* [INS-241] New detector (datadogapikey) for datadog apikeys
* Analyzer updated to cater endpoint
* Added new tests for anlyzers
* Removed print statement
* resolved comments and fixed integration tests.
* resolved comments
* changed cli prompt
* Fixed the comments and added app key validation in analyzer
* renamed regex variable
* Added found verified endpoint to ExtraData
* Clean up Analyze function by removing comments
Removed commented-out code for appKey and endpoint.
* [INS-286] Added support to analyze just the apikey in datadog's analyzer
* fixed linter issue
* fixed comment and introduced snake case to make analyzer code cosistent and also fixed flaky tests
* resolved bugbot comment
* updated protos
* resolve conflicts
* updated protobuffs and resolved bugbot comments
* made regex idiomatic
* fixed ssrf vulnerability
* fixed string formatting
* task: Datadog analyzer init commit with limited resources and permissions
No cases covered
* task: added more permissions
* task: added more permissions | refactoring
* task: added domain handling
* refactor: incorporated PR feedback
* task: Analyzer Result implementation for enterprise
* task: added tests | Analysis Info configuration changes | permissions.yaml
* revert: reverted datadog detector base URL
* refactor: streamline Datadog API key analysis and permission handling
- Simplified API key retrieval logic by removing redundant checks for "key".
- Enhanced permission binding extraction by introducing a new function for permissions.
- Cleaned up resource binding logic for better clarity and maintainability.
- Removed unnecessary ID fields from scopes.json to reduce clutter.
* jira token analyzer init
* added api requests in jiratoken analyzer
* more apis added for jira resources
* removed unnecessary code
* added test for jira token analyzer
* repeat resources in analyzer result based on assigned permissions of jira token
* simplified the code
* updated secret manager for analyzer tests
* implemented planetscale anlayzer
* linked detector with analyzer for planetscale.
override input form for TUI.
refactor some variable name for clarrification.
* clean up scopes for planetscale.
* add database and other scopes
* add remaining scopes and refactoring
* updated the analyzer type value in expected output of notion test.
* updated the expected output for analyzers
updated the go-pretty library in planetscale.
added extra information from results to be ignore like AnalysisInfo, ExtraData etc.
* updated expected output of test.
* added analyzer initial working structure
* restructured the resources
* added history read api
* added history delete api
* fixed http method issue
* added delete dubbing api and refactored the code
* added dubbing read api
* optimized requests and added projects api
* added pronunciation dictionaries apis
* fixed linter
* added models,audionative,workspace apis
* added some last apis
* Deleted \
* fixed linter
* few more enhancements and test cases added
* added go generate command
* optimized the code and resolved the comments
* fixed linter
* fixed indentation
* resolved comments
* kicked imposter print statement
* formatted cli.go
* Update pkg/analyzer/analyzers/elevenlabs/elevenlabs.go
Co-authored-by: Eng Zer Jun <engzerjun@gmail.com>
* resolved comments
* added secret info methods which safely append and read permission and resources
---------
Co-authored-by: Eng Zer Jun <engzerjun@gmail.com>
* private key analyzer initial impl - basic structure
* Impl analyzePermission method for PrivateKey analyzer.
export few private functions for reusability in analyzers
* add permissions.yaml and generate permissions
* permissions fix
* AnalyzeAndPrintPermissions impl
* analyzer test pushed
* Impl analyzer func called from detector.
added and regenerated permissions.
* filter empty strings in result and generate expected_output for test
* some refactoring
* comment added for better readability.
* fixed code breaking changes in detectors due to exporting private functions.
* log insufficient information message on no certificate results
* Add POC analyze sub-command
* Address lint errors
* added http logging to most analyzers
* Use custom RoundTripper with default http.Client
* [chore] Embed scopes at compile time
* [chore] Move subcommand check up to prevent printing metrics
* Create framework of interfaces, structs, and protos
* Implement Analyzer for airbrake
* Add FullAccess permission constant
* Implement Analyzer for asana
* Implement Analyzer for bitbucket
* Implement Analyzer for github
* Implement Analyzer for gitlab
* Implemente Analyzer for huggingface
* Implement Analyzer for mailchimp
* implement analyzer for mailgun
* update cli cmd
* Implement analyzer for openai
* fix timing issue on scopes
* print permissions only if restricted key
* Implement Analyzer for mysql
* enable loggin check
* fixed the formatting issue to wrap sub-errors
* implemented analyzer for opsgenie
* implemented analyzer for postgres
* use format string
* implemented analyzer for sendgrid
* simplify returning the error
* implemented analyzer for postman
* added handling of workspace error
* Update protos to match OSS
* Generate protos
* Update data structures to match OSS
* Update airbrake implementation
* Remove asana implementation
* Remove mailchimp implementation
* Update openai implementation to match OSS
* Remove gitlab implementation
* Remove huggingface implementation
* Remove bitbucket implementation
* Fix permission in airbrake
* Remove github implementation
* Remove mailgun implementation
* Cleanup compiler errors
* Implement Analyzer interface for github
* Add parents to github resources
* Add fine_grained to github metadata
* Update with changes from main
* Remove unused function stubs
---------
Co-authored-by: Joe Leon <joe.leon@trufflesec.com>
Co-authored-by: Hon <8292703+hxnyk@users.noreply.github.com>
Co-authored-by: Abdul Basit <abasit@folio3.com>
Co-authored-by: Abdul Basit <basit.mussani@gmail.com>
* [analyze] Implement Analyzer interface for github
* Make github repo and user enumeration configurable
* Add AnalysisInfo to github detector
* Use AnalyzeAndPrintPermissions from the CLI
* Add POC analyze sub-command
* Address lint errors
* [chore] Embed scopes at compile time
* [chore] Move subcommand check up to prevent printing metrics
* added http logging to most analyzers
* Use custom RoundTripper with default http.Client
* Create framework of interfaces, structs, and protos
* Merge main
* Add AnalysisInfo to detectors.Result
* Hide analyze subcommand
* Update gen_proto.sh
* Update protos
* Make protos
* Update analyzer data types
* Rename argument to credentialInfo
---------
Co-authored-by: Joe Leon <joe.leon@trufflesec.com>
Muneeb Ullah Khan
Amaan Ullah
Shahzad Haider
Kashif Khan
Nabeel Alam
Abdul Basit
Honandmcastorina
Bill Rich
