Betterleaks: baixar versions anteriors

### What's New
Betterleaks v1.9.0 expands secret detection coverage and improves performance.

• Added 46 detection rules, including Miro, VoyageAI, and Bitbucket Data Center tokens.
• Reduced memory retention and logging overhead during scans.
• Refined detection patterns and filters to reduce false positives.
• Fixed duplicate PKCS#12 file findings and removed internal attributes from reports.
• Empty JSON reports now return [] instead of null.

## Changelog
• 2bc07526bd83d8402bed0f7991c4d3e60f345af3 Add VoyageAI API key rule (#324)
• 3d798ac55d89f14a60c8df65d4d2bda6fccb1ea1 Clone box context so fragment.Raw can be released (#313)
• b1599d6c50946e8b2765e676318a92e5ecce62eb Merge branch 'main' of github.com:betterleaks/betterleaks
• ee133f66764c6a3285ff781a53bde72bc0a0b93a Revert "forgot a test/comment"
• e9ddabf2c87a7715b07e7179d617a93c19f031f1 Revert "only retain findings when needed (#323)"
• 10234528e348f4a64f0a693df50b01589cb53933 Revert "remove semgroup crossing detect/source boundary (#325)"
• f3188f0ad29a7c11c8bac279e46559f9e224c873 Revert "rm more deprecated fields (#326)"
• 0f4004beaa13a37b7a3c5f120ac3c6ce4bdfe29c Rules/miro (#291)
• 530e3304d96b604bbabb7dde19bb38bda8db5cae add Bitbucket Data Center token rule (#346)
• 1c5b7d82eb35007df51d37a397a8360a9ec2daae couple new rules (#311)
• 5b53d1b30685e1a9cab17062f5014f63783f365b filter out obvious encryption (#310)
• 2e108eac8b3f552147fcd455cbe34e0cacff589e fix：make sumoLogic accessID prefix case-sensitive (#322)
• 5ac4b0b5333a6b39b6c1762070ac235a68d57d9c forgot a test/comment
• 0e4ce8453904512673b6a23dad5e8d3433567b53 more rules (#312)
• 95237cf8eb4d8e9f67409595b245e674832992cf only construct a logger after regex hit (#338)
• 574f3a533d9f9af87a1cfac4d9447a95e9ac3d4c only retain findings when needed (#323)
• abeb307ccee7af8e06ca7923db9a2fa51c72ea69 optimize some rules (#328)
• 81aff7a638638aae3a659845d089043e1d8fe9ac prep v1 release
• 1a591583c114e27afffeb7cbc04ba6a6048175bd remove semgroup crossing detect/source boundary (#325)
• 2a387a5bad4290a84b9a1eb679bffe70611218cc report empty JSON arrays for nil findings (#349)
• 820ea5a5ed8915ac1dd0b68a590bed1f561ce351 rm more deprecated fields (#326)
• 2ef00ea7bbbb40cccb7ea72028e7f19cd1086e6d stop reporting fs first fragment (#336)
• 2ba7943682b82a3659a89dae8fc680de1ef6b781 stop running pkcs12-file on every fragment (#332)

## What's New

Wow two big releases in a day!

1. Added a validate command to let you re-validate findings without doing a rescan:
```
# Revalidate a known credential without running detection
printf '%s\n' "$GITHUB_TOKEN" | betterleaks validate --rule-id github-pat

# Print only its status (for example, VALID)
printf '%s\n' "$GITHUB_TOKEN" | betterleaks validate --rule-id github-pat --simple
```

2. OOM issue fixed by @gpflaum

## Changelog
* 5eab48332cc48565864514e3bc6de89df091a7c4 clone strings before saving in findings, so fragment.Raw can be released (#308) Thank you @gpflaum!
* 1c1db0d62048e2f00cffe51ffea6a1c534a7dcab quick update
* 8173e62e1fa8087d1a49c12ac194037d07565492 validate cmd (#277)

Changelog
- b9de7fd fix filepath regression w/ fastwalk (#274)

What's New
The last thing we want is for Betterleaks to be spamming providers with unnecessary API calls. Betterleaks caches requests per unique finding so hitting a rate limit shouldn't be a common occurrence. If you find you are getting rate limited, then we probably need to tweak the rule to fire less often.
This release gives users the ability to control requests per second and max requests.
--validation-max-requests int maximum validation requests sent to each provider target (0 = unlimited)
--validation-rps float global validation requests per second (0 = unlimited)
--validation-rps-rule strings rule-specific validation request rate as RULE=RPS (repeatable)
Fixed
Fixed a potential panic on archive handling #266 and #270
Changelog
- d56727e add validation limits (#273)
- c197f8d bump min ver for config (#271)
- ca147d7 fix(sources): don't crash the process on archive/decompress panics (#266)
- 968138e fix(sources): recover from panics on the archive extractor path (#270)
- 42fbff2 rm POST validators for aikido (#272)

