v1.0.11

New release that includes the Slack hog and fixes a major issue with choctaw_hog.

v1.0.9

WARNING: v1.10 is broken, please DO NOT use it.

1.0.9

• Fixed issue in Essex Hog that resulted in invalid URLs
• Added some more items to the default allowlist based on New Relic's usage of Rusty Hog
• Made some more updates to the scripts:
  • ghe_secret_scanner will now differentiate between deleted secrets and added secrets
  • added a script to scan an entire GDrive share, will scan docs with Ankamali hog and binaries with duroc_hog.
• Fixed deprecated function warning with simple_logger
• Added some clippy fixes

v1.0.8

• reworked allow lists in a few ways:
  • now compiles the values into regular expressions rather than using string compare
  • includes a default allowlist when none is specified
  • if the pattern name <GLOBAL> is used it will be checked against all patterns
  • moved the allowlist code into lib.rs so that all hogs will use it by default
  • included a new format for allowlists that include checks for paths as well

v1.0.7

New features include DockerHub builds, entropy detection and filtering across all hogs, better default rules, and allow-lists.

v1.0.6

Added essex_hog and starting work on v1.0.7 which will address a few current issues.

v1.0.5

Multiple changes from @ccojocar , as well as a fix in the old-entropy code.

Biggest changes:

• Regex JSON can now support a data-structure for each reason, allowing for entropy thresholds per-rule. These act as a filter on findings and are separate from the --entropy flag.
• Choctaw_hog can now support a -w flag to supply a JSON with a list of whitelisted strings for each reason. This helps with known false-positives such as AKIAIOSFODNN7EXAMPLE
• A dockerfile is included and can be used to build Rusty Hog within a container.

v1.0.4

Added Gottingen hog, a JIRA scanner, as well as updated Python scripts. Also fixed a bug where custom regex files were not being used (thanks @kevinfealey !)

v1.0.3

Added duroc_hog , a file system scanner that can also support .zip, .tar, and .tar.gz, and .tgz.

v1.0.2

Added --recent_days and made some quality of life improvements to the scripts.

v1.0.1

Changelog:

• Updated http library to 0.1.21 to avoid vulnerabilities in 0.1.19