411b59f
Add file to confluence proto. ( #1049 )
2023-01-26 17:34:01 -08:00
Alexandr Marchenko
b29b78c10d
filesystem support for exclude and include filters (2nd attemp) ( #1033 )
...
* fix filter issue - empty lines should be ignored
* filesystem support for filter exclude
Co-authored-by: Dustin Decker <dustin@trufflesec.com>
2023-01-26 09:33:45 -08:00
Bill Rich
00ebb2ed64
Full git log when targeting base merge commit ( #1044 )
...
* Full git log when targeting merge commits
* Full log is needed whenever base is specified.
2023-01-26 09:17:54 -08:00
Dustin Decker
4ef546a06b
fix github integration tests ( #1042 )
2023-01-25 08:57:39 -08:00
Bill Rich
ac1dd23d37
Limit diff size to prevent out of control memory use. ( #1035 )
...
* Limit diff size to prevent out of control memory use.
* Group consts
2023-01-23 10:14:10 -08:00
ahrav
2088f030f9
Add location to Teams metadata. ( #1034 )
2023-01-23 08:12:05 -08:00
ahmed
2060ae1c47
Updated stdout to print results in alphabetical order for consistent output ( #1032 )
2023-01-19 12:58:50 -05:00
ahrav
1621403e11
Add concurrency to CircleCi source ( #1029 )
...
* Small cleanup of CircleCi source.
* Add concurrency to circleci.
* merge w/ cleanup branch.
* Rdefine loop var.
* Delete github.go
* reverge file delete.
* Add debug log for scan errors.
* make collecting scanned errors thread safe.
* pre-allocate errors slice.
2023-01-17 12:24:49 -08:00
ahrav
319ae64a02
[chore] - Small cleanup of CircleCi source ( #1028 )
...
* Small cleanup of CircleCi source.
* address comments.
* Add context to methods as first param.
2023-01-17 09:36:18 -08:00
Dustin Decker
bc27fef7bc
remove logger from retryable client, it is not respecting loglevels ( #1020 )
2023-01-13 15:28:00 -08:00
Miccah
45b02f46d9
Record timestamp when a context was cancelled ( #1018 )
2023-01-13 12:21:09 -06:00
Cameron Lonsdale
0aa8e1cd98
Use access-token endpoint for validity check ( #991 )
2023-01-11 19:19:51 -08:00
Bill Rich
430d5c764c
Rename and export isGitSource ( #1016 )
2023-01-10 12:51:58 -08:00
Bill Rich
8b2e1d36cf
Copy metadata for line number aware sources ( #1011 )
...
* Copy metadata for line number aware sources
* Improve style
2023-01-10 09:35:44 -08:00
Miccah
e5ede17c77
Validate custom regular expressions on detector initialization ( #1010 )
...
* Validate custom regular expressions on detector initialization
* Add regex name to error message
2023-01-09 17:30:47 -06:00
Miccah
74831f63d5
Capture callstack of canceled contexts ( #979 )
2023-01-09 17:27:06 -06:00
ahrav
09d4422cdb
Handle invalid regex for custom detector. ( #1005 )
...
* Handle invalid regex for custom detector.
* Add comment highlighting invalid regex.
2023-01-09 09:45:30 -08:00
Yassine Ilmi
d720c0c0f3
Switch to retryableHttpClient for GitHub AuthN API Client + More Logs ( #995 )
...
* Adding missing flags to Readme
* Use retryableHttpClient by default for GitHub
* Adding repoUrl for scanning time log
* Use WithField instead of WithFields
* Updating README with lasted --help output
2023-01-09 09:21:56 -08:00
Pulkit Aggarwal
fc6fd29f3f
Fix GitUrl Return ( #987 )
...
Co-authored-by: ahrav <ahravdutta02@gmail.com>
2023-01-09 09:17:30 -08:00
Dustin Decker
5f6143f09a
Add Circle CI source ( #997 )
...
* Add Circle CI source
* remove SHA1 line
* remove trim
2023-01-05 21:44:37 -08:00
ahrav
009756dce6
add proto that was missing. ( #986 )
2022-12-23 13:27:07 -08:00
Miccah
f5b83ee2a5
Add configuration parsing and custom detectors to engine ( #968 )
...
