Skip to content

Releases: awslabs/ferret-scan

v1.10.0

Choose a tag to compare

@github-actions github-actions released this 26 Jun 20:29
75be0e6

🐍 Python Package Installation

pip install ferret-scan

Quick Start:

ferret-scan --version
ferret-scan --help

Requirements: Python 3.7 or higher


Note: The PyPI package will be available shortly after this release is published.

What's Changed

  • feat(cloudresources): cloud resource identifier validator (hardened) by @sectoramen in #92
  • fix(dos): eliminate O(n^2) blowup across validators + suppression on adversarial input by @sectoramen in #93
  • fix(ci): prevent script injection in GitHub Actions workflows by @sectoramen in #94

Full Changelog: v1.9.0...v1.10.0

v1.9.0

Choose a tag to compare

@github-actions github-actions released this 25 Jun 20:59
c8a418b

🐍 Python Package Installation

pip install ferret-scan

Quick Start:

ferret-scan --version
ferret-scan --help

Requirements: Python 3.7 or higher


Note: The PyPI package will be available shortly after this release is published.

What's Changed

  • fix(redactors): stop false-success redaction and PII leak in JSON/YAM… by @sectoramen in #84
  • feat(explain): offline finding-explainability (--explain) + passport MRZ fix by @sectoramen in #85
  • fix(formatters): stop --verbose re-leaking hidden secrets via context fields by @sectoramen in #87
  • fix(redaction): deny-by-default across metadata, suppressed findings, SARIF/CSV/gitlab-sast, and web by @sectoramen in #88
  • fix(show-match): honor --show-match in 3 reveal paths it silently ignored by @sectoramen in #89
  • docs(config): streamline example config to 5 profiles by @rustic in #90
  • fix(validators): 46 detection-quality fixes across 10 validators (TP recovery + FP reduction) by @sectoramen in #86
  • fix(build): correct ldflags symbol path so version is injected at build time by @rustic in #91

Full Changelog: v1.8.4...v1.9.0

v1.8.4

Choose a tag to compare

@github-actions github-actions released this 22 Jun 21:14
51029c6

🐍 Python Package Installation

pip install ferret-scan

Quick Start:

ferret-scan --version
ferret-scan --help

Requirements: Python 3.7 or higher


Note: The PyPI package will be available shortly after this release is published.

What's Changed

  • chore(ci)(deps): bump the actions-minor-and-patch group across 1 directory with 5 updates by @dependabot[bot] in #75
  • feat(redact): export ValidCheckNames so callers can fail-closed on ba… by @sectoramen in #76
  • fix(go): bump toolchain to 1.26.4 across all build paths to fix 3 stdlib CVEs by @sectoramen in #77
  • fix(ci): stop publishing ferret-scan PII findings to the Security tab by @sectoramen in #78
  • chore(deps)(deps): bump docker/library/golang from f23e8b2 to 3ad5730 by @dependabot[bot] in #79
  • chore(deps)(deps): bump the go-minor-and-patch group with 2 updates by @dependabot[bot] in #81
  • chore(ci)(deps): bump the actions-minor-and-patch group across 1 directory with 3 updates by @dependabot[bot] in #83

Full Changelog: v1.8.3...v1.8.4

v1.8.3

Choose a tag to compare

@github-actions github-actions released this 22 May 20:58
0c3e4f7

🐍 Python Package Installation

pip install ferret-scan

Quick Start:

ferret-scan --version
ferret-scan --help

Requirements: Python 3.7 or higher


Note: The PyPI package will be available shortly after this release is published.

What's Changed

  • fix(ci): authenticate to GHCR before grype scan in security-scan job by @sectoramen in #73

Full Changelog: v1.8.2...v1.8.3

v1.8.2

Choose a tag to compare

@github-actions github-actions released this 22 May 20:29
e9f9458

🐍 Python Package Installation

pip install ferret-scan

Quick Start:

ferret-scan --version
ferret-scan --help

Requirements: Python 3.7 or higher


Note: The PyPI package will be available shortly after this release is published.

What's Changed

  • chore(ci): SHA-pin all GitHub Actions to immutable commits by @sectoramen in #64
  • chore(ci): bump 9 actions to current major versions by @sectoramen in #65
  • chore(ci): add dependabot config + workflow conventions doc by @sectoramen in #66
  • chore(deps): refresh Go module dependencies by @sectoramen in #67
  • docs(threat-model): add TB-8 supply chain trust boundary (CI/CD) by @sectoramen in #68
  • chore(ci): fix .gitlab-ci.yml parse error and add release-tag approval gate by @sectoramen in #69
  • chore(docker): pin builder image to digest + document GOPROXY=direct by @sectoramen in #70
  • chore(ci)(deps): bump the actions-minor-and-patch group with 2 updates by @dependabot[bot] in #72

Full Changelog: v1.8.1...v1.8.2

v1.8.1

Choose a tag to compare

@github-actions github-actions released this 21 May 20:49
6c4070a

🐍 Python Package Installation

pip install ferret-scan

Quick Start:

ferret-scan --version
ferret-scan --help

Requirements: Python 3.7 or higher


Note: The PyPI package will be available shortly after this release is published.

v1.8.0

Choose a tag to compare

@github-actions github-actions released this 20 May 21:05

🐍 Python Package Installation

pip install ferret-scan

Quick Start:

ferret-scan --version
ferret-scan --help

Requirements: Python 3.7 or higher


Note: The PyPI package will be available shortly after this release is published.

v1.7.1

Choose a tag to compare

@github-actions github-actions released this 08 May 20:56

🐍 Python Package Installation

pip install ferret-scan

Quick Start:

ferret-scan --version
ferret-scan --help

Requirements: Python 3.7 or higher


Note: The PyPI package will be available shortly after this release is published.

v1.7.0

Choose a tag to compare

@github-actions github-actions released this 07 May 21:45

🐍 Python Package Installation

pip install ferret-scan

Quick Start:

ferret-scan --version
ferret-scan --help

Requirements: Python 3.7 or higher


Note: The PyPI package will be available shortly after this release is published.

v1.6.1

Choose a tag to compare

@github-actions github-actions released this 28 Apr 14:03

🐍 Python Package Installation

pip install ferret-scan

Quick Start:

ferret-scan --version
ferret-scan --help

Requirements: Python 3.7 or higher


Note: The PyPI package will be available shortly after this release is published.