Commit graph

3211 commits

Author SHA1 Message Date
Abdul Basit
dddeca5224
Adding Larksuite Detectors + Tests (#3008)
* implemented larksuite detectores for tokens and api keys.
test implemented for larksuite token based detectors.

* implemented test for larksuiteapikey detector

* load credentials from GCP secret manager for larksuite api keys
2024-06-24 11:05:56 -05:00
Richard Gomez
3c20b000e1
fix(git): set GIT_DIR based on ScanOptions.Bare (#3004) 2024-06-24 07:37:45 -07:00
Cody Rose
de19a39f2c
Return targeted scan errors (#2995)
Targeted scans should return their errors so that consumers can process them. By creating a type that combines an error with a targeted secret ID, we can return these errors without having to modify the Source interface.
2024-06-21 13:50:56 -04:00
renovate[bot]
a150103e2b
fix(deps): update module github.com/aws/aws-sdk-go to v1.54.6 (#2996)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-21 08:11:35 -07:00
renovate[bot]
e3d5227a4c
fix(deps): update module github.com/googleapis/gax-go/v2 to v2.12.5 (#2993)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-20 18:00:54 -07:00
Richard Gomez
9176e25a26
ci(detector-tests): disambiguate step names (#2989) 2024-06-20 11:43:11 -05:00
renovate[bot]
5eaad839a5
fix(deps): update module github.com/aws/aws-sdk-go to v1.54.5 (#2992)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-20 07:59:28 -07:00
Zachary Rice
d5b9157d2b
clone more refs (#2988) 2024-06-20 09:40:03 -05:00
renovate[bot]
007fbf5768
fix(deps): update module google.golang.org/api to v0.185.0 (#2987)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-19 08:24:05 -07:00
ahrav
347e8a6683
[feat] - Add Option to Retain False Positives During Detection (#2967)
* provide a mechanism to retain false positive findings

* update

* reorganzie

* revert comment

* update test

* typo

* fix test

* fix test

* update

* update
2024-06-18 09:40:21 -07:00
renovate[bot]
a0108df67a
fix(deps): update module github.com/getsentry/sentry-go to v0.28.1 (#2986)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-18 08:15:02 -07:00
renovate[bot]
981c568d15
fix(deps): update module github.com/elastic/go-elasticsearch/v8 to v8.14.0 (#2981)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-18 08:04:57 -04:00
renovate[bot]
32d714bd86
fix(deps): update module github.com/bradleyfalzon/ghinstallation/v2 to v2.11.0 (#2980)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-17 11:32:52 -04:00
renovate[bot]
204e57489f
fix(deps): update module cloud.google.com/go/storage to v1.42.0 (#2977)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-17 07:31:44 -07:00
renovate[bot]
48c1d528aa
fix(deps): update module go.mongodb.org/mongo-driver to v1.15.1 (#2975)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-16 12:48:41 -07:00
renovate[bot]
86a0ea74ef
fix(deps): update module github.com/google/go-containerregistry to v0.19.2 (#2973)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-16 10:16:41 -07:00
renovate[bot]
57d5f96ecc
fix(deps): update golang.org/x/exp digest to 7f521ea (#2972)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-16 00:34:27 -07:00
renovate[bot]
177a3c343d
fix(deps): update module github.com/aws/aws-sdk-go to v1.54.2 (#2962)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-15 10:38:03 -07:00
Dustin Decker
e851b7bb28
patch dependency (#2971) 2024-06-15 08:09:58 -04:00
ahrav
a0618348fe
[fix] - implement MaxSecretSizeProvider for auth0managementapitoken detector (#2953)
* updates

* remove ey as a keyword
2024-06-14 14:21:17 -07:00
Cody Rose
15719c2c4f
Fix integration tests (#2970)
The recent engine changes (#2887) broke some integration tests. This PR fixes them. I also fixed an unrelated linter issue.
2024-06-14 14:30:18 -04:00
Richard Gomez
2964b3b2d2
feat(detectors): log falsepositive reason (#2969) 2024-06-14 08:26:05 -07:00
Richard Gomez
235b27964b
fix(handlers): workaround for max archive depth (#2965) 2024-06-14 08:18:05 -07:00
ahrav
523a915143
add metrics to the pipeline (#2968) 2024-06-14 07:57:52 -07:00
āh̳̕mͭͭͨͩ̐e̘ͬ́͋ͬ̊̓͂d
7bf3a9b5e2
adding eraser ai detector (#2961)
* adding eraser ai detector

* add eraser to defaults
2024-06-14 10:10:37 -04:00
ahrav
cb072603dc
Modularize scanning engine (#2887)
* POC: Modularize scanning engine.

