Skip to content

v1.8.4

Choose a tag to compare

View all tags
@haggaiwambua haggaiwambua released this 18 Jun 16:53
Immutable release. Only release title and notes can be modified.
v1.8.4
1bd1b38
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Fixed

  • ConfigOutsideConfigAnalyzer no longer false-positives on long descriptive identifiers (e.g. camelCase array keys) reported as "Possible hardcoded API key or secret" — the heuristics now skip strings in identifier positions (array-access keys, array-literal keys, and compact() arguments) since these can never hold a credential; array values continue to be scanned (#235)
Assets 3
Loading