v0.0.14

Changelog

• b6957ed Accidentally commited testing changes.
• d0118a7 Add -race flag to tests
• 69a8145 Add .golangci.yaml and enable goimports
• 47ad049 Add Files examples
• e67ab2e Add Files resource
• 89c0897 Add JSON support
• e960277 Add TODO
• db5fd86 Add TODO item
• 1eb66aa Add TODOs to the README
• 63b6a8c Add a CONTRIBUTING.md file
• a53922a Add a to-do to the README
• dc94526 Add better github support item to the README
• cfcd963 Add comments to the proto file
• caf66b0 Add completions (leaktk#45)
• 9e27000 Add conditional compilation for non unix targets
• 5234c86 Add debug logging
• 4089e47 Add fields to Cargo.toml
• 0e2e06f Add gosec to the tests
• 290ff1b Add id-token write so it can sign in itself.
• fe260d1 Add local repos to example request
• b1e2e6f Add logger and set level from config
• ea94c29 Add login and logout commands
• 4c42242 Add missing period
• 12120d3 Add more test cases and fix parsing bugs
• 0931ff8 Add more test cases and fix parsing bugs
• 41d398e Add more tests
• a93ccff Add notes to the error handling task
• 4c6c253 Add priority option
• 33d9a77 Add signing sigstore using github oidc
• fb837d8 Add some test cases
• 7d06951 Add space between some code
• a40af69 Add tests for JSONData.Walk
• 7817662 Add tests for the gitleaks backend
• fd53e55 Add todos
• b9b1b97 Add zerolog mapper
• da3050a Always log Fatal logs
• b7f4737 Auth header support
• 3f013e9 Avoid panics with rapid scans with many workers
• 318aac6 Better format command output
• f25b27f Better git error handling
• 333780c Break out the PatternServerConfig as a separate block
• 20d77e4 Bump actions/checkout from 4.1.7 to 4.2.0
• 640fc29 Bump actions/checkout from 4.2.0 to 4.2.1 (leaktk#57)
• aca4f1f Bump actions/checkout from 4.2.1 to 4.2.2
• 7757025 Bump actions/setup-go from 5.0.1 to 5.0.2
• e90c01c Bump actions/setup-go from 5.0.2 to 5.1.0
• b965479 Bump actions/setup-go from 5.1.0 to 5.2.0
• 89af793 Bump actions/setup-go from 5.2.0 to 5.3.0 (leaktk#86)
• b9f981e Bump github.com/adrg/xdg from 0.4.0 to 0.5.0
• 8d76fea Bump github.com/adrg/xdg from 0.5.0 to 0.5.1
• 4186153 Bump github.com/adrg/xdg from 0.5.0 to 0.5.1 (leaktk#64)
• 3397de2 Bump github.com/adrg/xdg from 0.5.1 to 0.5.3
• aa2393c Bump github.com/containers/image/v5 from 5.32.2 to 5.33.1 (leaktk#81)
• 6bac7d4 Bump github.com/klauspost/compress from 1.17.10 to 1.17.11 (leaktk#60)
• 60481cc Bump github.com/stretchr/testify from 1.9.0 to 1.10.0
• 59dbf9a Bump golangci/golangci-lint-action from 6.0.1 to 6.1.0
• d285a80 Bump golangci/golangci-lint-action from 6.1.0 to 6.1.1 (leaktk#56)
• 7599493 Bump golangci/golangci-lint-action from 6.1.1 to 6.2.0
• d2fb5e4 Bump min go version 1.20 -> 1.21
• 97b9394 Bump securego/gosec
• 52d5eaa Bump securego/gosec
• cf19e18 Bump securego/gosec
• 30fab5d Bump securego/gosec
• e75f620 Bump securego/gosec
• 67d1daa Bump securego/gosec
• e63f648 Bump securego/gosec
• 0e51b28 Bump securego/gosec (leaktk#35)
• 9889a6c Bump securego/gosec (leaktk#42)
• 6b49620 Bump securego/gosec (leaktk#48)
• 2759f6f Bump securego/gosec from 2.21.4 to 2.22.0
• 55bf2a7 Bumped gitleaks to 8.20.1 (leaktk#58)
• 719c43b Bundle major errors into Response (leaktk#37)
• 250347e Calc & return sha256 hash of patterns on update (leaktk#46)
• ffc4407 Catch more types of secrets being leaked
• cccfcf1 Change listner to listener
• d63fef0 Change workdir default to ${XDG_CACHE_HOME}/leaktk
• 72ffa22 Check branch before cloning
• da412e9 Check default locations if no --config
• 83b5d9e Check folder exists before trying to delete
• c7fc969 Check tags
• 5146fda Clean up main and define custome Error type
• 3bb7d29 Clean up some error handling in the patterns mod
• 6e36151 Clippy fixes, low laying items.