What's New
More rules, faster!
Rules
More Rules
v1.7.0 focuses on speed and expanding the default config with more better rules. Here's the numbers for a GitLab dir (just the files) scan:
───────┬─────┬───────────────┬─────────
Version│Rules│With validation│Wall time
───────┼─────┼───────────────┼─────────
v1.6.1 │325 │106 │3.55s
───────┼─────┼───────────────┼─────────
v1.7.0 │412 │187 │2.89s
───────┴─────┴───────────────┴─────────
Full list of rules added:
aiven-auth-token
apify-api-token
asaas-api-token
azure-app-configuration-connection-string
azure-client-id
azure-servicebus-connection-string
azure-storage-account-key
azure-storage-account-name
azure-tenant-id
bitrise-access-token
buildkite-service-token
buildkite-user-access-token
canadian-digital-service-notify-api-key
checkout-secret-key
circleci-personal-token
circleci-project-token
cloudsmith-api-key
crates-io-api-key
databento-api-key
datastax-astra-application-token
devcycle-client-sdk-key
devcycle-mobile-sdk-key
devcycle-server-sdk-key
docker-swarm-join-token
docker-swarm-unlock-key
ebay-client-id
ebay-client-secret
fullstory-api-key
gcp-gemini-api
highnote-secret-live-key
ionic-personal-access-token
langchain-langsmith-personal-access-token
langchain-langsmith-service-key
lark-app-id
lark-app-secret
lichess-personal-access-token
mailersend-api-token
mercury-production-api-token
mergify-application-key
midtrans-production-server-client-key
neon-api-key
onesignal-rich-authentication-token
onfido-live-api-token-ca
onfido-live-api-token-eu
onfido-live-api-token-us
openweather-api-key
paddle-live-api-key
persona-production-api-key
pinecone-api-key.1
pinecone-api-key.2
pinterest-access-token
plivo-auth-id
plivo-auth-token
polar-oauth-access-token
polar-organization-access-token
polar-personal-access-token
proof-full-access-api-key
rainforest-pay-production-api-key
ramp-client-id
ramp-client-secret
redirect-pizza-api-token.1
render-api-key
rootly-api-key.1
runpod-api-key.1
salesforce-access-token.1
salesforce-instance-url.1
samsara-api-token.1
scalr-api-access-token.1
segment-public-api-token.1
snowflake-account-host.1
snowflake-programmatic-access-token.1
sslmate-api-key.1
tableau-personal-access-token-name.1
tableau-personal-access-token.1
tableau-server-host.1
tailscale-api-key.1
telnyx-api-v2-key.1
temporal-cloud-api-key.1
thunderstore-api-token.1
unkey-root-key.1
val-town-api-token.1
wakatime-api-key.1
wakatime-api-key.2
weatherstack-api-key.1
workato-developer-api-token.1
workos-production-api-key.1
zuplo-consumer-api-key.1
We added 87 new rules, and increased rules with validation from 106 to 187 while dropping scan times.
Better Rules
TODO
Speed
Scans are faster now thanks to a couple optimizations:
- fast dir walking: #238 (thanks @charlievieth)
- removed slow left-of-identifier preamble [\w.-]{0,50}?: #233
- custom ahocorasick implementation (based on github.com/RRethy/ahocorasick MIT): #240
Changelog
- 5babeb2 Drop near matches (#245)
- bc21eb2 Feat/rule timings (#227)
- 66d51b6 Filter Publishable and Test Keys from Generic Results (#207)
- 555b1ec Fix PostHog key length ranges and add personal key validator (#259)
- 7a28a0d More rules and rule updates (p-r) (#260)
- a47f6c9 Perf/detect optimizations (#240)
- 118446e Remove left preamble for a quick perf win (#233)
- 38c1686 Rules/jul 15 batch 1 (#246)
- b49c535 Rules/jul 17 batch 1 (#253)
- b76f266 Some Azure Rules (#222)
- 8e6d239 add config check test to ci (#263)
- 2168b56 another batch (#255)
- 88f8ab7 another batch (#257)
- f64b922 another batch needs more review (#262)
- 872e374 bump min ver (#226)
- 813bd3b bunch of comments (#243)
- 5c859ad cloudsmith rule (#235)
- d0f00a3 consistent quoting
- 7f9ed4a couple of 'm's (#256)
- 2eac852 fast walk (#238)
- 85b491c fix data race w/ runtime bindings (#231)
- f629149 fix(detect): log filter-skipped findings (#199)
- 63d589f fix(kubernetes): expand Secret detection range (#244)
- 06e89aa limit sourcegraph regex and keywords (#248)
- 1ebee5c more rules (#249)
-

