Skip to content

Releases: securesauce/precli

0.3.14

20 Mar 16:04
5300841
Compare
Choose a tag to compare

What's Changed

  • Keep SARIF output as minimal as possible by @ericwb in #333
  • Create a code of conduct by @ericwb in #334
  • Create a security policy by @ericwb in #335
  • Bump softprops/action-gh-release from 1 to 2 by @dependabot in #336
  • Add more details to README by @ericwb in #337
  • Skip build for changes to README by @ericwb in #338
  • Add new rule to check for no context being passed to FTP_TLS by @ericwb in #346
  • Use guards instead of nested if conditionals by @ericwb in #347
  • Add new rule to check for no context being passed to IMAP4_SSL by @ericwb in #348
  • Reorganize the paths of the testcases and examples by @ericwb in #349
  • Add new rule to check for context=None in nntp.starttls or NNTP_SSL by @ericwb in #350
  • Add new rule to check for context=None in stls or POP3_SSL by @ericwb in #351
  • Add new rule to check for context=None in smtp.starttls or SMTP_SSL by @ericwb in #352
  • Add rule on argparse to check for an argument of password by @ericwb in #353
  • Rename function to be more clear by @ericwb in #355
  • Add new rule for secrets insufficient token length by @ericwb in #356
  • Add secrets_weak_token to rules table by @ericwb in #357
  • Change category name to insufficient_token_length by @ericwb in #358
  • Refactor the docs by @ericwb in #359
  • More consistent naming of docs by @ericwb in #360
  • Add logo to README by @ericwb in #361
  • Drop support of Windows by @ericwb in #363
  • New rule for socket based unrestricted bind by @ericwb in #362
  • Add rule for socketserver unrestricted bind by @ericwb in #364
  • SocketServer doc needs example and refs for socketserver by @ericwb in #365
  • Add new rule for http.server unrestricted bind by @ericwb in #366
  • Nit: rename file for consistency by @ericwb in #367
  • Add rule for xmlrpc.server unrestricted bind by @ericwb in #368
  • Fix wrong examples in docstring of xmlrpc by @ericwb in #369
  • Add new rule to detect regex denial-of-service patterns by @ericwb in #372

Full Changelog: 0.3.13...0.3.14

0.3.13

07 Mar 19:26
de155ba
Compare
Choose a tag to compare

What's Changed

  • Add security-severity property to sarif rules by @ericwb in #323
  • Rename tool name to Precaution by @ericwb in #324
  • Fix the schema version to not be the uri by @ericwb in #325
  • security severity should be str not float by @ericwb in #326
  • Switch docs to use mkdocs by @ericwb in #327
  • Nit: use single ticks not double by @ericwb in #328
  • Add rule descriptions to SARIF output by @ericwb in #329
  • Better short and long rule descriptions by @ericwb in #330
  • Add help text and markdown for rule by @ericwb in #331
  • Clean up the description text for rules by @ericwb in #332

Full Changelog: 0.3.12...0.3.13

0.3.12

05 Mar 00:37
cc4e560
Compare
Choose a tag to compare

What's Changed

Full Changelog: 0.3.11...0.3.12

0.3.11

04 Mar 22:03
9480250
Compare
Choose a tag to compare

What's Changed

  • Remove the rule's full description from SARIF by @ericwb in #320

Full Changelog: 0.3.10...0.3.11

0.3.10

04 Mar 21:43
920dad5
Compare
Choose a tag to compare

What's Changed

Full Changelog: 0.3.9...0.3.10

0.3.9

04 Mar 18:39
094eb54
Compare
Choose a tag to compare

What's Changed

  • inserted_content does does conform to SARIF schema by @ericwb in #317
  • Use text attribute for ArtifactContent by @ericwb in #318

Full Changelog: 0.3.8...0.3.9

0.3.8

04 Mar 18:21
f10b09d
Compare
Choose a tag to compare

What's Changed

Full Changelog: 0.3.7...0.3.8

0.3.7

25 Feb 05:32
219537c
Compare
Choose a tag to compare

What's Changed

  • Rework of the documentation by @ericwb in #305
  • Inform user if an update is available by @ericwb in #306
  • Add license and indices links to main index doc by @ericwb in #307
  • Add varibles of function parameters to symtab by @ericwb in #308

Full Changelog: 0.3.6...0.3.7

0.3.6

21 Feb 22:55
2e044df
Compare
Choose a tag to compare

What's Changed

  • Nit change to gist conditional by @ericwb in #303
  • Change json_load rule to be default of disabled by @ericwb in #304

Full Changelog: 0.3.5...0.3.6

0.3.5

20 Feb 04:48
2708587
Compare
Choose a tag to compare

What's Changed

  • New renderer to output in markdown format by @ericwb in #291
  • Use rich console capture of printed text by @ericwb in #292
  • Add an output to a file CLI argument by @ericwb in #294
  • Fix up the renderer outputs by @ericwb in #295
  • Add option to output the results to Gist by @ericwb in #297
  • Fix traceback on unsupported files by @ericwb in #299
  • Add more details to getting started in README by @ericwb in #300
  • Fix traceback when parsing with without as by @ericwb in #302

Full Changelog: 0.3.4...0.3.5