shhh-scan v0.1.1
Bug Fixes
-
Fixed invalid JSON output (BUG-020): Context field now strips control characters that could produce unterminated strings, breaking
--format jsonpiping tojqand other tools. -
Fixed PEM header false positives (BUG-019): Private key patterns now require base64 key body after the header. Code that merely references PEM header strings (e.g.,
.replace("-----BEGIN RSA PRIVATE KEY-----", "")) is no longer flagged as a critical finding. -
Fixed progress noise in piped output (BUG-021): Progress counter only uses carriage-return updates when stderr is a TTY, preventing garbled output when piping to files or other commands.