Releases: awslabs/ferret-scan
Release list
v1.10.0
🐍 Python Package Installation
pip install ferret-scanQuick Start:
ferret-scan --version
ferret-scan --helpRequirements: Python 3.7 or higher
Note: The PyPI package will be available shortly after this release is published.
What's Changed
- feat(cloudresources): cloud resource identifier validator (hardened) by @sectoramen in #92
- fix(dos): eliminate O(n^2) blowup across validators + suppression on adversarial input by @sectoramen in #93
- fix(ci): prevent script injection in GitHub Actions workflows by @sectoramen in #94
Full Changelog: v1.9.0...v1.10.0
v1.9.0
🐍 Python Package Installation
pip install ferret-scanQuick Start:
ferret-scan --version
ferret-scan --helpRequirements: Python 3.7 or higher
Note: The PyPI package will be available shortly after this release is published.
What's Changed
- fix(redactors): stop false-success redaction and PII leak in JSON/YAM… by @sectoramen in #84
- feat(explain): offline finding-explainability (--explain) + passport MRZ fix by @sectoramen in #85
- fix(formatters): stop --verbose re-leaking hidden secrets via context fields by @sectoramen in #87
- fix(redaction): deny-by-default across metadata, suppressed findings, SARIF/CSV/gitlab-sast, and web by @sectoramen in #88
- fix(show-match): honor --show-match in 3 reveal paths it silently ignored by @sectoramen in #89
- docs(config): streamline example config to 5 profiles by @rustic in #90
- fix(validators): 46 detection-quality fixes across 10 validators (TP recovery + FP reduction) by @sectoramen in #86
- fix(build): correct ldflags symbol path so version is injected at build time by @rustic in #91
Full Changelog: v1.8.4...v1.9.0
v1.8.4
🐍 Python Package Installation
pip install ferret-scanQuick Start:
ferret-scan --version
ferret-scan --helpRequirements: Python 3.7 or higher
Note: The PyPI package will be available shortly after this release is published.
What's Changed
- chore(ci)(deps): bump the actions-minor-and-patch group across 1 directory with 5 updates by @dependabot[bot] in #75
- feat(redact): export ValidCheckNames so callers can fail-closed on ba… by @sectoramen in #76
- fix(go): bump toolchain to 1.26.4 across all build paths to fix 3 stdlib CVEs by @sectoramen in #77
- fix(ci): stop publishing ferret-scan PII findings to the Security tab by @sectoramen in #78
- chore(deps)(deps): bump docker/library/golang from
f23e8b2to3ad5730by @dependabot[bot] in #79 - chore(deps)(deps): bump the go-minor-and-patch group with 2 updates by @dependabot[bot] in #81
- chore(ci)(deps): bump the actions-minor-and-patch group across 1 directory with 3 updates by @dependabot[bot] in #83
Full Changelog: v1.8.3...v1.8.4
v1.8.3
🐍 Python Package Installation
pip install ferret-scanQuick Start:
ferret-scan --version
ferret-scan --helpRequirements: Python 3.7 or higher
Note: The PyPI package will be available shortly after this release is published.
What's Changed
- fix(ci): authenticate to GHCR before grype scan in security-scan job by @sectoramen in #73
Full Changelog: v1.8.2...v1.8.3
v1.8.2
🐍 Python Package Installation
pip install ferret-scanQuick Start:
ferret-scan --version
ferret-scan --helpRequirements: Python 3.7 or higher
Note: The PyPI package will be available shortly after this release is published.
What's Changed
- chore(ci): SHA-pin all GitHub Actions to immutable commits by @sectoramen in #64
- chore(ci): bump 9 actions to current major versions by @sectoramen in #65
- chore(ci): add dependabot config + workflow conventions doc by @sectoramen in #66
- chore(deps): refresh Go module dependencies by @sectoramen in #67
- docs(threat-model): add TB-8 supply chain trust boundary (CI/CD) by @sectoramen in #68
- chore(ci): fix .gitlab-ci.yml parse error and add release-tag approval gate by @sectoramen in #69
- chore(docker): pin builder image to digest + document GOPROXY=direct by @sectoramen in #70
- chore(ci)(deps): bump the actions-minor-and-patch group with 2 updates by @dependabot[bot] in #72
Full Changelog: v1.8.1...v1.8.2
v1.8.1
🐍 Python Package Installation
pip install ferret-scanQuick Start:
ferret-scan --version
ferret-scan --helpRequirements: Python 3.7 or higher
Note: The PyPI package will be available shortly after this release is published.
v1.8.0
🐍 Python Package Installation
pip install ferret-scanQuick Start:
ferret-scan --version
ferret-scan --helpRequirements: Python 3.7 or higher
Note: The PyPI package will be available shortly after this release is published.
v1.7.1
🐍 Python Package Installation
pip install ferret-scanQuick Start:
ferret-scan --version
ferret-scan --helpRequirements: Python 3.7 or higher
Note: The PyPI package will be available shortly after this release is published.
v1.7.0
🐍 Python Package Installation
pip install ferret-scanQuick Start:
ferret-scan --version
ferret-scan --helpRequirements: Python 3.7 or higher
Note: The PyPI package will be available shortly after this release is published.
v1.6.1
🐍 Python Package Installation
pip install ferret-scanQuick Start:
ferret-scan --version
ferret-scan --helpRequirements: Python 3.7 or higher
Note: The PyPI package will be available shortly after this release is published.