• f87ca95 Create README.md
• 513befd Create SECURITY.md
• 9b94b47 Create dependabot.yml
• a8ad427 Create testing.yml
• bac342b Define default scanner workdir
• f8cfdbe Define scan format and map gitleaks results
• 912cbe9 Doc fields and add to-do's
• 21f34d0 Don't use extra cfg variable
• a8bd2a5 Dump the resp as json
• 88d38a9 Extend timeout for github actions
• b855484 Fetch urls glob (leaktk#66)
• 17027f9 Finalize the request/response format
• 7d721c8 Finish off the last few clippy warnings
• aac8feb Fix make test after adding gosec
• e66791b Fix notes output for JSONData
• 9680a47 Fix a typo in the readme
• 0781a8f Fix bug with loading the .gitleaks.toml
• 7e255dc Fix docs and a few bugs
• 9ee485b Fix gosec complaints
• c10b63b Fix hanging command
• aa8cca8 Fix intermitent test (leaktk#40)
• 296a2d9 Fix lint issues and fix JSONData path
• 3415931 Fix panic on invalid remote gitleaks.toml (leaktk#34)
• 88f89ce Fix relPath bug and update README
• b1f92fd Fix some config issues with the scanner
• bff1bfd Fix typo in README.md (leaktk#61)
• 7c80908 Fix workspace bugs
• 0abbf2d Fixed gitlog failing on missing commits & spelling (leaktk#49)
• 8a20c21 Fixed stat error test
• a149451 Fixes a bug in the gitleaks config 'extend'
• 6a3a61e Fixing linting issues
• 7ee0257 Fixing tests cross platform
• 241ad12 Format the common bits of the reqs section
• 9d979da Gather and order TODO list in terms of what to tackle
• 4e3946e Get basic cloning and cleanup working
• 48f59b7 Handle overscan for depth based scans
• e3c8d3e Have a sucessful scan
• 0d12869 Have the scanner attempt some basic scanning
• c0e678b Have the scanner respect modified time of the patterns
• df02d29 Ignore local env pattern server URL in tests
• 8634bb6 Implement FromStr trait.
• 976d04b Implement more scanner flags
• 3273615 Implemented defaults where new() with no params
• 78531b6 Improve logging
• 23d9326 Improve test coverage
• ea09d24 Include a CONTRIBUTING.md
• 7820747 Include and run goimports with make format
• 3d15b40 Include context field (leaktk#67)
• 03ceb8c Initial commit
• b7df5d8 Inline a helper function that's only used once
• 98a8e26 Install shouldn't call build
• 84fab3d Leverage custom errors
• 325c439 Line ending in Cargo.toml
• a064b9d Listen on stdin & load config from arg
• 065b3d6 Load the config
• a05ab05 Log gitleaks command being run
• f9153b8 Log stages and associate request to resource
• fc63964 Log, dont fail, when a URL fetch fails in JSONData (leaktk#50)
• fa4ae50 Login docker
• c8b5e41 Made gitleaks scan work on windows
• df35487 Make --config optional and provide defaults
• 75de246 Make RemoteRefExists a method on the Git resource
• 47a5086 Make listner return requests
• e683719 Make stylistic tweak and remove TODO item from README
• 6df5582 Make the Notes field more structured
• cf52b5d Make the request more generic
• 4b1c698 Mark config as done on the list
• 0faef99 Matching Extend in gitleaks config
• 319b4a4 Merge branch 'go-rewrite' of github.com:leaktk/scanner into go-rewrite
• bf61ba6 Merge branch 'main' into cross-platform-config
• 9824540 Merge branch 'main' of github.com:leaktk/scanner
• 9526e91 Merge pull request #1 from leaktk/config-format
• 9e4d740 Merge pull request leaktk#10 from leaktk/fix-conditional-use-Path
• 308b01a Merge pull request leaktk#11 from leaktk/cross-platform-config
• 886b391 Merge pull request leaktk#12 from leaktk/clippy-fixes
• 03c0d4d Merge pull request leaktk#13 from leaktk/auth-header-support
• 344cc58 Merge pull request leaktk#15 from leaktk/cli-args
• c0e60d2 Merge pull request leaktk#19 from leaktk/files-scan
• 76951a5 Merge pull request #2 from thewizzy/main
• 82b51e6 Merge pull request leaktk#20 from leaktk/url
