gitleaks

Features

• added support for cloning repositories using github api (env var GITHUB_TOKEN)
• auditing PRs now allow whitelisting files

Features

• gitlab user and group support

Bug Fixes

• memoizing root commit
• only count commits (not commit + parent) for total commit number

Bug Fixes

• fixed a bug where gitleaks was skipping the initial commit
• commit cache now checks curr commit + parent commit hash
• removed newlines from commit message

Bug Fixes

• Re-adding default whitelists for files. Thanks @camaya

Features

• removed --all-refs. By default gitleaks now scans all branches, remote and local.
• added commit memoizer to prevent duplicate commit audits
• removed branch whitelist
• removed branch from report as a commit is an object independent of branch
• Better regexes for facebook, github, twitter (no more unbounded wildcards)

Fixes

• fixing slack token
• defaulting to single thread process
• --max-go= --> --threads=
• guarding --threads= > max threads available (you aint gettin any more performance)

Features:

• Default regex added to search: slack, telegram.
• Default whitelisting: bin, doc, jpeg, gif

Bug Fixes

• fixed bug default ssh auths

Features

• Better commit coverage. Now iterates through each commit in git log and generates a patch with each commit's parent.
• Removing the need for --private/-p option. Instead gitleaks will determine if the repo is private or not.

Features

• Whitelist repos use regex now
• Whitelist repo check before clone

Features

• Added entropy ranges in gitleaks config. Ex:

[misc]
entropy = [
  "7.5-8.0",
  "3.3-3.4",
]

Features

• Github PRs are now supported! You can audit PRs without having to clone an entire repo. Hook this into whatever CI process you have with
  docker run --rm --name=gitleaks -e GITHUB_TOKEN={your token} zricethezav/gitleaks --github-pr=https://github.com/owner/repo/pull/9000

Features

• Show program usage when no arguments are provided
• Exit program after the -h or --help options are used

Features

• removing --csv option
• --report option now requires .json or .csv in filename
• adding total time to audit in logs

Bug-fixes

• whitelist logic fix

Features

• commit depth option --depth
• commit stats output

Features

• added --entropy= option. Include shannon entropy checking when auditing. entropy scale 0-8.0.

Features

• exclude-forks option

Features

• whitelist repos
• sample config option