https://cybertoolchain.io/tools/bearer New releases and features in Bearer, tracked by The Cyber Toolchain. en Mon, 18 May 2026 10:30:28 GMT https://github.com/Bearer/bearer/releases/tag/v2.0.2 https://github.com/Bearer/bearer/releases/tag/v2.0.2 Mon, 18 May 2026 10:30:28 GMT Bearer v2.0.2 adds an option to use field name support in scans. • Adds option to enable field name support for detections. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v2.0.1 https://github.com/Bearer/bearer/releases/tag/v2.0.1 Wed, 25 Feb 2026 12:55:58 GMT Bearer v2.0.1 adds a VisitNode function to the rule builder API. • Adds `VisitNode` function to the rule builder, enabling custom node-level traversal logic in rule definitions. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v2.0.0 https://github.com/Bearer/bearer/releases/tag/v2.0.0 Thu, 29 Jan 2026 09:25:23 GMT Bearer v2.0.0 upgrades to go-tree-sitter with improved language grammar support, Python dataflow for default parameters, and language info in dataflow reports. • Adds dataflow tracking for Python default parameter values, improving data-flow analysis accuracy in Python codebases. • Adds language information to the dataflow report output, making it easier to identify which languages are involved in detected flows. • Updates engine internals to go-tree-sitter with refreshed language grammars, enabling more file types to be successfully parsed and analyzed. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v1.49.0 https://github.com/Bearer/bearer/releases/tag/v1.49.0 Wed, 19 Feb 2025 09:43:19 GMT Bearer v1.49.0 adds decorator support and reduces noise in scan reports. • Adds decorator support for annotating code patterns in rules. • Reduces output verbosity in reports, surfacing fewer low-signal findings. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v1.48.0 https://github.com/Bearer/bearer/releases/tag/v1.48.0 Mon, 06 Jan 2025 14:29:14 GMT Bearer v1.48.0 adds HTTP method to exports and multi-filter value output. • Adds HTTP method field to exported results, giving practitioners richer API inventory data. • Includes matched values when more than one filter is applied, making multi-filter scans more actionable. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v1.47.0 https://github.com/Bearer/bearer/releases/tag/v1.47.0 Fri, 22 Nov 2024 16:04:27 GMT Bearer v1.47.0 adds error reporting to JSON v2 security reports and string value extraction. • Adds error details to the JSON v2 security report output. • Adds string value extraction support. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v1.46.0 https://github.com/Bearer/bearer/releases/tag/v1.46.0 Wed, 31 Jul 2024 14:42:01 GMT Bearer v1.46.0 adds early pattern-variable error detection and support for multiple required detections in rules. • Errors early when a pattern variable is not found, surfacing misconfigured rule patterns faster. • Supports multiple required detections in a single rule, enabling more precise compound detection logic. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v1.43.5 https://github.com/Bearer/bearer/releases/tag/v1.43.5 Thu, 16 May 2024 13:07:57 GMT Adds `linux/arm64` binary support for Bearer CLI • Adds `linux/arm64` binary support Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v1.40.1 https://github.com/Bearer/bearer/releases/tag/v1.40.1 Thu, 29 Feb 2024 15:08:21 GMT Bearer v1.40.1 adds support for unanchored JavaScript method definitions and anonymous type checking. • Adds detection coverage for unanchored `method_definition` in JavaScript source code • Adds detection coverage for anonymous types in JavaScript Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v1.38.0 https://github.com/Bearer/bearer/releases/tag/v1.38.0 Mon, 12 Feb 2024 17:38:11 GMT Bearer v1.38.0 adds support for const initialization and invocation in Go SAST analysis. • feat(golang): handle `method_declaration` the same as `function_declaration` for rule matching • `feat`: support `const` init and `const` invoke in Go data flow analysis Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v1.37.0 https://github.com/Bearer/bearer/releases/tag/v1.37.0 Mon, 29 Jan 2024 15:01:57 GMT Adds unanchored class declaration support for source code analysis. • Adds `unanchored class declaration` support to improve coverage of source code patterns. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v1.35.0 https://github.com/Bearer/bearer/releases/tag/v1.35.0 Tue, 16 Jan 2024 12:10:15 GMT Bearer v1.35.0 adds new scan context for GitLab and fixes Azure DevOps URL handling. • feat: add more scan context for gitlab (#1464) Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v1.34.0 https://github.com/Bearer/bearer/releases/tag/v1.34.0 Tue, 09 Jan 2024 15:01:25 GMT Bearer v1.34.0 adds simplified GitLab diff scan configuration • Adds simplified configuration for GitLab diff scans via the `gitlab` feature. • Removes hardcoded `application_identity` value from the CLI binary. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v1.33.0 https://github.com/Bearer/bearer/releases/tag/v1.33.0 Tue, 12 Dec 2023 16:50:47 GMT Bearer v1.33.0 adds `gitlab_pipeline_id` support for enhanced CI/CD traceability. • Adds `--gitlab-pipeline-id` flag to pass the GitLab pipeline identifier into scans Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v1.31.0 https://github.com/Bearer/bearer/releases/tag/v1.31.0 Wed, 22 Nov 2023 11:35:35 GMT Adds `jsonv2` output format for security reports via the CLI • Adds `--output-format=jsonv2` flag to export security reports in the new JSON v2 schema Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v1.30.0 https://github.com/Bearer/bearer/releases/tag/v1.30.0 Fri, 10 Nov 2023 10:24:26 GMT Bearer v1.30.0 introduces a visual discovery process log to the CLI output. • Shows the `discovery` process steps in the terminal during scan execution Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v1.29.0 https://github.com/Bearer/bearer/releases/tag/v1.29.0 Thu, 02 Nov 2023 12:55:01 GMT Bearer v1.29.0 enhances Golang analysis and adds GitLab environment variable fallback support • `feat: enhance golang support` with improved analysis capabilities. • `feat: use gitlab env vars as fallback` to detect CI/CD context when other methods fail. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v1.28.0 https://github.com/Bearer/bearer/releases/tag/v1.28.0 Wed, 25 Oct 2023 11:10:11 GMT Bearer v1.28.0 adds a --fail-on-severity flag for CI enforcement, PHP foreach variable scanning, and CLI completion. • Adds the `--fail-on-severity` flag to fail builds based on finding severity levels • Adds shell completion script generation for supported shells via the `completion` command • Enables scan of variables inside PHP `foreach` loops in the data flow analysis Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v1.27.1 https://github.com/Bearer/bearer/releases/tag/v1.27.1 Thu, 19 Oct 2023 14:07:27 GMT Bearer v1.27.1 adds Beta support for PHP and Alpha support for Python and Go. • Adds Beta support for the PHP language with 50 detection rules • Adds Alpha support for the Python language with 5 detection rules • Adds Alpha support for the Go language with 5 detection rules Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v1.27.0 https://github.com/Bearer/bearer/releases/tag/v1.27.0 Tue, 17 Oct 2023 09:01:48 GMT Bearer v1.27.0 adds beta Golang and initial Python support, plus `--entropy-greater-than` filter • Adds beta scanning for the Golang language via the existing scan command • Adds initial (beta) scanning support for the Python language • Adds `--entropy-greater-than <value>` flag to filter findings by string entropy Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v1.26.0 https://github.com/Bearer/bearer/releases/tag/v1.26.0 Tue, 10 Oct 2023 12:06:58 GMT Adds `--bearer-cloud-diff` flag to Bearer CLI for sending diffscan results directly to Bearer Cloud • Supports sending diffscans to Bearer Cloud via the new `--bearer-cloud-diff` CLI flag Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v1.25.0 https://github.com/Bearer/bearer/releases/tag/v1.25.0 Tue, 03 Oct 2023 15:50:14 GMT Bearer v1.25.0 adds a `--disable-progress-bar` CLI flag and beta PHP bindings support. • Adds `--disable-progress-bar` flag to silence progress output for cleaner CI logs • Adds beta support for scanning PHP applications via the new PHP bindings Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v1.24.0 https://github.com/Bearer/bearer/releases/tag/v1.24.0 Fri, 22 Sep 2023 08:57:42 GMT Adds improved JavaScript expression support and fixes rule disabling behavior. • Improves `as_expression` support for JavaScript analysis. