actions/trufflehog
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
2,171 Commits 112 Branches 175 Tags
gitparse-panic
Commit Graph

24 Commits

Author SHA1 Message Date
Cody Rose 06a562688d capture json error (#1509) 2023-07-21 10:44:47 -05:00
Cody Rose a123d5c5e1 do not report 403s as indeterminate in AWS detector (#1481) 2023-07-11 16:35:23 -04:00
Cody Rose b803a0f701 Report indeterminacy in AWS verifier (#1480) 2023-07-11 15:50:31 -04:00
dillonstreator 648ef3b52c fix spelling errors (#1413) 2023-06-21 07:15:28 -07:00
Dustin Decker e217e2fbfd Ensure multipart credentials are deduplicated correctly (#1271) 
* Ensure multipart credentials are deduplicated correctly

* update tests
 2023-04-20 15:07:59 -07:00
trufflesteeeve 114f4b6989 Add Type() to detector interface (#1088) 
* Add Type() to detector interface

The goal here is to allow the detector type information to be used
without the need for reflection. This could possibly allow us to more
easily inject information into detectors or filter them out if
necessary.

Co-authored-by: ahmed <ahmed.zahran@trufflesec.com>

* remove test detector

---------

Co-authored-by: ahmed <ahmed.zahran@trufflesec.com>
 2023-02-09 14:46:03 -08:00
Dustin Decker b18edef01a Enable skipping of particular key IDs (#930) 
* Enable skipping of particular key IDs

* update test
 2022-11-18 09:09:40 -08:00
Dustin Decker 67e8df96a4 Add AWS account information (#782) 
* Add AWS account information

* nit
 2022-09-06 17:55:03 -07:00
ahrav 2cab951ee5 [Thog-628] update detector results hash v2 (#710) 
* Start updating detectors that have two part creds to record the raw result as ID + secret.

* Add more detectors.

* More detectors.

* More detectors.

* remove comment out imports.
 2022-08-12 14:53:37 -07:00
Dustin Decker 8826e369cf AWS detector should detect with leading '+' (#698) 2022-08-08 09:30:08 -07:00
Miccah c4ca7d7c8b Mark detector tests with a build flag (#613) 2022-07-07 10:27:21 -07:00
ahrav 5ac54ac107 [THOG-531] - remove ending word boundary AWS detector (#637) 
* Remove the ending word boundary for the AWS dectector. This will prevent missing secrets that end with / due to it not being ASCII.

* Update regex to be more strict.
 2022-07-07 10:10:33 -07:00
trufflesteeeve d1a81afbb5 Only include one result per AWS Key ID, preferably verified (#619) 
Also ignore unverified results that match hashes, because they are
probably just hashes.
 2022-06-17 16:22:36 -04:00
trufflesteeeve 26bf1664eb Move aws detector back to ID checking against secrets, make ID the redacted secret (#617) 2022-06-09 15:06:08 -07:00
ahrav 143fa333f3 [THOG-403] Fix var naming. (#586) 
* remove profililing.

* rename uri to URI.

* change var declaration.
 2022-05-25 15:23:20 -07:00
Dustin Decker 43955b9a38 Use GetCallerIdentity for AWS verification (#585) 2022-05-25 14:45:28 -07:00
roxanne-tampus 80c6579226 Updated aws detector (#579) 2022-05-24 05:07:54 -07:00
ahrav 198cb1a786 Clean up comments. (#562) 2022-05-16 09:03:10 -07:00
Dustin Decker c80bd5e905 Fix linting and dogfood in CI 2022-03-04 08:39:23 -08:00
Dustin Decker b054739984 Not all prefixes are credentials for AWS, fix capturing group 2022-03-04 08:39:22 -08:00
Dustin Decker 86c2eb507b Adding detectors (#46) 
* rename secret

* Add supporting docs and tooling for adding new detectors
 2022-03-04 08:39:22 -08:00
Dustin Decker b2a9d5b0a9 Update AWS prefixes 2022-03-04 08:39:22 -08:00
Dustin Decker 77418fb3f8 module v3 2022-02-15 18:54:47 -08:00
Dustin Decker 5596025b0b more detectors 2022-02-15 18:46:28 -08:00