* Add configuration parsing for custom detectors
* Error on empty filename
2022-12-20 10:14:49 -06:00
ahrav
936a139596
Allow using a glob for include list. ( #977 )
...
* Allow using a glob for include list.
* Update command flag.
* Make comment more clear.
* update comment.
* Allow scanning repo and org at the same time.
2022-12-16 13:28:16 -08:00
Gonçalo Silva
e091fab94f
Use Todoist's REST API v2 ( #978 )
...
v1 was deprecated on December 5, 2022.
2022-12-14 16:52:19 -08:00
Miccah
861ad057c7
Implement CustomRegex detector ( #950 )
...
* Remove verifying successRanges because it is unused in webhook
* Move custom_detectors validation code into its own file
* Initial implementation of custom regex detector
Secret verification is done via webhook.
* Add CustomRegex detector type
* Add upper bound to permutation
* Return early if the context is canceled
* Add headers from configuration
* Add detector name as a key in the JSON body
* Implement faster algorithm for productIndices
2022-12-14 10:26:53 -06:00
Bill Rich
36ca2601e0
Add s3 object count to trace logs ( #975 )
...
* Add s3 object count to trace logs
* fix debug level
2022-12-13 16:46:09 -08:00
Miccah
7ac7fdae44
Add more logging for git sources ( #974 )
2022-12-13 17:51:57 -06:00
ahrav
26befdd1ec
[bug] - Handle error when scanning s3 bucket. ( #969 )
...
* Handle error when scanning s# bucket.
* move wait outside loop.
* Add logging.
* revert changes.
* remove.
* revert.
2022-12-12 10:10:06 -08:00
Dustin Decker
7de9bdd12d
Support globbing with ignore repos ( #967 )
2022-12-09 12:10:42 -08:00
ahrav
a72b9feb35
Only scan org with --org flag. ( #931 )
2022-12-06 16:18:48 -08:00
Bill Rich
335ce85ce4
Export line number code ( #962 )
2022-12-06 15:31:15 -08:00
Bill Rich
33d32d2de4
Don't scan the --since-commit target ( #960 )
2022-12-06 13:24:27 -08:00
Bill Rich
1a1c2e275e
Change chunker test source ( #959 )
...
* Change chunker test source
* Emit chunk if the size isn't 0
2022-12-06 12:45:08 -08:00
Bill Rich
9f99ee470d
Integration test fixes ( #956 )
...
* Adjust repo count for new app
* Fix chunk test count
2022-12-06 08:42:24 -08:00
Miccah
2a2bcd93ac
Add CustomRegex validation ( #939 )
...
* Add validation skeleton
* Add custom detector validation with tests
* Validate and test regex vars
* Implement RegexVarString
* Use RegexVarString for validating regex variables
* Add numerics to the regex variable matching
Co-authored-by: hxnyk <8292703+hxnyk@users.noreply.github.com>
2022-12-02 11:26:22 -06:00
Miccah
5a339b0ca1
Add test for configuring custom regex with webhook verification ( #946 )
2022-12-02 11:23:20 -06:00
Bill Rich
f1ec9e74eb
Close files to clean up tmp files ( #940 )
2022-11-22 13:13:34 -08:00
Bill Rich
79cae3b82b
Add newlines when file is split ( #937 )
2022-11-22 09:01:39 -08:00
Dustin Decker
28dd25beeb
S3 scanner improvements ( #938 )
2022-11-21 19:15:26 -08:00
Miccah
4409210b87
Add custom detectors configuration parsing ( #927 )
...
* Add custom_detectors proto
* Generate proto code
* Create custom_detectors package
Also create protoyaml package to test YAML unmarshalling the
configuration.
* Simplify custom_detectors proto by removing connection
* Generate proto code
* Update custom_detectors parsing tests
2022-11-21 15:10:38 -06:00
ahrav
054e98d108
Update slack webhook detector string check ( #932 )
...
* Update slack webhook detector check to text.
* remove redunant slashes.
2022-11-21 10:50:23 -08:00
Jessica
6e25664a52
add rambbitmq detector ( #936 )
...
