mongodb/kingfisher v1.77.0

Kingfisher v1.77.0

on GitHub

[v1.77.0]

• Added kingfisher revoke subcommand for revoking leaked credentials directly with the provider.
• Added optional revocation section to rules to support credential revocation (currently supporting AWS, GCP, GitHub, GitLab, Slack, and Buildkite).
• Added kingfisher validate subcommand to validate credentials without running a full scan.
• Added validate_command and revoke_command fields to scan output (pretty, JSON, JSONL, BSON, SARIF formats) showing the exact kingfisher validate or kingfisher revoke command to run for each finding. The validate_command is included for all findings with validation support; revoke_command is included only for active credentials with revocation support. These fields are omitted when --redact is used since they contain the secret value.
• Updated the HTML report viewer to display validate and revoke commands in the Finding Details panel with copy-to-clipboard functionality.
• Refactored project into multiple crates for better modularity and maintainability.
• Ensured more CLI arguments are global and available across all subcommands.
• Added kingfisher-auto pre-commit hook that automatically downloads and caches the appropriate binary for your platform (no Docker or manual installation required).
• Added Husky integration support with install-husky.sh helper script and documentation for Node.js projects.
• Added kingfisher-pre-commit-auto.sh and kingfisher-pre-commit-auto.ps1 scripts for automatic binary download in Git hooks (Linux, macOS, Windows support).

What's Changed

• feat(neon): add Neon API Key rule by @bored-engineer in #204
• fix(airtable): improve kingfisher.airtable.1 regex by @bored-engineer in #194
• feat(mercury): add Mercury API token rules by @bored-engineer in #203
• fix(planetscale): improve kingfisher.planetscale.1 regex by @bored-engineer in #205
• fix(deepseek): improve kingfisher.deepseek.1 regex by @bored-engineer in #199
• fix(circleci): improve kingfisher.circleci.1 regex by @bored-engineer in #198
• feat(asana): add v2 tokens, split v1/v0 patterns by @bored-engineer in #197
• feat(dockerhub): add Organization Access Token regex (kingfisher.dockerhub.2), improve PAT regex (kingfisher.dockerhub.1) by @bored-engineer in #201
• fix(discord): improve kingfisher.discord.1 regex by @bored-engineer in #200
• fix(age): reduce allowed characters to bech32 alphabet by @bored-engineer in #207
• fix(aws): improve kingfisher.aws.1 regex by @bored-engineer in #210
• fix(aws): improve kingfisher.aws.6 regex by @bored-engineer in #196
• feat(age): add rules for post-quantum keys (MLKEM768-X25519) by @bored-engineer in #208
• v1.77.0 by @mickgmdb in #213

Full Changelog: v1.76.0...v1.77.0