github.com/synacktiv/octoscan

Full Changelog: v0.1.6...v0.1.7

What's Changed

• Fix oneliner issue by @Hug0Vincent in #31
• Add new runners by @Hug0Vincent in #32
• chore(deps): bump github.com/google/osv-scanner from 1.9.1 to 1.9.2 by @dependabot[bot] in #23
• chore(deps): bump golang.org/x/oauth2 from 0.23.0 to 0.27.0 in the go_modules group across 1 directory by @dependabot[bot] in #33

New Contributors

• @Hug0Vincent made their first contribution in #31

Full Changelog: v0.1.5...v0.1.6

Full Changelog: v0.1.3...v0.1.4

What's Changed

• feat: add new rule called 'dangerous-artefact' it's based on this research https://unit42.paloaltonetworks.com/github-repo-artifacts-leak-tokens/
• feat: move oidc-action rule to debug rule since it's not a vulnerability
• feat: update GHSA list
• feat: also include actions/github-script in --filter-run
• chore(deps): bump github.com/google/osv-scanner from 1.9.0 to 1.9.1 by @dependabot in #14

New Contributors

• @dependabot made their first contribution in #14

Full Changelog: v0.1.2...v0.1.3

What's Changed

• Add support for the sarif file format
• Add Dockerfile for the upcoming GitHub action
• Add filter-trigger to the debug-artefacts rule

Full Changelog: v0.1.1...v0.1.2

What's Changed

• Remove annoying syntax-check errors
• Add - in dangerous-chekout rules to ignore checkout on static references
• Add windows build in CI

Full Changelog: v0.1.0...v0.1.1

This is the first release of octoscan ! :)

What's Changed

• [Download] Add --include-archives option by @bboilot-ledger in #1
• Return lint issues in LintRepositoryRecurse by @bboilot-ledger in #3
• Fix typos by @szepeviktor in #5

New Contributors

• @bboilot-ledger made their first contribution in #1
• @szepeviktor made their first contribution in #5

Full Changelog: https://github.com/synacktiv/octoscan/commits/v0.1.0