* fix typo

* update interface name

* fix tests

* update test

* fix moar tests

* fix bug

* fixes.

* fix merge

* add detector verification overrides

* handle --no-verification flag

* support fp

* add test

* update name

* filter

* update test

* explicit use of detector

* updates
2024-06-13 13:47:09 -07:00
Richard Gomez
4addd81e29
test: fix compile errors (#2964) 2024-06-13 08:22:25 -07:00
Abdul Basit
cb4d332cbf
adding twitter + Consumer key detector (#2963)
* updated the twitter regex.

* updated regex for bearer token.

* clean up the code for existing twitter detector
added and Implemented new detector for twitter consumer key & secrets with test.
proto generated.

* string updated.

* written test for twitter consumer key detector

* reverted the file to avoid conflicts

* corrected the regex library in twitter detector
2024-06-13 09:32:24 -04:00
renovate[bot]
5c1344d9ad
fix(deps): update golang.org/x/exp digest to fc45aab (#2931) 2024-06-12 03:41:49 -07:00
ahrav
433a57adaf
use @master (#2959) 2024-06-11 10:44:12 -07:00
ahrav
e173c2908d
pin archiver dependency (#2958) 2024-06-11 10:18:52 -07:00
ahrav
bf77251543
[feat] - Update span calculation logic to use offset magnitude (#2957)
* Add a default start offset

* update

* use keywordIdx
2024-06-11 09:12:31 -07:00
ahrav
68bea576db
[fix] - Refactor Filtering Logic to Fix Known False Positive Handling in Overlapping Cases (#2946)
* Filter results for verification overlap results

* add test
2024-06-11 07:25:12 -07:00
ahrav
11b80dbdf9
[chore] - Update discordwebhook detector keyword (#2954)
* update keyword

* use stdlib var
2024-06-11 07:24:34 -07:00
Richard Gomez
6b52d5ad40
fix(maxmind): prevent npd panic (#2948) 2024-06-11 08:27:42 -04:00
Richard Gomez
ca67a8aa83
refactor(filesystem): change symlink err handling (#2941) 2024-06-10 13:05:42 -07:00
ahrav
2f7a0d0699
[bug] - Ensure BufferedFileWriter Flushes Buffer Contents to File Correctly (#2943)
* flush butter before writing to file

* revert

* remove redundant Reset

* add test case
2024-06-10 07:27:01 -07:00
renovate[bot]
3a029ea193
fix(deps): update module github.com/launchdarkly/go-server-sdk/v7 to v7.4.1 (#2947)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-09 11:10:03 -07:00
renovate[bot]
4e21590cbe
fix(deps): update module github.com/aws/aws-sdk-go to v1.53.19 (#2944)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-09 08:15:50 -07:00
renovate[bot]
4403988151
fix(deps): update module github.com/snowflakedb/gosnowflake to v1.10.1 (#2913)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-08 08:45:30 -07:00
Ben Bridts
f122b295bf
Make the github action work with a path as input (#2908)
This change executes all shell commands relative to `path`, and makes sure
that `git` is always working by running `git status` first. If the `path` is
not a git repository, `git status` should give a clear error message about
this.
2024-06-07 08:21:28 -07:00
Richard Gomez
3be4661f34
feat(extensions): ignore dia diagrams (#2939) 2024-06-07 07:37:33 -07:00
Miccah
a330aa6f53
[chore] Polish channelmetrics package (#2938) 2024-06-06 17:29:23 -07:00
renovate[bot]
467c4232c9
fix(deps): update module github.com/aws/aws-sdk-go to v1.53.17 (#2914)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-06 12:09:48 -07:00
Richard Gomez
5216142960
refactor(cache): use generics (#2930) 2024-06-06 13:08:00 -04:00
ahrav
ea9f8ace9f
[chore] - address comments (#2920)
* address comments

* fix test

* address comments

* update comments

* fix tests

* lint

* do the thing
2024-06-06 07:58:08 -07:00
Richard Gomez
40fa304a3a
feat(git): improve scan logging (#2923) 2024-06-06 05:12:59 -04:00
ahrav
bef4a46b65
[fix] - Correctly calculate EntireSpanChunkCalculator span (#2924)
* fix bug when calculating the span for the entire span chunk calculator

* fix rename
2024-06-05 19:21:57 -07:00
ahrav
babe48fdd1
remove stutter in naming (#2926) 2024-06-05 18:36:08 -07:00
Hon
4b3f834859
Update Jenkins in tui (#2925) 2024-06-05 18:34:01 -07:00