* add rambbitmq detector
* use fixed length redaction
Co-authored-by: Dustin Decker <dustin@trufflesec.com>
2022-11-21 10:47:41 -08:00
Dustin Decker
b45369cdbb
Skip some FTP FPs ( #929 )
2022-11-21 06:52:21 -08:00
Thiago Lages de Alencar
9757c339d9
Fix error message ( #933 )
2022-11-20 05:31:11 -08:00
Dustin Decker
ae4b387448
add LDAP detector ( #896 )
2022-11-18 19:45:11 -08:00
Dustin Decker
b18edef01a
Enable skipping of particular key IDs ( #930 )
...
* Enable skipping of particular key IDs
* update test
2022-11-18 09:09:40 -08:00
Miccah
b3d3f531a4
Return an error from ReadToMax when it panics ( #925 )
2022-11-16 14:24:05 -06:00
ahrav
b8be0a64a8
Use pointer to type. ( #926 )
2022-11-16 10:35:48 -08:00
Miccah
86f9e1288f
Initialize scan options if given a nil pointer ( #924 )
2022-11-15 17:01:59 -06:00
Miccah
696f5c68f4
Log the stack trace and recover object ( #923 )
...
* Log the stack trace and recover object
* Remove stderr log
2022-11-15 16:48:02 -06:00
Jessica
3d501975e4
Add filter as scan option to gitlab module's git scan ( #919 )
2022-11-15 13:02:37 -08:00
Ankush Goel
64cfe4d85e
Update github_old.go ( #916 )
2022-11-15 10:40:55 -08:00
Bill Rich
d3b24fa592
Replace plain decoder with utf8 ( #922 )
2022-11-15 09:36:01 -08:00
Johann Saunier
42a82fc7e1
Update Scrapfly API Key Format ( #910 )
2022-11-11 15:24:17 -05:00
Ankush Goel
bb0fa055dc
fixed mailchimp detector ( #909 )
...
* fixed mailchimp detector
* Use sane http client
Co-authored-by: Dustin Decker <dustin@trufflesec.com>
2022-11-10 09:47:25 -05:00
kstilwell
ecd25784f5
Adding Shopify detector ( #875 )
...
* Fixes/work based on testing
* Remove some commented code
* Change how verification happens and grab additional information
* Address linter warnings.
* add shopify detector to default detectors.
Co-authored-by: Dustin Decker <dustin@trufflesec.com>
Co-authored-by: Ahrav Dutta <ahravdutta02@gmail.com>
2022-11-08 16:21:57 -08:00
Dustin Decker
5f0964add8
remove path for deduping URI
2022-11-06 08:12:46 -08:00
ahrav
28983036a0
only write if the filechunk has len > 0. ( #903 )
2022-11-05 18:19:41 -07:00
trufflesteeeve
e8cd2e7fae
Add Unknown visibility level ( #902 )
2022-11-04 14:28:20 -04:00
ahrav
dd141fb55f
[oc-147] - Add context to all git methods ( #901 )
...
* Add context to all git methods.
* remove logrus.
* Add ctx.
* Address comments.
* Add error to clone failing.
* Return error.
2022-11-03 16:36:52 -07:00
Dustin Decker
3a143f095b
add option to skip tls verification for confluence ( #900 )
2022-11-03 13:10:01 -07:00
Miccah
ab54ec4072
Check for closed channel in HandleFile ( #895 )
...
* Check for closed channel in HandleFile
* Refactor to be more readable
* Fix handler search
2022-11-02 16:35:19 -05:00
Miccah
85f5f3ea7b
Add sqlserver integration test and some default params ( #891 )
...
* Improve anonymous redaction
* Add sqlserver integration test and some default params
2022-11-02 11:04:49 -05:00
Dustin Decker
a7fc12240f
Do local URI verification, while attempting to defuse SSRF ( #879 )
...
* simplify monogo pattern
* do URI verification locally, while attempting to defuse SSRF
* test SSRF defuse
* simplify err check logic per linter recommendation
* split up detectors
* address comments
* remove unused var
2022-11-01 17:27:24 -07:00
ahrav
fe1e475a04
Prevent concurrent read and writes to visibility map. ( #892 )
2022-11-01 16:20:59 -07:00
ahrav
fe029b1098
[THOG-793] - Return all unverified results ( #856 )
...