• 62f5f70 Merge pull request leaktk#21 from leaktk/fix_tests_crossplatform
• 04ac2e1 Merge pull request leaktk#22 from leaktk/fix_linting
• 18befcb Merge pull request leaktk#23 from leaktk/dependabot/github_actions/actions/setup-go-5.0.2
• a03c122 Merge pull request leaktk#24 from leaktk/dependabot/go_modules/github.com/adrg/xdg-0.5.0
• eb7b0be Merge pull request leaktk#25 from leaktk/dependabot/github_actions/securego/gosec-4487a0c5a233e90ed46450fee36bad20cf9dcebe
• 99ae851 Merge pull request leaktk#26 from leaktk/check-remote
• 9dbd90b Merge pull request leaktk#27 from leaktk/dependabot/github_actions/securego/gosec-08b94f9392935d370dfa208af1c526477865cdf6
• 6a5d3ba Merge pull request leaktk#29 from leaktk/dependabot/github_actions/golangci/golangci-lint-action-6.1.0
• f6eafd6 Merge pull request leaktk#3 from leaktk/define-format
• 9367e1f Merge pull request leaktk#30 from leaktk/dependabot/github_actions/securego/gosec-55a47f37740ea50048d4396051e2a60c794bec1d
• be1a361 Merge pull request leaktk#31 from leaktk/dependabot/github_actions/securego/gosec-56f943b802579b69d96f0999a7943c588e600ae7
• 8f009c9 Merge pull request leaktk#32 from leaktk/dependabot/github_actions/securego/gosec-18135b439cbafc52ac712528099193a0d6b18a33
• 49ec841 Merge pull request leaktk#33 from leaktk/fix-lint-error
• 7a6f6ce Merge pull request leaktk#39 from leaktk/dependabot/github_actions/securego/gosec-11d69032b0856c96afd4c493967ab7a30e20ff5e
• 8317fb7 Merge pull request leaktk#4 from leaktk/local-scans
• a0d27f0 Merge pull request leaktk#41 from leaktk/dependabot/github_actions/securego/gosec-5f3194b581979e508b0ba1ee22f1f1f85a314e16
• 6141391 Merge pull request leaktk#44 from leaktk/fetch-urls
• 8e78d6a Merge pull request leaktk#5 from thewizzy/compile-windows
• ba73c96 Merge pull request leaktk#52 from leaktk/add-goimports
• 458267f Merge pull request leaktk#53 from leaktk/race-flag
• 76a3ee4 Merge pull request leaktk#54 from leaktk/dependabot/github_actions/actions/checkout-4.2.0
• bcdc7b9 Merge pull request leaktk#55 from leaktk/priority-queue
• 71c4795 Merge pull request leaktk#6 from thewizzy/config-locations-2
• ba70ff0 Merge pull request leaktk#62 from leaktk/bulkscan-fixes
• 955be4c Merge pull request leaktk#63 from leaktk/bulkscan-fixes
• 9132fee Merge pull request leaktk#68 from leaktk/dependabot/go_modules/github.com/adrg/xdg-0.5.1
• f8b647e Merge pull request leaktk#69 from leaktk/dependabot/github_actions/actions/checkout-4.2.2
• 22b8bd6 Merge pull request leaktk#7 from thewizzy/workdir-default
• 66702e8 Merge pull request leaktk#70 from leaktk/dependabot/github_actions/actions/setup-go-5.1.0
• 37a28a5 Merge pull request leaktk#71 from leaktk/fix-spelling
• 3a73761 Merge pull request leaktk#72 from leaktk/dependabot/go_modules/github.com/adrg/xdg-0.5.3
• 2d35b4e Merge pull request leaktk#73 from leaktk/debug
• a78c90a Merge pull request leaktk#77 from leaktk/dependabot/go_modules/github.com/stretchr/testify-1.10.0
• 8565f1d Merge pull request leaktk#79 from leaktk/dependabot/github_actions/actions/setup-go-5.2.0
• a201766 Merge pull request leaktk#8 from leaktk/error-handling
• 2435280 Merge pull request leaktk#80 from leaktk/dependabot/github_actions/securego/gosec-2.22.0
• 88c5471 Merge pull request leaktk#82 from leaktk/dependabot/github_actions/golangci/golangci-lint-action-6.2.0
• 3a2112e Merge pull request leaktk#88 from leaktk/logging-changes
• cc585df Merge pull request leaktk#9 from leaktk/repos-gitleaks-tomls
• fd5d0ad Misc tweaks to the clone and logging based on testing (leaktk#83)
• bbbc67b More clippy fixes.
• af3b5c5 Move gitleaks download to config objects
• 66309bb Move is_local check up in clone fn
• ca27908 Move things to an examples folder
• f3e9581 Now using workspaces. Using results folder.
