Skip to content

feat: "raw" audit support + overprovisioned-secrets - #485

Merged
woodruffw merged 10 commits into
mainfrom
ww/audit-raw
Jan 26, 2025
Merged

woodruffw merged 10 commits into
mainfrom
ww/audit-raw

Conversation

@woodruffw

@woodruffw woodruffw commented Jan 23, 2025

Copy link
Copy Markdown
Member

WIP.

This will enable audits like #400 and #401.

Some open design questions:

1. How should we shoehorn this into SymbolicLocation/ConcreteLocation? In particular, how should we ensure that ignore comments are captured correctly?

Closes #401.

@woodruffw woodruffw added the enhancement New feature or request label Jan 23, 2025
@woodruffw woodruffw self-assigned this Jan 23, 2025
@woodruffw

woodruffw commented Jan 23, 2025

Copy link
Copy Markdown
Member Author

The overprovisioned-secrets audit now works, although it doesn't support comment ignores yet. That's the last blocking piece here.

NTS: We should be able to get the comments by getting the line range from line-index with LineIndex::lines.

@woodruffw woodruffw added the new-audit New audits label Jan 23, 2025
@woodruffw woodruffw changed the title feat: "raw" audit support feat: "raw" audit support + overprovisioned-secrets Jan 23, 2025
@woodruffw
woodruffw merged commit 312dce7 into main Jan 26, 2025
@woodruffw
woodruffw deleted the ww/audit-raw branch January 26, 2025 19:27
woodruffw added a commit that referenced this pull request Jan 26, 2025
woodruffw added a commit that referenced this pull request Jan 26, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request new-audit New audits

Projects

None yet

Development

Successfully merging this pull request may close these issues.

New audit: excessive secret provisioning

1 participant