8fad5fff79
add dockerhub scanner ( #1496 )
...
* add dockerhub scanner
* clean
* clean and fix regex logic and tests
* check length of userMatches before access
* Use camelcase.
---------
Co-authored-by: Ahrav Dutta <ahravdutta02@gmail.com >
2023-07-19 09:26:28 -07:00
17b90b32d0
add couchbase scanner to defaults ( #1497 )
...
Co-authored-by: Ahrav Dutta <ahravdutta02@gmail.com >
2023-07-16 17:45:56 -07:00
9af31f00a9
add envoy api key scanner ( #1482 )
...
* add envoy api key scanner
* Use detectors4.
---------
Co-authored-by: Ahrav Dutta <ahravdutta02@gmail.com >
2023-07-16 16:46:28 -07:00
d4972313ff
remove old detector ( #1474 )
2023-07-10 13:02:19 -05:00
23757dbe0a
remove image4 detector ( #1461 )
2023-07-06 12:56:09 -07:00
00920984e3
added opsgenie detector ( #650 )
...
* added opsgenie detector
* update interface and import
---------
Co-authored-by: Dustin Decker <dustin@trufflesec.com >
2023-06-27 16:43:25 -07:00
dfb1a0cd38
Add DocuSign detector ( #1382 )
...
* init
* look for client id and client secret, encode them for basis auth
* add tests
* test without checking the contents of response
* confirm access_token exists
* cleanup test
* explain in code that an undocumented grant_type is used
* remove use of deprecated ioutil, remove dead code, return errors instead of just logging
* directly pull access token
* update error text, remove redundant body close()
* import new detector into defaults
2023-06-08 13:34:50 -04:00
e81b908e07
Add buildkitev2 detector for newer tokens. ( #1341 )
2023-05-15 12:58:36 -07:00
4c04bbbe85
added pulumi cloud Access token detector ( #1295 )
...
* added pulumi cloud Access token detector
* removed accidentally committed tokens
* added the databricks token detection
* made recommended changes
* added supabase management api token
* nuget api key detector
* added aiven.io token detector
* added prefect.io api key detector
* update protos.
---------
Co-authored-by: Developer <garg47294+1@gmail.com >
Co-authored-by: Ahrav Dutta <ahravdutta02@gmail.com >
2023-05-11 09:08:48 -07:00
c13c56283d
add tineswebhook detector ( #1304 )
2023-05-01 07:48:58 -07:00
b1675194ca
Implement EndpointCustomizer ( #1291 )
...
* Implement EndpointCustomizer
Add the EndpointCustomizer interface and EndpointSetter convenience struct,
implement EndpointCustomizer for github and gitlab detectors, and add
parsing, verification, and applying user-supplied configuration.
* Check error from SetEndpoints
* Rename variable for clarity
2023-04-27 12:23:50 -05:00
5a86c18302
Fix include and exclude detector logic ( #1267 )
...
* Fix include and exclude detector logic
* Fix test
* Add more clarifying comments
2023-04-26 10:49:54 -05:00
6f801f64c7
Added a new detector for percy.io ( #1284 )
...
* Feature: Added a new detector for percy.io
* Updated variable name
---------
Co-authored-by: ahrav <ahravdutta02@gmail.com >
2023-04-25 13:18:34 -07:00
0052f60090
Allow for custom verifier ( #1070 )
...
* allow for custom verifier.
* Update engine.
* use custom detectors.
* set cap.
* Update verifiers.
* Remove nil check.
* resolved nit
* handle uppercase values
* updating missing url logs
* adding more descriptive variable names
* updating logs to use correct variables
* Removing toLower for urls
* if else nits
* Adding versioning for github and gitlab
---------
Co-authored-by: ahmed <ahmed.zahran@trufflesec.com >
Co-authored-by: ah̳̕mͭͭͨͩ̐e̘ͬ́͋ͬ̊̓͂d <13666360+0x1@users.noreply.github.com >
2023-03-29 12:26:39 -07:00
3e4496156c
added new detectors and fixed mesibo detector ( #1166 )
...
* added new detectors and fixed mesibo detector
* added bscscan.com API detector
* added coinmarketcap detector
* update alchemy
* update blocknative
* update bscscan test
* update cmc test
* update tests
---------
Co-authored-by: Dustin Decker <dustin@trufflesec.com >
2023-03-16 18:57:08 -07:00
d382d5cb1c
Add OpenAI API Tokens detector ( #1142 )
...
* Add OpenAI Detector
* Add OpenAI Detector tests
* Add OpenAI Detector to defaults.go
* Removing references to github detector in tests
2023-03-16 17:58:22 -07:00
4f13090c01
Remove duplicated detectors ( #1092 )
...