* Remove the check to filter and return only a single unverified result.
* Revert "Remove the check to filter and return only a single unverified result."
This reverts commit 494e432803
.
* Add new CLI flag to filter unverified results.
2022-10-31 09:36:10 -07:00
Bill Rich
965279421c
Support common ssh repo format ( #878 )
...
* Try ssh repo format
* Add tests
2022-10-28 11:56:03 -07:00
Bill Rich
ab71b93f7d
Add context to handler ( #877 )
...
* Add context to handler
* Return rather than break out of select
2022-10-28 08:57:55 -07:00
Bill Rich
034ca4fb5b
Add bytes counter to scans ( #876 )
2022-10-27 12:54:22 -07:00
Dustin Decker
0c81cba918
remove noisy logging in sqlserver detector
2022-10-26 18:12:26 -07:00
Dustin Decker
ca8a5ef741
increase digitalocean token sensitivity ( #872 )
2022-10-26 08:22:21 -07:00
Dustin Decker
4f83dd816d
increase datadog token sensitivity ( #871 )
2022-10-26 08:22:10 -07:00
Dustin Decker
33c6c193e3
improve fastly validation endpoint and add extra data ( #870 )
2022-10-26 08:22:03 -07:00
Dustin Decker
466b9e2d6b
only detect live env razor pay and use std lib ( #869 )
...
* only detect live env razor pay and use std lib
* fix shadowed var
2022-10-26 08:13:13 -07:00
Dustin Decker
dac40519e4
support github fine grained tokens and add extra data ( #868 )
...
* support github fine grained tokens and add extra data
* fix shadowed var
2022-10-26 08:13:02 -07:00
Alexandr Marchenko
60464da3ce
proposal: SqlServer connection string detector ( #867 )
...
* sqlserver added to detectors.proto
* make protos
* boilerplate detector generated
* wireup
* initial
2022-10-26 07:46:13 -07:00
Bill Rich
d7d614cc5f
Copy buffer bytes ( #864 )
2022-10-25 09:09:47 -07:00
Bill Rich
958266ea84
Run chunker in pipeline ( #859 )
...
* Run chunker in pipeline
* Move ChunkSize and PeekSize to source package.
* Use new Chunk and Peek size location
2022-10-24 13:57:27 -07:00
Bill Rich
3d5f697f9a
Use line aware chunking for git. ( #858 )
2022-10-24 13:00:03 -07:00
Dustin Decker
64ace363af
Change commit to trace level logging
2022-10-24 08:59:52 -07:00
ahrav
46bc010165
Add tests for including github repos. ( #854 )
2022-10-21 07:56:36 -07:00
trufflesteeeve
fb56b9f713
Check rate limit when getting github user ( #855 )
...
Also, don't fetch a github user or their token when both are known. This
currently only affects the Github Token auth type. Github App
installations will continually fetch tokens every time we clone a repo.
In the future we should check the `ExpiresAt` field of the Github App
token and determine if we need to fetch a new one at that point.
2022-10-20 18:14:28 -04:00
ahrav
029519eb01
[THOG-767] ignore gitlab repos ( #853 )
...
* Add ability to ignore repos.
* use std library slices.Contains.
* Add tests.
* Remove zero values from test.
2022-10-19 13:55:44 -07:00
ahrav
c203eef86f
[THOG-767] - Ignore Bitbucket and Gitlab repos ( #852 )
...
* Add messages to BB and Gitlab source protos to allow ignoring repos.
* remove unsued field in struct.j
* Fix casing.
2022-10-18 14:14:04 -07:00
ahrav
2d6aadcb46
[THOG-774] - GitHub ignore repo full name ( #848 )
...
* Use github repo full name.
* fix tests.
2022-10-14 09:20:49 -07:00
Ankush Goel
d29357c9d4
added npm detector ( #841 )
2022-10-13 06:04:02 -07:00
ahrav
04c9bb535e
[THOG-768] - Add ability to skip scanning Github repos ( #846 )
...
* Add ability to skip scanning Github repos.
* remove old change.
* rename method.