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v1.23.0 https://github.com/Bearer/bearer/releases/tag/v1.23.0 Mon, 18 Sep 2023 15:51:21 GMT v1.23.0 adds `--general.log-level`/`--general.debug` flags and syncs ignored findings to Bearer Cloud. • `Bearer no longer depends on the GitHub API for version checks or rule downloading`, resolving rate limiting issues. • Adds `--general.log-level` and `--general.debug` flags to the `bearer scan` command to control log verbosity. • Added support for uploading ignored findings to Bearer Cloud, enabling centralized management. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v1.22.0 https://github.com/Bearer/bearer/releases/tag/v1.22.0 Mon, 04 Sep 2023 15:11:04 GMT Bearer v1.22.0 adds `false_positive` status to `.bearer/ignore` and severity computation details • feat: add false positive status to bearer ignores (#1233) • feat: add severity computation details (#1195) Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v1.21.0 https://github.com/Bearer/bearer/releases/tag/v1.21.0 Tue, 29 Aug 2023 14:01:55 GMT Adds `bearer ignore` command family (add, remove, show) and CSV report format output • `bearer ignore add` command to suppress specific findings • `bearer ignore remove` command to unsuppress previously ignored findings • `bearer ignore show` command to display current ignored findings, including `--all` flag for comprehensive listing • `ignore migrate` subcommand to read configuration from config file during migration • `--path` flag for the ignore command to specify a custom ignore file location • `--format csv` flag to export report results in CSV format Breaking changes: • Exit code is now correctly set for all report formats; use `--exit-code=0` to override if previous incorrect behavior was relied upon Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v1.18.0 https://github.com/Bearer/bearer/releases/tag/v1.18.0 Wed, 02 Aug 2023 14:10:37 GMT Bearer v1.18.0 adds base branch diff scanning, `--ignore-failure` flag, and new report metadata. • feat: base branch diff (#1158) enables comparing findings against a base branch. • feat: add flag to ignore report failures (#1145) adds a CLI option to prevent non-zero exit codes on empty or filtered reports. • feat: add sign-up link to report output (#1159) includes a registration URL in generated reports. • feat: show rule count per language (#1156) adds a summary view of applicable rules for each detected language. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v1.17.0 https://github.com/Bearer/bearer/releases/tag/v1.17.0 Fri, 28 Jul 2023 13:57:45 GMT Bearer v1.17 adds scan profiling, fingerprint info in output, and warnings to HTML summary • Adds `--profiling` flag to enable scan profiling for performance analysis • Includes fingerprints information in CLI output via the new `fingerprints` field • Displays warnings within the generated HTML summary report Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v1.16.0 https://github.com/Bearer/bearer/releases/tag/v1.16.0 Tue, 04 Jul 2023 14:08:08 GMT Adds more helpful rule validation for Bearer configuration files • `bearer` now validates custom rule configurations at startup, providing clearer error messages when rule syntax or references are incorrect. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v1.15.0 https://github.com/Bearer/bearer/releases/tag/v1.15.0 Thu, 29 Jun 2023 11:16:51 GMT Adds HTML output format to the CLI scan command • `--format html` adds an HTML report output format for Bearer scans Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v1.14.0 https://github.com/Bearer/bearer/releases/tag/v1.14.0 Thu, 22 Jun 2023 13:52:10 GMT Bearer v1.14.0 adds dependency checking, rule filters, and improves Java/JS detection patterns • Adds `dependency-check` feature to scan for insecure or outdated dependencies during the scan process • Supports using filters when referencing rules to narrow down scan scope (`--rule-filters`) • Adds `string assign-equals support` for source code pattern matching, enabling detection of assignments using `=` syntax • Improves Java support with better catch block handling and resource block support for more accurate SAST analysis Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v1.13.0 https://github.com/Bearer/bearer/releases/tag/v1.13.0 Thu, 15 Jun 2023 09:27:55 GMT Adds native multi-core parallel execution and a JS dangerous HTML detection rule in v1.13.0. • `dad1b2db` leverages all CPU cores for scanning to improve performance. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v1.12.0 https://github.com/Bearer/bearer/releases/tag/v1.12.0 Mon, 12 Jun 2023 14:05:00 GMT Adds --profiling flag for performance analysis and expands Java string concatenation detection. • Expands Java TaintedFlow detector to include string concatenation patterns Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v1.10.0 https://github.com/Bearer/bearer/releases/tag/v1.10.0 Fri, 02 Jun 2023 08:38:30 GMT Adds `--no-color`, `--exclude-fingerprints` flags and moves the 'skip' rule to documentation in .bearer/config.yaml • Adds `--no-color` flag to disable colorized output in CLI reports • Adds `--exclude-fingerprints` flag to allow users to exclude specific findings by their fingerprint identifier • Moves the `skip` rule configuration from active defaults to documentation, implying it is now a documented configuration option for controlling scan behavior • Improves JavaScript import detection accuracy for loaded libraries Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v1.9.0 https://github.com/Bearer/bearer/releases/tag/v1.9.0 Tue, 30 May 2023 08:43:49 GMT Bearer v1.9.0 adds `--output sarif_gitlab` for GitLab SAST exports and a `--scope` filter flag. • Adds the new output format `sarif_gitlab` via the `--output` flag to export findings in a format suitable for GitLab SAST • Adds the `--scope` CLI flag (subcommand argument) to filter results by rule category (e.g., `sinks`, `sources`) Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v1.8.0 https://github.com/Bearer/bearer/releases/tag/v1.8.0 Tue, 23 May 2023 12:36:06 GMT Adds official support for shared rules via the `shared_rules` CLI flag and new CLI arguments for rule selection • Official support for shared rules in configuration • Improves error feedback during Bearer Cloud API uploads Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v1.6.1 https://github.com/Bearer/bearer/releases/tag/v1.6.1 Tue, 09 May 2023 16:21:42 GMT Adds filename filtering to rules via new `filenames` field in `.bearer/config.yaml • Adds `filenames` field to `.bearer/config.yaml` rules to allow matching on specific file paths (e.g., `**/Gemfile`) rather than just language or file type Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v1.4.0 https://github.com/Bearer/bearer/releases/tag/v1.4.0 Mon, 24 Apr 2023 14:28:12 GMT Bearer v1.4.0 adds KPI version metadata to client meta and enhances OpenAI classification in dependencies. • Adds `bearer` and `rules_version` fields to the `client_meta` payload for KPI tracking • Enhances OpenAI-powered classification logic within dependency scanning Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v0.26.0 https://github.com/Bearer/bearer/releases/tag/v0.26.0 Tue, 28 Feb 2023 15:58:14 GMT Bearer v0.26.0 adds OWASP Top 10 coverage for Ruby and JavaScript with new SAST rules. • Adds support for hardcoded string values in JavaScript detection rules (`hardcoded string support`) • Adds `exec` with user input detection rule for Ruby applications • Adds insecure disabling callback detection rule for Rails applications • Adds SQL injection rule for Express.js using Knex library • Adds dangerous `eval` detection rule for general JavaScript analysis • Enriches the existing `eval` user input rule with better detection context • Adds Rails `render` to path rule for directory traversal prevention • Adds AWS Lambda SQL injection rule (CWE-89) for JavaScript functions • Adds AWS OS command injection rule (CWE-78) for JavaScript/Node.js • Adds Express UI redress / clickjacking detection rule • Adds Express `sendFile` with request data rule for path traversal prevention Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v0.25.0 https://github.com/Bearer/bearer/releases/tag/v0.25.0 Fri, 24 Feb 2023 15:21:16 GMT Bearer v0.25.0 adds not/regex filters, OWASP Top 10 coverage boosts, and new detector rules for JS/Ruby • Adds `not` and regex filters for rule filtering • Extends OWASP Top 10 coverage on Ruby and JavaScript with new detection rules (e.g., CWE-601, CWE-548, Deserialization, SQLi, XSS, Path Traversal) • Adds detector support for Algolia, Airbrake, Bugsnag, OpenTelemetry, New Relic, Segment (JavaScript), ClickHouse, Google Analytics (Ruby), Datadog, Honeybadger, Rollbar, Elasticsearch, and BigQuery • Includes CWE IDs in summary output for newer JS rules Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v0.24.0 https://github.com/Bearer/bearer/releases/tag/v0.24.0 Mon, 13 Feb 2023 11:42:50 GMT Bearer v0.24.0 adds Javascript scanning alpha support and 'Warning' severity level for non-breaking rule violations • Adds `Javascript` alpha scanning support with initial rules including JWT validation, file generation checks, exception handling patterns, and weak encryption detection. • Introduces the `Warning` severity level for less critical rules that do not break CI/CD pipelines, allowing teams to track issues without halting deployments. • Adds Ruby logger integrations for Bugsnag, Honeybadger, Rollbar, Airbrake, Scout APM, and Open Telemetry detection rules. • Expands analytics environment support to detect Algolia, Elasticsearch, and Segment integrations within the scanned codebase. • Adds Curio Privacy Report capabilities including subject name to datatype mapping, subjects inventory, and third-party inventory reports for GDPR/CCPA/HIPAA compliance. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v0.23.0 https://github.com/Bearer/bearer/releases/tag/v0.23.0 Mon, 06 Feb 2023 12:47:45 GMT Adds 'Rule' terminology and New Relic sensitive data detection • Renames the concept of 'Policy' to 'Rule' across CLI commands and output formats. • Adds detection for sensitive data leaking in New Relic Loggers. Breaking changes: • The term 'Policy' is renamed to 'Rule' in CLI commands and output formats, which may require updates to scripts expecting the previous terminology. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v0.22.0 https://github.com/Bearer/bearer/releases/tag/v0.22.0 Fri, 13 Jan 2023 14:55:08 GMT Bearer v0.22.0 adds secret leak detection, custom detector/policy directories, and recipe exclusion patterns • Adds support for `secret leaks` in policies to detect sensitive data exposure. • Adds `dirs` configuration keys for loading custom detectors and policies from specified paths. • Enables exclusion patterns when using wildcards in recipes to fine-tune file matching. • Extends the built-in Ruby custom detector to cover `IO.open` file operations. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v0.21.0 https://github.com/Bearer/bearer/releases/tag/v0.21.0 Fri, 23 Dec 2022 11:19:12 GMT Bearer v0.21.0 adds encrypted column detection via 'encrypted_' prefix and skips Git-ignored files by default. • Adds `encrypted_` column prefix to mark SQL detections as encrypted in the analysis output • Changes behavior to skip files that are ignored by `.gitignore` during scanning Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v0.20.1 https://github.com/Bearer/bearer/releases/tag/v0.20.1 Wed, 21 Dec 2022 15:52:55 GMT Bearer v0.20.1 adds `--homebrew` install option and includes database info in policy reports • Includes database information in the placeholder output of policy reports. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v0.19.0 https://github.com/Bearer/bearer/releases/tag/v0.19.0 Thu, 15 Dec 2022 17:25:15 GMT Bearer v0.19.0 adds policy report external service counts and optimized dataflow analysis via caching • Adds `external_service_count` field to the policies report placeholder output for tracking dependency usage Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v0.17.0 https://github.com/Bearer/bearer/releases/tag/v0.17.0 Thu, 15 Dec 2022 12:38:10 GMT Bearer v0.17.0 adds weak encryption and weak password length policies • `new-policies`: Add support for `weak_encryption` detection policy to identify use of cryptographically weak algorithms. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v0.16.0 https://github.com/Bearer/bearer/releases/tag/v0.16.0 Wed, 14 Dec 2022 12:57:52 GMT Bearer v0.16.0 adds password encryption policy and improves scan progress logs • `feat(policies): add password encryption policy` • `feat: improve scan progress logs` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v0.15.0 https://github.com/Bearer/bearer/releases/tag/v0.15.0 Thu, 08 Dec 2022 23:16:55 GMT Adds rails cookie leaks and insecure FTP data transfer detection policies • Adds `rails cookie leaks` policy to detect sensitive data exposure in Rails applications • Adds policy for detecting communication of data categories over insecure FTP Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer https://github.com/Bearer/bearer/releases/tag/v0.14.0 https://github.com/Bearer/bearer/releases/tag/v0.14.0 Wed, 07 Dec 2022 10:01:30 GMT Adds Ruby policy for third-party data exposure and insecure HTTP data category communication • Adds `feat` for communicating data category via insecure HTTP detection logic Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bearer