Skip to content

v1.5.3

Choose a tag to compare

View all tags
@dgtlss dgtlss released this 21 May 22:37
· 5 commits to main since this release
v1.5.3
c392c3e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Fixed

  • Fixed a false positive in the debug-mode audit where laravel/horizon was incorrectly reported as a development package in production.
  • Fixed a false positive where horizon/* routes were incorrectly reported as exposed testing routes.

Added

  • Added optional ignore_findings support in config/warden.php to suppress accepted or context-specific findings without forking the package.
  • Ignore rules support matching by finding fields such as source, package, and title.
  • String-based ignore rules support wildcards, for example Testing routes*.

Notes

  • This change is backwards-compatible.
  • Telescope and Dusk behavior is unchanged.
  • Horizon is no longer treated as a dev-only package by default.
'ignore_findings' => [
    ['source' => 'debug-mode', 'package' => 'laravel/horizon'],
    ['source' => 'debug-mode', 'title' => 'Testing routes*'],
],
Assets 2
Loading