github.com/cerberauth/vulnapi

What's Changed

• Update dependencies by @emmanuelgautier in #278
• fix: disable gosec for somes not relevant lines by @emmanuelgautier in #282
• Update golang version and dependencies by @emmanuelgautier in #281
• chore(deps): update goreleaser/goreleaser-action action to v7 by @renovate[bot] in #279
• chore(deps): update docker/login-action action to v4 by @renovate[bot] in #284
• Update docs (rewrite for astro starlight) by @emmanuelgautier in #283
• ci: reuse cerberauth/ci workflows and actions by @emmanuelgautier in #286
• feat: refactor goreleaser and add packages by @emmanuelgautier in #287
• Move JWT logic in a dedicated package (JWTop) by @emmanuelgautier in #280
• Fix URL typo in jwt-weak-secret vulnerability report by @MichaelMVS in #290
• feat: use cobracurl for curl flags and http request by @emmanuelgautier in #288
• fix: use snap strict confinement by @emmanuelgautier in #291

New Contributors

• @MichaelMVS made their first contribution in #290

Full Changelog: v0.8.10...v0.9.0

What's Changed

• chore(deps): update golangci/golangci-lint-action action to v8 by @renovate[bot] in #260
• chore(deps): update actions/setup-go action to v6 by @renovate[bot] in #269
• chore(deps): update actions/stale action to v10 by @renovate[bot] in #270
• chore(deps): update actions/checkout action to v5 by @renovate[bot] in #267
• chore(deps): update golangci/golangci-lint-action action to v9 by @renovate[bot] in #273
• chore(deps): update actions/checkout action to v6 by @renovate[bot] in #274
• Check TLS before scanning and use HTTP when TLS is not available and no protocol is in URL by @emmanuelgautier in #275
• feat(openapi): ensure that scan run even without security scheme by @emmanuelgautier in #276
• feat: improve sqa by @emmanuelgautier in #277

Full Changelog: v0.8.9...v0.8.10

What's Changed

• feat: update dependencies by @emmanuelgautier in #257
• Upgrade golangci lint by @emmanuelgautier in #258

Full Changelog: v0.8.8...v0.8.9

Features

• Link scans to issues in reports (#251)

Bug Fixes

• Add missing snap interfaces (#250)

Tests

• Test more openapi fake body (#249)

Documentation

• Add docs about a new endpoint for testing purpose (#248)

Dependencies

• Upgrade Golang version (#252)
• Update dependencies (#253)

Full Changelog: v0.8.7...v0.8.8

What's Changed

• Add Healthcheck endpoints discovery scan by @emmanuelgautier in #241
• fix: nil pointer exceptions by @emmanuelgautier in #242
• fix(deps): update all non-major dependencies by @emmanuelgautier in #245
• ci: fix snapcraft and choco cli install by @emmanuelgautier in #246

Full Changelog: v0.8.6...v0.8.7

New Feature

• Discover Well-Known paths and leaked files by @emmanuelgautier in #240

What's Changed

• Make discovery faster by @emmanuelgautier in #237
• Remove OpenAPI and GraphQL discovery from cURL scan by @emmanuelgautier in #238
• Make weak JWT scan offline and faster by @emmanuelgautier in #239

Full Changelog: v0.8.5...v0.8.6

What's Changed

• Add HTTP Basic support by @emmanuelgautier in #231
• Fix: Authentication bypass false positive by @emmanuelgautier in #232
• Fix: Manage openapi wrongly parsed example params and unsupported media types by @emmanuelgautier in #235

Full Changelog: v0.8.4...v0.8.5

What's Changed

• Refactor security schemes by @emmanuelgautier in #221
• Update seclists by @emmanuelgautier in #226
• CI: Add OpenAPI and API Key automated tests by @emmanuelgautier in #227
• Add API Key authentication support by @emmanuelgautier in #228
• Limit the depth when openapi params reference itself by @emmanuelgautier in #229

Full Changelog: v0.8.3...v0.8.4

What's Changed

• Add HTTP Misconfigurations scans by @emmanuelgautier in #208
• Add HTTP Method override scan by @emmanuelgautier in #209
• Add setter and getter for default client by @emmanuelgautier in #212
• Refactor request package by @emmanuelgautier in #213
• Add stale github workflow by @emmanuelgautier in #214
• Improve Graphql introspection scan by @emmanuelgautier in #215
• Add SQA errors and more metrics by @emmanuelgautier in #218
• Update docs by @emmanuelgautier in #219
• chore: update dependencies by @emmanuelgautier in #220

Full Changelog: v0.8.2...v0.8.3

What's Changed

• Add golangci lint by @emmanuelgautier in #198
• Prepare to move to nextra 3 remote files by @emmanuelgautier in #199
• Docs: add copy buttons by @emmanuelgautier in #200
• fix(deps): update all non-major dependencies by @renovate in #188
• Refactor report by @emmanuelgautier in #184
• fix: status_code to statusCode in report output by @emmanuelgautier in #201
• Tests scans with challenges by @emmanuelgautier in #186
• Keep JWT claims in the same order by @emmanuelgautier in #195
• Scan for different None Alg by @emmanuelgautier in #203
• Add scan tabs and jwt null signature example by @emmanuelgautier in #204
• Add more curl placeholders by @emmanuelgautier in #205
• Improve CLI scan output by @emmanuelgautier in #206
• Update asciinema demo by @emmanuelgautier in #207

Full Changelog: v0.8.1...v0.8.2

Special thanks to @Maxouhell for providing valuable feedback and helping with the design of the file report.