2022-10-12 16:28:24 -07:00
Miccah
4aab7b7276
Buffer commit log processing ( #845 )
...
Some very large commits take a lot of time to process, which we can make
progress on while we are scanning the contents of other commits.
2022-10-12 14:55:08 -05:00
ahrav
cea2a23c56
[THOG-768] - Add ignore repo list to Github proto ( #843 )
...
* Add ignore repo list to Github proto.
* Add proto.
* Add missing proto.
2022-10-11 15:41:33 -07:00
Dustin Decker
785cead43e
Ignore URIs where the password is redacted ( #842 )
...
Only `*`s in the password is a redacted basic auth URI.
2022-10-11 14:18:52 -07:00
Dustin Decker
85467538f6
remove faulty detector ( #836 )
2022-10-07 09:20:44 -07:00
ahrav
128002885a
Add decoder type to results. ( #835 )
2022-10-06 11:55:07 -07:00
Mildred Bernardo
3f6e5b44c9
Digitaloceanv2 detector ( #832 )
2022-10-03 18:01:01 -07:00
Miccah
2bc4985061
Add SSH config option for the git source ( #830 )
...
* Add SSH config option for the git source
The auth message is empty since we use the git binary underneath to
handle the SSH authentication.
* Import digitaloceanv2
2022-09-28 20:40:01 +02:00
Mildred Bernardo
ad4b9406a7
Added digitaloceanv2 detector ( #829 )
...
* Added digitaloceanv2 detector
* import detector
Co-authored-by: Dustin Decker <dustin@trufflesec.com>
2022-09-28 09:56:35 -07:00
Mildred Bernardo
80dcfbe9db
Added DigitalOceanV2 detector ( #828 )
2022-09-27 17:51:10 -07:00
trufflesteeeve
02310a64f3
Add token auth to JIRA proto ( #824 )
2022-09-27 15:39:51 -04:00
Miccah
891996f546
Do not fail scanning if we cannot enumerate gists ( #826 )
2022-09-27 20:59:10 +02:00
Dustin Decker
c88e84d3f0
Fix json output which was previously b64 encoding bytes instead of printing the string ( #825 )
2022-09-27 11:57:35 -07:00
Bill Rich
1c00014051
Include public/private in github metadata ( #812 )
...
* Include public/private in github metadata
* CR feedback
* Fix typos and naming
2022-09-26 14:55:46 -07:00
Dustin Decker
97a73710de
403 on listing user gist should not fail org scan ( #822 )
2022-09-26 14:37:25 -07:00
Dustin Decker
752c848640
Show clone path for git repos ( #823 )
2022-09-26 14:36:55 -07:00
ahrav
db42bcf2a2
[OC-103] - Add Gemini detector ( #800 )
...
* Add Gemini detector.
* Add regex and test code for Gemini detector.
* Remove else.
* Add commentary.
* Address comments.
* Use regular else.
* Make nice and complicated.
* use regular detection pattern.
* Add detector to default detectors.
2022-09-26 11:48:48 -07:00
rahuljaisinghani
3645a6e7b9
Browserstack regex ( #808 )
...
* Update browserstack.go
* Update browserstack.go
2022-09-25 13:32:45 -07:00
Bill Rich
e3107ad6bb
Move head and base normalization to source ( #818 )
2022-09-23 08:58:45 -07:00
ahrav
f2f5b6dba8
Fix recover. ( #817 )
2022-09-22 15:47:42 -07:00
ahrav
92f40c2031
[THOG-709] - Recover from detector panics ( #810 )
2022-09-22 07:01:10 -07:00
Dustin Decker
e8f1bb9127
Import NGC detector
2022-09-21 16:26:58 -07:00
trufflesteeeve
63fcf33ce6
Fix improper github org member pagination ( #814 )
...
I'm not sure I fully understand why this issue exists. But I think the
short version is this: When we attempted to paginate users, we would set
a variable's Page value. But that variable appears to not actually be a
pointer, despite being added as one. It probably has to do with how
struct embedding works. Either way, if we make the overall options
variable the whole thing, and update its embedded struct with our page
variable, everything works out.
2022-09-21 16:22:42 -07:00
Bill Rich
509cf8b6fa
Use headref and check empty commits for base ( #815 )
2022-09-21 16:04:01 -07:00
Miccah
ddc81bd7c1
[THOG-162] Implement JDBC verification for select drivers ( #792 )
...
* [THOG-162] Implement JDBC verification for select drivers
Also includes integration tests for postgres and mysql via docker. To
run, execute the following (untested what will happen if the docker
images aren't installed):
go test -tags=detectors,integration ./pkg/detectors/jdbc
* Make jdbc regex a bit more strict
* Surface the context to allow the caller to set a timeout
2022-09-21 17:50:48 +02:00
Joseph Lucas
b02cf7e032
Adding detector for Nvidia NGC ( #797 )
...
* template
* minimum viable regex
* valid api 401
* passing tests
* snake to camelcase
2022-09-20 08:20:18 -07:00
Dustin Decker
335e676caa
Provide user when during private clones with token and fix integration tests ( #811 )
2022-09-19 15:53:21 -07:00
Bill Rich
593f1e6754
Include apiClient in Github source ( #804 )
2022-09-19 14:31:48 -07:00
Dustin Decker
fcd580406e
A few improvements ( #809 )
...
* Run integration tests
* Update examples
* Import mongodb
2022-09-19 13:23:25 -07:00
Ankush Goel
44bc023da6
Update readme.go ( #795 )
...
* Update readme.go
Readme has change the way they issue their keys
now its like rdme_{70} ascii chars
* Update readme.go
* Update readme.go
* Update readme.go
The tester seems to be working fine with the new defaultclient code
2022-09-18 12:19:35 -07:00
Miccah
59d6d29c02
Add location to Slack and Confluence metadata ( #802 )
...
Location indicates where in the source a secret was found. For example,
Slack could be in a message or in an attachment.
2022-09-16 22:58:14 +02:00
trufflesteeeve
57e46f9b76
Add SlackRealtime proto message ( #803 )
2022-09-16 16:49:51 -04:00
Bill Rich
a30b52f9b0
Use recover to catch panic in dep for old rars ( #801 )
2022-09-15 18:51:00 -07:00
ahrav
c4492b1fdc
Add support for MongoDB detector. ( #793 )
...
* Add support for MongoDB detector.
* Remove extra line.
* Remove unused arg.
* Add context around found secret test.
* Remove unused arg.
2022-09-15 05:47:09 -07:00
ahrav
e9599db240
[THOG-690] - Add visibility to slack metadata proto message ( #796 )
2022-09-15 05:01:45 -07:00
ahrav
33ab1cfeb2
[OC-101] - Prevent Gitlab detector panic ( #799 )
2022-09-15 05:00:15 -07:00
trufflesteeeve
945de06858
Fix include-members not working on github ( #773 )
2022-09-12 13:26:38 -04:00
Bill Rich
912d8e461d
Add context so to avoid splitting creds. ( #791 )
...
* Add context so to avoid splitting creds.
* Add context newlines to expected results
2022-09-09 15:00:33 -07:00
Bill Rich
248cff8201
Use disk-buffer-reader that implements Seeker and ReaderAt ( #787 )
...
* Use disk-buffer-reader that implements Seeker and ReaderAt
* Include test
2022-09-09 09:05:28 -07:00
Bill Rich
3fe916fe1e
add tests ( #785 )
2022-09-08 21:46:12 -07:00
Dustin Decker
ecfdb0105b
Provide correct username for app cloning and add integration test ( #786 )
2022-09-08 17:41:53 -07:00
Dustin Decker
80b247286b
Improve GitHub debug logging ( #784 )
...
* close bodies early
* add more debug logging to github
* fix nil check
* Add nil checks for response
2022-09-08 12:23:40 -07:00
ahrav
7ba583ca40
[THOG-681] - Handle errors sources ( #783 )
...
* Handle errors w/ github source.
* Fix loop var captured by func literal.
* Fix loop var captured by func literal.
* Set completed progress if the scan completes with no errors.
* Set progress to 100% if the scope and iteration are both 0.
* Fix commentary.
* Fix test.
* Return after the defer to os.RemoveAll.
* Fix unauth scan.
* Inline range loop.
* update tests for partial scan completion with errors. Ensure correct progress is set.