In this case just Heroku and LinearAPI. But this includes the Moonclerck
detector, which appears to be a typo that got turned into a separate
detector type.
Co-authored-by: zubairk14 <zubair.khan@trufflesec.com >
2023-02-13 11:44:19 -05:00
ae4b387448
add LDAP detector ( #896 )
2022-11-18 19:45:11 -08:00
b18edef01a
Enable skipping of particular key IDs ( #930 )
...
* Enable skipping of particular key IDs
* update test
2022-11-18 09:09:40 -08:00
ecd25784f5
Adding Shopify detector ( #875 )
...
* Fixes/work based on testing
* Remove some commented code
* Change how verification happens and grab additional information
* Address linter warnings.
* add shopify detector to default detectors.
Co-authored-by: Dustin Decker <dustin@trufflesec.com >
Co-authored-by: Ahrav Dutta <ahravdutta02@gmail.com >
2022-11-08 16:21:57 -08:00
a7fc12240f
Do local URI verification, while attempting to defuse SSRF ( #879 )
...
* simplify monogo pattern
* do URI verification locally, while attempting to defuse SSRF
* test SSRF defuse
* simplify err check logic per linter recommendation
* split up detectors
* address comments
* remove unused var
2022-11-01 17:27:24 -07:00
60464da3ce
proposal: SqlServer connection string detector ( #867 )
...
* sqlserver added to detectors.proto
* make protos
* boilerplate detector generated
* wireup
* initial
2022-10-26 07:46:13 -07:00
d29357c9d4
added npm detector ( #841 )
2022-10-13 06:04:02 -07:00
85467538f6
remove faulty detector ( #836 )
2022-10-07 09:20:44 -07:00
2bc4985061
Add SSH config option for the git source ( #830 )
...
* Add SSH config option for the git source
The auth message is empty since we use the git binary underneath to
handle the SSH authentication.
* Import digitaloceanv2
2022-09-28 20:40:01 +02:00
ad4b9406a7
Added digitaloceanv2 detector ( #829 )
...
* Added digitaloceanv2 detector
* import detector
Co-authored-by: Dustin Decker <dustin@trufflesec.com >
2022-09-28 09:56:35 -07:00
db42bcf2a2
[OC-103] - Add Gemini detector ( #800 )
...
* Add Gemini detector.
* Add regex and test code for Gemini detector.
* Remove else.
* Add commentary.
* Address comments.
* Use regular else.
* Make nice and complicated.
* use regular detection pattern.
* Add detector to default detectors.
2022-09-26 11:48:48 -07:00
e8f1bb9127
Import NGC detector
2022-09-21 16:26:58 -07:00
fcd580406e
A few improvements ( #809 )
...
* Run integration tests
* Update examples
* Import mongodb
2022-09-19 13:23:25 -07:00
2452e93a80
Import 27 new detectors ( #737 )
2022-08-26 12:35:06 -07:00
c2426df4d6
Disable sentiment verifier and update teams webhook to avoid being stateful ( #646 )
2022-07-07 16:55:45 -07:00
235a60a850
add more detectors ( #577 )
2022-05-23 18:39:49 -07:00
606dadfbb1
Import more detectors ( #563 )
2022-05-17 18:56:48 -07:00
d217a517c0
Cleanup packages and include more detectors ( #521 )
...
* clean up duplicate packages
* include more detectors
2022-05-04 09:27:42 -07:00
913c75db15
Add 12 more detecotrs
2022-04-21 15:31:17 -07:00
9622932d81
Add 12 detectors ( #432 )
2022-04-19 12:32:00 -07:00
972108aea4
21 new detectors ( #347 )
2022-04-08 16:07:39 -07:00
a1dfcde9a6
address detector issues ( #123 )
2022-04-01 18:51:41 -07:00
d33551e7dc
Add midise detector ( #88 )
2022-03-17 13:38:05 -07:00
43de9c3604
Update defaults
2022-03-11 17:25:31 -08:00
b4ac103d11
Add snifftest
2022-03-11 10:24:36 -08:00
b0e0c26137
update detectors
2022-03-11 10:24:36 -08:00
6f32b108a3
Disable GetEmails
2022-03-04 08:39:22 -08:00
1da3e0f723
turn off getemail scanner
2022-03-04 08:39:22 -08:00
77418fb3f8
module v3
2022-02-15 18:54:47 -08:00
533f6d1e20
updates
2022-02-15 18:54:43 -08:00
4218c39d99
Initial CLI w/ partially implemented Git source and demo detector ( #1 )
2022-01-13 12:02:24 -08:00
Brandon Yan