Skip to content

Kingfisher v1.113.0

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 12 Aug 02:43
v1.113.0
82d0505
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

[v1.113.0]

  • Added repository-aware v2 baselines with safe multi-repository updates, atomic writes, and automatic migration while retaining legacy baseline compatibility.
  • Added configurable webhook finding filters, empty-alert suppression, dry-run previews, and access-map impact summaries.
  • Breaking: the alert payload field summary.filtered_total was removed; read summary.total (now always the per-sink filtered count) and the new summary.unfiltered_total for the whole-scan count.
  • Breaking (library): FindingsStore::access_map_results/set_access_map_results and AccessMapCollector::into_requests are no longer public.
  • Added Qwen, Solana, and Starknet detection rules, plus Databricks OAuth client-secret and Kubernetes ServiceAccount token rules.
  • Tightened MongoDB Atlas API key detection and stopped the Databricks workspace-host rule from matching azurewebsites.net.
  • Fixed Google API-key attribution and validation, including YouTube handling and documented Gemini header authentication; added Google Chat webhook detection and authoritative rule provenance.
  • Removed the duplicate Google OAuth rule and clarified Firebase FCM legacy server-key detection and documentation.
  • Refreshed built-in rule and revocation coverage documentation.
Assets 13
Loading