* Update progress for all sources.
* Update github test.
* Address comments.
2022-09-07 19:40:37 -07:00
Dustin Decker
c12be4d98d
Add Retryable HTTP client that suports custom timeout
2022-09-07 18:23:20 -07:00
Dustin Decker
67e8df96a4
Add AWS account information ( #782 )
...
* Add AWS account information
* nit
2022-09-06 17:55:03 -07:00
Apoorv Munshi
33ff9178e4
fix regex pattern for confluent detector ( #778 )
...
* fix regex pattern for confluent detector
* remove RawV2 filed from detectors.Result
* add RawV2 field back
2022-09-06 10:42:36 -07:00
Bill Rich
41936169c7
Use gitparse for unstaged changes. ( #775 )
2022-09-03 18:01:36 -07:00
Dustin Decker
b9d6f11609
clean up detectors ( #776 )
2022-09-02 12:00:02 -07:00
Max Thomson
d7123c6965
Fix Honeycomb detector with both key formats ( #777 )
2022-09-02 11:44:16 -07:00
Bill Rich
65a7855713
Split parsing from reader ( #774 )
2022-09-02 11:02:38 -07:00
Dustin Decker
aba56523b6
Fix okta detector ( #771 )
2022-09-01 20:05:06 -07:00
roxanne-tampus
90da460fa1
added new detector ( #765 )
2022-08-31 17:54:23 -07:00
roxanne-tampus
cc2df10e49
fix issue in codacy ( #758 )
...
* updated endpoint
* add tags
2022-08-31 17:32:22 -07:00
Mildred Bernardo
4c3c103b62
added new detectors ( #761 )
2022-08-31 11:50:33 -07:00
ahrav
ad1c96c151
[OC-71] - Add helper methods to context to set metatada token values for the API ( #760 )
...
* Add helper methods to context to set metatada token values for the API.
* Rename to SetParent.
2022-08-31 08:09:12 -07:00
Marlon
a35786dccd
fix and make_protos ( #757 )
2022-08-30 17:13:04 -07:00
roxanne-tampus
18bca4b442
Enhancement in Gitlab detector ( #588 )
...
* enhancement on regex
* accepts both old and new token
* added gitlabv2 test file
2022-08-30 11:58:32 -07:00
Bill Rich
d11ce27f33
Use correct reader in filesystem source ( #756 )
2022-08-30 10:24:52 -07:00
ahrav
37c4eea66a
[chore] - ioutil.ReadFile is deprecated ( #753 )
...
* Use os.ReadFile.
* Update imports.
* remove unused import.
2022-08-30 09:41:12 -07:00
roxanne-tampus
fa2d6b90cd
added new detectors ( #743 )
2022-08-29 16:44:11 -07:00
Dustin Decker
fa9479100e
Add common sentry recover library and add into goroutines ( #738 )
...
* Add common sentry recover library and add into goroutines
* fix nits
2022-08-29 11:45:37 -07:00
Miccah
f3367d7910
[THOG-643] Implement independent log level controls ( #733 )
...
* [THOG-643] Implement independent log level controls
There are two log level controls to mentally distinguish. Log levels
associated with a sink (e.g. stdout and streamed), and log levels
associated with a logger (e.g. a GitHub source).
The level is determined to be the minimum of the two. If a sink is at
level 0, then it will only output level 0 logs regardless of the
logger's level. This is best demonstrated by TestSinkWithName.
* Rename WithName to WithNamedLevel
* Check flush errors
* Replace IncreaseLevelCore with custom LevelCore
Adding a leveler that was less verbose would cause the initialization
fail, and therefore not be added to the core. This check is only at
the time of initialization.
An alternative approach to creating our own core is to set the child log
level equal to the parent, so initialization is guaranteed (with the
added benefit of intuitive behavior).
* Use controller if it exists, otherwise inherit parent's log level
* Cleanup some tests
2022-08-26 15:27:09 -05:00
Dustin Decker
2452e93a80
Import 27 new detectors ( #737 )
2022-08-26 12:35:06 -07:00
ahrav
20cdcbc970
[bug] - Fix the starting index value for plus line check. ( #734 )
...
* Fix the starting index value for plus line check.
