ggshield 1.13.0 on Python PyPI

🚀 New features

The new ggshield iac scan command lets you detect vulnerabilities in your Infrastructure as Code files. Note that this feature is experimental for now.

ggshield secret scan repo now continues scanning if a commit fails to scan (#267).
ggshield now provides a --debug option to help diagnose problems.

ggshield now uses stderr to report all progress and warnings, making it possible to pipe commands generating JSON such as secret scan --json to tools like jq.
The file-system banlist of ggshield secret scan docker has been improved (#193).
ggshield secret scan pre-receive and ggshield secret scan repo no longer fail on filenames containing spaces (#273, #296).
ggshield secret scan repo no longer floods the terminal with "No secrets found" messages (#265).
The commands used by the pre-commit hooks and by the GitHub action no longer use the deprecated ggshield scan syntax.

The configuration file format has changed, learn more about this change and how to adapt to it from the documentation.