Skip to content

Releases

v0.1.2

Choose a tag to compare

@github-actions github-actions released this 08 Nov 12:07

Fixes a detection gap where cloud credential paths built from separate strings were missed.

  • Fixed: split-path cloud credentials were not flagged. reads-cloud-credentials only matched
    paths written as one string ('.aws/credentials'). Code such as
    path.join(os.homedir(), '.aws', 'credentials') or
    os.path.join(os.path.expanduser("~"), ".aws", "credentials") scanned as clean with exit code 0.
    It is now flagged as suspicious (exit 2), the same as the equivalent SSH key paths. This also covers the
    split forms of .config/gcloud, .azure, .kube/config and .docker/config.json.
    Thanks to the reviewer who reported it.
  • Plain code such as config.aws.region is still not flagged.
  • Known limit: a path split across lines, or assembled from variables, can still be missed.

v0.1.1

Choose a tag to compare

@github-actions github-actions released this 07 Nov 22:28

Full Changelog: v0.1.0...v0.1.1

v0.1.0

Choose a tag to compare

@github-actions github-actions released this 03 Nov 22:35