• 7e13317 Only return request_id, not the whole request. (leaktk#51)
• 0469b10 PR leaktk#8 changed where Path was use, removed conditional
• d811aee Pass in the config to the scanner
• 657b165 Pre merge cleanup
• e5e93b7 Progress on parsing the existing config
• e9eb680 Provide a consistant format string for a logger statment
• 6bea5d6 Quieten down pattern hash update logs (leaktk#47)
• 003cbd4 Re-enable test prior to building releases
• 2a3839f Rebase on gitleaks 8
• 76453b2 Refactor a bit
• 50db221 Refer to GitLeaks issue referencing base64
• e826169 Remove max request size
• 252a925 Remove scan dir when finished and hide clone deets
• 8b5440d Remove unnecessary logging statement
• 3f75c4e Remove unused testdata
• 3ac58cd Removed errant whitespace
• e5cb68c Rename files
• 46dd3a5 Rename some error types
• 6f49e77 Replace GitLeaks -> Gitleaks (fix case)
• 3ed64a5 Respect the logger config
• 78520fe Return response.id as a uuid
• fc03103 Revert "Update testing.yml"
• 73784ec Roll back xdg update (leaktk#65)
• 7882a2c Run cargo fmt
• 39e6544 Run cargo fmt
• 3810f9a Run cargo fmt
• c93c940 Run cargo format
• 976068e Run codespell
• d6bde21 Save patterns
• 226eac1 Scan Containers (leaktk#38)
• f74b779 Set go version back to 1.21
• c0b16ec Set the right base_url in the example config
• e70585e Set version to 0.0.0
• 46110ee Show the diference between a remote and local scan
• d9e68d3 Sign containers
• 009844d Skip clone step when clone path already set
• c31c91b Sort and touch up things for MR
• 612c671 Specify the linters that we want to use
• cac8a9c Start cloned .gitleaks.toml support
• 6902695 Start cloning repos
• 8af625b Start defining the config format
• 602a998 Start go rewrite
• ef922d1 Start implementing pattern fetching
• 22d7791 Start parsing cli args
• 1440a0b Start stubbing out scanner class
• 396e9f4 Start stubbing out some basic logging
• f931cc2 Start stubbing out the CLI args and proto structs
• 99c9c3b Start work on custom splitter
• 655574e Start work on getting it where it can clone and scan a repo
• b6ec4e1 Start work on implementing the gitleaks backend
• 07f162c Start work on supporting JSON
• 2e06676 Stub out gitleaks 8 scanning
• 0f26f61 Stub out more of the config and some code to test it
• eed910b Stub out project structure
• faf259e Support URLs
• cc0606f Support allowlists in a repo's .gitleaks.toml
• 3e2d0f9 Support configs that only have an allowlist
• 378b687 Support fetching URLs in JSONData scans
• 87305eb Support gitleaks max decode depth (leaktk#76)
• 31c868e Support max scan depth
• 20d3477 Support more git options
• 15c1de3 Support options for a local scan
• 07276dd Support uncommitted and staged scans
• 7de0463 Testing goreleaser
• 799fbd4 Tidy up README and Cargo.toml
• 24cb898 Turn Request into a struct instead of an enum
• e87b6c4 Tweak README wording
• 2cd5ef5 Tweak chunk size
• 081bdd6 Update README
• b4ac80e Update README
• 3ddd179 Update README
• 083737a Update README to define the local scan format
• d5181c3 Update README.md
• 73ddc73 Update README.md to-do's
• d2e56cc Update TODOs
• 0aeef6e Update deps
• 72ac02d Update help text
• 25e482e Update how ID is calculated
• a0cd1f8 Update pkg/logger/logger.go
• eac8731 Update pkg/resource/git.go
• 6bb8b57 Update readme and refactor config
• e2e9b99 Update resource logging in responses (leaktk#59)
• 4d852c1 Update testing.yml
• bd4d94f Update testing.yml
• e19e37c Update testing.yml
• 79db2aa Update testing.yml
• 0b0625f Update testing.yml
• 290c3a6 Update the TODO section
• c1fb668 Update the config example
• 58fcf43 Update the config format
• 834254c Update the example config.toml
• 0d65d57 Updated with suggestions from PR.
• d3613e7 Use a flexible priority queue
• 1ff179c Use a reader
• 07d5943 Use default config for tests where possible
• bb60fd0 Use filepath.Join for JSON tests
• d15c7b5 Use xdg dir package
• 9cf54a7 Walk files similar to how gitleaks does
• 6f5df49 Wire up listen and run commands
• 3ab3931 With dir-rs instead of directories-rs
• d0ba74e Write a small parser for handling cli args
• fd98a03 add debugging log statements
• a0fc5c2 cargo fmt
• 2a08443 logging -> Logger
• 4482e9f logs should use the requesters id (leaktk#36)
• af1c0c9 major minor

---

Released by GoReleaser.