* Set the correct source type for notifications.
* Reset old value.
* Fix the starting index value for plus line check.
* Fix len check.
* Reset old value.
* Add tests.
* Update tests.
* Update tests.
2022-08-25 10:45:35 -07:00
Marlon
098d4a9e7d
added appointed scanner ( #425 )
...
* added appointed scanner
* fix comment
* fix comment
* fix comment
* fix issue
Co-authored-by: Dustin Decker <dustin@trufflesec.com>
2022-08-25 10:40:35 -07:00
Marlon
8709b4fdc6
added apilayer scanner ( #368 )
...
* added apilayer scanner
* fix comment
* fix comment
2022-08-25 10:36:41 -07:00
roxanne-tampus
024c847f83
Added braintreepayments detector ( #541 )
...
* added braintreepayments detector
* updated condition based on suggestion
* enhancements
* enhancement
* enhancement for valid response
2022-08-25 10:34:53 -07:00
roxanne-tampus
8a9229cf73
Added duply detector ( #552 )
...
* Added duply detector
* enhancement
2022-08-25 10:33:34 -07:00
roxanne-tampus
77fabe6191
Added gtmetrix detector ( #554 )
2022-08-25 10:33:02 -07:00
roxanne-tampus
6f07c59354
Added monkeylearn detector ( #553 )
2022-08-25 10:32:32 -07:00
roxanne-tampus
e192aee66a
Added twist detector ( #549 )
...
* Added twist detector
* enhancement
* auth enhancement
* enhancements
* enhancement
2022-08-25 10:31:43 -07:00
roxanne-tampus
64f15a7bfe
Added holistic detector ( #556 )
...
* Added holistic detector
* enhancement
2022-08-25 10:30:43 -07:00
roxanne-tampus
ebd6b5565b
Added transferwise detector ( #558 )
...
* Added transferwise detector
* update version
* updated regex
2022-08-25 10:29:29 -07:00
roxanne-tampus
4982755db2
Added ecostruxureit detector ( #555 )
...
* Added ecostruxureit detector
* updated regex
2022-08-25 10:27:43 -07:00
Marlon
7ccf69d419
added parseur detector ( #454 )
...
* added parseur detector
* fix comment
* fix comment
2022-08-25 10:26:23 -07:00
Marlon
45aaa25fe8
added docparser detector ( #458 )
...
* added docparser detector
* fix comment
* remove A on regex
2022-08-25 10:25:25 -07:00
Marlon
0063d50652
added formsite detector ( #467 )
...
* added formsite detector
* fix comment
* fix comment
2022-08-25 10:24:23 -07:00
Marlon
956a58fd95
added lemlist detector ( #469 )
...
* added lemlist detector
* fix comment
2022-08-25 10:23:09 -07:00
Marlon
38f6cc07ea
added prodpad detector ( #470 )
...
* added prodpad detector
* fix comment
2022-08-25 10:22:32 -07:00
Mildred Bernardo
bfa5e642a3
added flightlabs detector ( #475 )
...
* added flightlabs detector
* Modified the regex based on comment
* code enhancement
* Changed the valid response filter
2022-08-25 10:22:02 -07:00
Marlon
c2d42878c8
added codeclimate detector ( #484 )
...
* added codeclimate detector
* fix comment
* fix comment
* fix comment
2022-08-25 10:20:49 -07:00
Marlon
3d04abced8
added getresponse detector ( #506 )
...
* added getresponse detector
* fix comment
2022-08-25 10:20:00 -07:00
Marlon
b79b8e4ec7
added heatmapapi detector ( #509 )
...
* added heatmapapi detector
* fix comment
2022-08-25 10:18:16 -07:00
Marlon
be4fedbcb4
added demio detector ( #512 )
...
* added demio detector
* fix comment and change regex
2022-08-25 10:16:53 -07:00
Marlon
608eb45797
added kanbantool detector ( #513 )
...
* added kanbantool detector
* fix comment
* fix comment
2022-08-25 10:15:19 -07:00
Marlon
da1d3b3a01
Feature/salesmate detector ( #514 )
...
* added salesmate detector
* push change
* fix change
2022-08-25 10:13:25 -07:00