Skip to content

3.3.22

@mayblo mayblo tagged this 01 Oct 09:01
chore(deps): bump bc-detect-secrets from 1.5.50 to 1.5.52

Picks up an accuracy fix in AzureStorageKeyDetector: the existing
Cosmos DB skip in integrity_regex was case-sensitive and missed
Pascal-case identifiers (e.g. CosmosDbConnectionString) as well as
bare `documents.azure.com` endpoints, causing Cosmos DB connection
strings to be reported as Azure Storage Account access keys.

Upstream fix: https://github.com/bridgecrewio/detect-secrets/pull/299

Co-authored-by: mblonder <mblonder@paloaltonetworks.com>
Assets 2
Loading