Repository navigation
Releases
Releases · tharun208/cloneguard
v0.1.2
Fixes a detection gap where cloud credential paths built from separate strings were missed.
- Fixed: split-path cloud credentials were not flagged.
reads-cloud-credentialsonly matched
paths written as one string ('.aws/credentials'). Code such as
path.join(os.homedir(), '.aws', 'credentials')or
os.path.join(os.path.expanduser("~"), ".aws", "credentials")scanned as clean with exit code 0.
It is now flagged as suspicious (exit 2), the same as the equivalent SSH key paths. This also covers the
split forms of.config/gcloud,.azure,.kube/configand.docker/config.json.
Thanks to the reviewer who reported it. - Plain code such as
config.aws.regionis still not flagged. - Known limit: a path split across lines, or assembled from variables, can still be missed.
v0.1.1
v0.1.0
Full Changelog: https://github.com/tharun208/cloneguard/commits/v0.1.0