Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

noseyparker 0.21.0 #198397

Merged
merged 2 commits into from
Nov 20, 2024
Merged

noseyparker 0.21.0 #198397

merged 2 commits into from
Nov 20, 2024

Conversation

BrewTestBot
Copy link
Member

Created by brew bump


Created with brew bump-formula-pr.

release notes
### Docker Images

A prebuilt multiplatform Docker image for this release is available for x86_64 and ARM64 architectures:

docker pull ghcr.io/praetorian-inc/noseyparker:v0.21.0

Additionally, a prebuilt Alpine-based image is also available for x86_64 and ARM64 architectures:

docker pull ghcr.io/praetorian-inc/noseyparker-alpine:v0.21.0

Changes

  • Directories that appear to be Nosey Parker datastore directories are now skipped from scanning (#224).

  • The /proc, /sys, and /dev paths (special filesystems on Linux) are now ignored by default (#225). This suppresses many innocuous errors that would previously be seen when scanning the root filesystem of a Linux system.

  • Lockfiles from a few languages (e.g., Cargo.lock, Pipfile.lock, go.sum) are now ignored by default.

  • Rules have been modified:

    • Age Recipient (X25519 public key) and ThingsBoard Access Token now have additional category metadata.
    • Credentials in ODBC Connection String detects more occurrences (#227).
    • Jenkins Token or Crumb has been refined to improve detection (#232).
  • When using the --copy-blobs option, the default output format is now parquet (when the parquet feature is enabled, which it is unless you build with --no-default-features) (#229).

Additions

  • New rules have been added:

    • Credentials in MongoDB Connection String (#232)
    • Credentials in PostgreSQL Connection URI (#227)
    • Django Secret Key (#227)
    • Jenkins Setup Admin Password
    • Jina Search Foundation API Key
    • JSON Web Token Secret (#232)
    • HTTP Basic Authentication
    • HTTP Bearer Token
    • PHPMailer Credentials (#227)
  • The rules check command now has an optional --pedantic mode that verifies some additional non-material properties.

  • The scan command now has a new --copy-blobs-format=FORMAT option that controls the format used when the --copy-blobs option is used (#229). A new parquet format is available and is the default when the parquet feature is enabled (which it is unless you build with --no-default-features).

@github-actions github-actions bot added rust Rust use is a significant feature of the PR or issue bump-formula-pr PR was created using `brew bump-formula-pr` boost Boost use is a significant feature of the PR or issue labels Nov 20, 2024
Copy link
Contributor

🤖 An automated task has requested bottles to be published to this PR.

@github-actions github-actions bot added the CI-published-bottle-commits The commits for the built bottles have been pushed to the PR branch. label Nov 20, 2024
@BrewTestBot BrewTestBot added this pull request to the merge queue Nov 20, 2024
Merged via the queue into master with commit 21b0900 Nov 20, 2024
15 checks passed
@BrewTestBot BrewTestBot deleted the bump-noseyparker-0.21.0 branch November 20, 2024 23:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
boost Boost use is a significant feature of the PR or issue bump-formula-pr PR was created using `brew bump-formula-pr` CI-published-bottle-commits The commits for the built bottles have been pushed to the PR branch. rust Rust use is a significant feature of the PR or issue
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants