Skip to content

v0.25.0

Choose a tag to compare

View all tags
@mdostal mdostal released this 16 Aug 18:08
· 32 commits to main since this release
v0.25.0
ef38877
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Git-repo scan targets + source classification

Following up on manual verification that no real leak-scan finding had ever touched this codebase's own history, that manual technique is now built in.

  • portunus leak-scan config add-repo <path> -- scans a repo's FULL git history (all branches, all commits), not just the working tree
  • Every finding classified by source: log / local / git-history, and for the latter, public/private/unknown via gh repo view (never a guess)
  • Public-repo findings get the loudest treatment anywhere they render -- the single most severity-relevant fact this feature can surface

See CHANGELOG.md for full details.

Assets 3
Loading