Skip to content

CodeRiskTools Scanner 3.1.2

Choose a tag to compare

View all tags
@9batalion 9batalion released this 27 Jul 15:58
v3.1.2
352524a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

CodeRiskTools Scanner 3.1.2

Hotfix for the controlled vulnerability database updater default configuration.

Fixed

  • secret-scanner vuln-db init-config no longer enables the retired OSV JSONL URL https://osv.dev/vulns/all.jsonl, which now returns HTTP 404 and caused vuln-db update --full --profile core to reject with source download failed.
  • The generated config now records the current OSV full dump URL https://osv-vulnerabilities.storage.googleapis.com/all.zip as enabled: false / adapter_status: zip-adapter-required until ZIP full-dump ingestion and sufficient staging disk are explicitly supported.
  • Working bounded sources remain enabled: CISA KEV, EPSS, and GitHub Advisories.

Boundary

This release prevents the default full-update config from failing on a retired OSV endpoint. It does not claim full OSV/CVE mirror support.

Verification

  • Targeted update/config tests passed.
  • GitHub Actions CI passed on Python 3.10, 3.11, 3.12, and 3.13 for PR #202.
  • Built wheel/sdist from merged main, installed the wheel in a clean venv, and verified secret-scanner 3.1.2 plus corrected vuln-db init-config output.
Assets 4
Loading