Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Support url-safe base64 secrets #245

Merged
merged 12 commits into from
Oct 24, 2019
Merged

Support url-safe base64 secrets #245

merged 12 commits into from
Oct 24, 2019

Commits on Oct 7, 2019

  1. Support url-safe base64 secrets 

    This commit updates the base64 plugin to support url-safe
plugins by just adding - and _ to the charset.
    Victor Zhou committed Oct 7, 2019
    Configuration menu
    Copy the full SHA
    e10b9a3 View commit details
    Browse the repository at this point in the history

  2. Scan string directly in YAML parser 

    We already check for whitelists in `ignored_lines =
parser.get_ignored_lines()` call above, so calling
`analyze_string` wastes time with the duplicated check.
    Victor Zhou committed Oct 7, 2019
    Configuration menu
    Copy the full SHA
    de2cbd8 View commit details
    Browse the repository at this point in the history

  3. Scan string directly in INI parser 

    We already check for whitelists in the IniFileParser,
so doing another whitelist check here is redundant.
    Victor Zhou committed Oct 7, 2019
    Configuration menu
    Copy the full SHA
    d61baab View commit details
    Browse the repository at this point in the history

  4. Ignore id's in the high-entropy plugin

    Victor Zhou committed Oct 7, 2019
    Configuration menu
    Copy the full SHA
    e1fa566 View commit details
    Browse the repository at this point in the history

  5. Rename analyze_string to analyze_line 

    This renaming more accurately reflects what the function
does in all the plugins (at the moment) and more clearly
distinguishes it from `analyze_string_content`
    Victor Zhou committed Oct 7, 2019
    Configuration menu
    Copy the full SHA
    0c9e97e View commit details
    Browse the repository at this point in the history

  6. Ignore yaml high-entropy secrets whose keys are ids

    Victor Zhou committed Oct 7, 2019
    Configuration menu
    Copy the full SHA
    ab78151 View commit details
    Browse the repository at this point in the history

  7. Ignore id values in ini files

    Victor Zhou committed Oct 7, 2019
    Configuration menu
    Copy the full SHA
    3d0dc36 View commit details
    Browse the repository at this point in the history

  8. Capitalize comments by PR request

    Victor Zhou committed Oct 7, 2019
    Configuration menu
    Copy the full SHA
    2cfea37 View commit details
    Browse the repository at this point in the history

Commits on Oct 9, 2019

  1. Ignore UUID values in high-entropy plugin

    Victor Zhou committed Oct 9, 2019
    Configuration menu
    Copy the full SHA
    0115efd View commit details
    Browse the repository at this point in the history

  2. Make some filter regexes case-insensitive

    Victor Zhou committed Oct 9, 2019
    Configuration menu
    Copy the full SHA
    b402f51 View commit details
    Browse the repository at this point in the history

Commits on Oct 10, 2019

  1. Adjust filter regex usage per Yelp#245 comments

    Victor Zhou committed Oct 10, 2019
    Configuration menu
    Copy the full SHA
    ece342b View commit details
    Browse the repository at this point in the history

Commits on Oct 11, 2019

  1. Refactor secret filtering to be a instance method

    Victor Zhou committed Oct 11, 2019
    Configuration menu
    Copy the full SHA
    488334f View commit details
    Browse the repository at this point in the history