Changelog
- 28f08b4 config command (#218)
- 228352f build: upgrade crypto to v0.53.0 (#217)

What's New
- Added 50 new rules w/ validation
1. aikido-ci-token
2. aikido-client-id
3. aikido-client-secret
4. airtable-oauth-token
5. alibaba-sts-access-key-id
6. alibaba-sts-access-key-secret
7. alibaba-sts-security-token
8. amplitude-secret-key
9. artifactory-jfrog-url
10. bitly-access-token
11. box-api-access-token
12. brave-search-api-key
13. canva-client-id
14. canva-client-secret
15. clerk-secret-key
16. clickhouse-cloud-key-id
17. clickup-personal-api-token
18. cloudinary-api-key
19. cloudinary-api-secret
20. cloudinary-cloud-name
21. cockroachlabs-cloud-api-key
22. configcat-sdk-key
23. configcat-sdk-key-extended
24. couchbase-capella-api-key
25. coveralls-personal-api-token
26. datadog-api-key
27. datadog-application-key
28. datagov-api-key
29. deno-account-token
30. devin-personal-api-key
31. devin-service-api-key
32. devin-service-user-token
33. disqus-api-key
34. dockerhub-organization-access-token
35. dockerhub-personal-access-token
36. etsy-open-api-key
37. gumroad-access-token
38. honeycomb-api-key
39. ibm-cloud-user-api-key
40. influxdb-api-token
41. jumpcloud-api-key
42. kagi-api-key
43. kimi-api-key
44. klaviyo-api-key
45. minimax-api-key
46. supabase-management-token
47. supabase-project-api-key
48. supabase-project-url
49. zai-api-key
- Archive handling is enabled by default (turn off with --max-archive-depth=0)
- Added a env.getOrDefault cel binding
- migrated from spf13/viper to go-toml for config parsing and loading
- various bug fixes
Changelog
- 2b62eee Fix redaction of capture groups and multi-byte values (#176)
- 21585e7 Make ValidationStatus a typed enum (#174)
- 93cda77 Refactor/config parse (#191)
- 5324a7d Rules/more rules 3 (#196)
- 5b64a83 Rules/more rules 4 (#197)
- cbb6597 Surface the real git stderr instead of a generic error (#190)
- ea5f4cd add getOrDefault binding (#205)
- e2ae8d5 bunch more, use validate.unknown (#198)
- 7d3d8bf count rule script
- 6ec7f6e detect: make config/baseline self-scan guard separator-insensitive (#178)
- d3fbd5d dir: surface scan errors so a failed scan exits non-zero (#177)
- 43f1e4f drop translate filter logging to trace (#192)
- ac65f47 enable archive handling by default (#206)
- 3027ec5 feat(github): validate tokens against GHES base URL (#159)
- 9f55833 first batch of new rules (#194)
- 1fa3aed fix(curl-auth-user): filter nested bash parameter expansions as false positives (#186)
- 582b8c6 how did I not have supabase (#193)
- 86f6b05 mock files when piping (#203)
- d627481 more rules, removed redundant jfrog (#195)
- 0dba832 report a clean error for an unknown --regex-engine instead of panicking (#181)
- 8daf457 small regex tweaks (#202)
- 24d272c zai minimax kimi (#204)

What's New
Quick little patch with a few things:
- updated go.mod to use betterleak's go-re2 fork so go install and precommits will work better.
- added some more rules including scaleway and gcp
- added hugging face source
- fixed secret redaction
Changelog
- 857e340 Add Contributor Covenant Code of Conduct (#161)
- fd5f4d0 Update README with Betterleaks config recommendations
- 40d5caf bump go.mod and ver check in release worfklow (#167)
- e66c462 fix: centralize secret redaction in report path for all scan sources (#157)
- 262fdfb gcp service tokens and app default creds (#164)
- e86c443 hugging face source (#165)
- 83adb3d move mds
- 3ac9876 scaleway rule (#106)
- 54243c8 use go-re2 fork (#166)

Changelog
- ea102f1 Update README.md
- 5877fac Update betterleaks config link to main branch (#144)
- 2d72998 bump min bl config version (#143)
- 92cea11 use filter in rule generation instead of relying on translate (#145)