[v2.2.0]
- Added repository coverage manifests and incremental
--audit-logJSONL events, including
discovery, fetch, scan outcome, Git scope, and per-repository scan statistics. - Added read-only Google API-key blast-radius probes for Identity Toolkit, Generative Language,
Translation, and YouTube services. - Updated Cargo dependencies, including AWS SDK, Git, TLS, and runtime libraries.
- Explicitly enabled HTTP/2 for outbound validation requests to improve connection reuse and multiplexing.
- Refreshed the pinned Betterleaks catalog to commit
95237cf,
adding the Voyage AI API-key detector. Built-in coverage is now 485 rules (459 Betterleaks and
26 Veles), with 246 rules supporting validation. The OSV-SCALIBR Veles audit found no new secret
detectors since the existing pinned revision.