https://cybertoolchain.io/tools/detect-secrets New releases and features in detect-secrets, tracked by The Cyber Toolchain. en Mon, 06 May 2024 00:00:00 GMT https://github.com/Yelp/detect-secrets/blob/master/CHANGELOG.md https://github.com/Yelp/detect-secrets/blob/master/CHANGELOG.md Mon, 06 May 2024 00:00:00 GMT detect-secrets 3.10 adds five new detectors (IP, GitLab, Telegram, PyPI/TestPyPI, OpenAI) and OS-agnostic baselines • Added `OS-agnostic baseline files` support for cross-platform compatibility • Added a detector for IP addresses • Added a detector for GitLab tokens • Added a detector for Telegram tokens • Added a detector for Pypi and TestPypi tokens • Added a detector for OpenAI tokens Full history on Cyber Toolchain: https://cybertoolchain.io/tools/detect-secrets https://github.com/Yelp/detect-secrets/releases/tag/v1.4.0 https://github.com/Yelp/detect-secrets/releases/tag/v1.4.0 Wed, 05 Oct 2022 17:13:10 GMT Adds Discord bot token detector and improves programmatic audit report parsing • Added a detector for Discord bot tokens (`DiscordBotToken`) to detect secrets in source code • Improved the `audit` command output format to produce a structure that is easier to parse programmatically Breaking changes: • Python 3.6 support is dropped in v1.5.0, so scripts running on Python 3.6 will fail with this tool starting from that version. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/detect-secrets https://github.com/Yelp/detect-secrets/blob/master/CHANGELOG.md https://github.com/Yelp/detect-secrets/blob/master/CHANGELOG.md Tue, 04 Oct 2022 00:00:00 GMT detect-secrets v3.6 adds Discord bot token detection and heuristic support for .NET packages.lock.json • Adds a new detector for Discord bot tokens • Adds support for .NET packages.lock.json files in the heuristic filter Full history on Cyber Toolchain: https://cybertoolchain.io/tools/detect-secrets https://github.com/Yelp/detect-secrets/releases/tag/v1.3.0 https://github.com/Yelp/detect-secrets/releases/tag/v1.3.0 Fri, 22 Jul 2022 15:22:53 GMT Adds `--json` flag to `detect-secrets-hook` and improves arrow key detection in keyword plugins • Adds `--json` flag to the `detect-secrets-hook` CLI command to return output as JSON • Improves keyword plugin to detect arrow key assignments Full history on Cyber Toolchain: https://cybertoolchain.io/tools/detect-secrets https://github.com/Yelp/detect-secrets/blob/master/CHANGELOG.md https://github.com/Yelp/detect-secrets/blob/master/CHANGELOG.md Fri, 22 Jul 2022 00:00:00 GMT detect-secrets adds JSON output support for detect-secrets-hook and improves keyword plugin detection • Adds `--json` flag to `detect-secrets-hook` to return scan results as JSON instead of plain text. • Improves the `keyword` plugin to detect secrets assigned via arrow keys. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/detect-secrets https://github.com/Yelp/detect-secrets/releases/tag/v1.2.0 https://github.com/Yelp/detect-secrets/releases/tag/v1.2.0 Wed, 16 Feb 2022 22:16:52 GMT Adds GitHub and SendGrid plugins, CI/CD actions, and more ignored extensions. • Adds `github_token` plugin for detecting GitHub tokens • Adds `sendgrid` plugin for detecting SendGrid API keys • Adds new file extensions to the ignore list Full history on Cyber Toolchain: https://cybertoolchain.io/tools/detect-secrets https://github.com/Yelp/detect-secrets/blob/master/CHANGELOG.md https://github.com/Yelp/detect-secrets/blob/master/CHANGELOG.md Wed, 16 Feb 2022 00:00:00 GMT detect-secrets adds GitHub token and SendGrid plugins for new secret detection capabilities • New `github-token` plugin added to detect secrets from the GitHub platform. • New `sendgrid` plugin added to detect secrets from the SendGrid platform. • Adds support for more ignored file extensions via the baseline configuration. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/detect-secrets