Aquesta és una versió anterior. La versió actual és la 1.9.0. Betterleaks 1.9.0 · Data de publicació:
Fitxers d’instal·lació 1.7.0
| Arquitectura | Tipus | Àmbit | Mida del fitxer | Baixa | SHA256 |
|---|---|---|---|---|---|
| 64 bits | ZIP → Portable | — | — | github.com | VirusTotal |
| ARM64 | ZIP → Portable | — | — | github.com | VirusTotal |
L’enllaç i l’SHA256 provenen del manifest comunitari del Gestor de paquets del Windows. Convé comparar el hash del fitxer baixat abans d’executar-lo.
Notes de la versió
What's New
More rules, faster!
Rules
More Rules
v1.7.0 focuses on speed and expanding the default config with more better rules. Here's the numbers for a GitLab dir (just the files) scan:
───────┬─────┬───────────────┬─────────
Version│Rules│With validation│Wall time
───────┼─────┼───────────────┼─────────
v1.6.1 │325 │106 │3.55s
───────┼─────┼───────────────┼─────────
v1.7.0 │412 │187 │2.89s
───────┴─────┴───────────────┴─────────
Full list of rules added:
aiven-auth-token
apify-api-token
asaas-api-token
azure-app-configuration-connection-string
azure-client-id
azure-servicebus-connection-string
azure-storage-account-key
azure-storage-account-name
azure-tenant-id
bitrise-access-token
buildkite-service-token
buildkite-user-access-token
canadian-digital-service-notify-api-key
checkout-secret-key
circleci-personal-token
circleci-project-token
cloudsmith-api-key
crates-io-api-key
databento-api-key
datastax-astra-application-token
devcycle-client-sdk-key
devcycle-mobile-sdk-key
devcycle-server-sdk-key
docker-swarm-join-token
docker-swarm-unlock-key
ebay-client-id
ebay-client-secret
fullstory-api-key
gcp-gemini-api
highnote-secret-live-key
ionic-personal-access-token
langchain-langsmith-personal-access-token
langchain-langsmith-service-key
lark-app-id
lark-app-secret
lichess-personal-access-token
mailersend-api-token
mercury-production-api-token
mergify-application-key
midtrans-production-server-client-key
neon-api-key
onesignal-rich-authentication-token
onfido-live-api-token-ca
onfido-live-api-token-eu
onfido-live-api-token-us
openweather-api-key
paddle-live-api-key
persona-production-api-key
pinecone-api-key.1
pinecone-api-key.2
pinterest-access-token
plivo-auth-id
plivo-auth-token
polar-oauth-access-token
polar-organization-access-token
polar-personal-access-token
proof-full-access-api-key
rainforest-pay-production-api-key
ramp-client-id
ramp-client-secret
redirect-pizza-api-token.1
render-api-key
rootly-api-key.1
runpod-api-key.1
salesforce-access-token.1
salesforce-instance-url.1
samsara-api-token.1
scalr-api-access-token.1
segment-public-api-token.1
snowflake-account-host.1
snowflake-programmatic-access-token.1
sslmate-api-key.1
tableau-personal-access-token-name.1
tableau-personal-access-token.1
tableau-server-host.1
tailscale-api-key.1
telnyx-api-v2-key.1
temporal-cloud-api-key.1
thunderstore-api-token.1
unkey-root-key.1
val-town-api-token.1
wakatime-api-key.1
wakatime-api-key.2
weatherstack-api-key.1
workato-developer-api-token.1
workos-production-api-key.1
zuplo-consumer-api-key.1
We added 87 new rules, and increased rules with validation from 106 to 187 while dropping scan times.
Better Rules
TODO
Speed
Scans are faster now thanks to a couple optimizations:
- fast dir walking: #238 (thanks @charlievieth)
- removed slow left-of-identifier preamble [\w.-]{0,50}?: #233
- custom ahocorasick implementation (based on github.com/RRethy/ahocorasick MIT): #240
Changelog
- 5babeb2 Drop near matches (#245)
- bc21eb2 Feat/rule timings (#227)
- 66d51b6 Filter Publishable and Test Keys from Generic Results (#207)
- 555b1ec Fix PostHog key length ranges and add personal key validator (#259)
- 7a28a0d More rules and rule updates (p-r) (#260)
- a47f6c9 Perf/detect optimizations (#240)
- 118446e Remove left preamble for a quick perf win (#233)
- 38c1686 Rules/jul 15 batch 1 (#246)
- b49c535 Rules/jul 17 batch 1 (#253)
- b76f266 Some Azure Rules (#222)
- 8e6d239 add config check test to ci (#263)
- 2168b56 another batch (#255)
- 88f8ab7 another batch (#257)
- f64b922 another batch needs more review (#262)
- 872e374 bump min ver (#226)
- 813bd3b bunch of comments (#243)
- 5c859ad cloudsmith rule (#235)
- d0f00a3 consistent quoting
- 7f9ed4a couple of 'm's (#256)
- 2eac852 fast walk (#238)
- 85b491c fix data race w/ runtime bindings (#231)
- f629149 fix(detect): log filter-skipped findings (#199)
- 63d589f fix(kubernetes): expand Secret detection range (#244)
- 06e89aa limit sourcegraph regex and keywords (#248)
- 1ebee5c more rules (#249)
- 6381fa4 need to review (#264)
- 9be6bc2 render rule (#242)
- e382667 stripe validator (#247)
- 501de59 support for quoted and escaped values in --log-opts (#201)
- 0b4063d validation check for existing gcp-api-key rule, create new gemini rules (#230)https://github.com/betterleaks/betterleaks/releases/tag/v1.7.0
