Garry Tan and capy-ai[bot]
ccc3f0fc14
Catch secrets split across lines in UTF-16 files and stop deleted binaries from blocking pushes (GST-2261) ( #4261 )
...
* Catch secrets split across lines in UTF-16 files and skip deleted files in the push scan (GST-2261)
Each reading of a file git calls binary is now scanned as its own text with the file's line numbers, so a keyword and its value on the next line stay neighbours. The pre-push hook diffs with --irreversible-delete, so a deleted binary's old bytes no longer fill its 64 MiB buffer.
Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com>
* Leave the landed binary-scan changelog fragment unchanged (GST-2261)
Review-Finding: changelog.d/scan-binary-files-for-secrets.md:1:release reader=core
Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com>
* List a token once when several readings of a binary file find it (GST-2261)
Review-Finding: p1/specialist-batched#1 reader=specialist-batched
Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com>
* Report a repeated token once only within one binary file, so an allowlisted token never hides another (GST-2261)
Review-Finding: p2/specialist-batched#1 reader=security
Review-Finding: p2/red-team#2 reader=red-team
Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com>
* Name the changelog fragment after the branch (GST-2261)
Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com>
* Keep the side-by-side reading of binary files so a key and its keyword in different readings still fail (GST-2261)
Review-Finding: audit/cross-family#1 reader=gpt-6.1-sol
Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com>
---------
Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com>
2026-11-10 02:12:29 +00:00
..
2026-11-01 09:35:42 +00:00
2026-10-04 07:58:41 -07:00
2026-10-20 00:24:28 +00:00
2026-11-09 08:52:27 +00:00
2026-11-09 23:29:20 +00:00
2026-11-04 03:42:16 +00:00
2026-11-09 16:45:48 +00:00
2026-11-09 03:51:34 +00:00
2026-11-07 08:39:20 +00:00
2026-10-20 00:24:28 +00:00
2026-11-03 10:52:35 +00:00
2026-11-08 14:26:14 +00:00
2026-10-20 00:24:28 +00:00
2026-10-20 00:24:28 +00:00
2026-10-10 23:26:08 +00:00
2026-10-07 23:29:05 +00:00
2026-10-07 23:29:05 +00:00
2026-11-09 23:06:04 +00:00
2026-10-17 21:17:39 +00:00
2026-10-17 21:17:39 +00:00
2026-10-26 06:41:22 +00:00
2026-10-25 01:00:05 +00:00
2026-11-09 15:46:09 +00:00
2026-11-06 21:08:42 +00:00
2026-11-02 01:35:47 +00:00
2026-10-16 22:00:32 +00:00
2026-11-02 09:26:46 +00:00
2026-11-07 05:51:12 +00:00
2026-10-20 00:24:28 +00:00
2026-10-20 00:24:28 +00:00
2026-10-16 22:00:32 +00:00
2026-11-02 14:49:46 +00:00
2026-10-20 00:24:28 +00:00
2026-10-11 00:32:15 +00:00
2026-11-07 06:52:04 +00:00
2026-11-02 16:20:02 +00:00
2026-10-07 23:29:05 +00:00
2026-10-04 07:58:41 -07:00
2026-11-07 18:02:40 +00:00
2026-10-20 00:24:28 +00:00
2026-10-03 07:54:09 -07:00
2026-10-20 00:24:28 +00:00
2026-11-09 16:45:48 +00:00
2026-10-20 00:24:28 +00:00
2026-10-29 09:58:34 +00:00
2026-10-20 00:24:28 +00:00
2026-11-08 02:18:23 +00:00
2026-10-03 16:13:45 -07:00
2026-11-03 10:52:35 +00:00
2026-10-25 22:31:08 +00:00
2026-11-07 19:56:12 +00:00
2026-10-20 00:24:28 +00:00
2026-11-02 16:20:02 +00:00
2026-11-07 06:39:20 +00:00
2026-10-26 04:32:27 +00:00
2026-10-26 04:32:27 +00:00
2026-11-09 10:32:29 +00:00
2026-11-09 01:42:33 +00:00
2026-11-01 23:20:55 +00:00
2026-11-06 17:13:48 +00:00
2026-11-10 01:03:46 +00:00
2026-10-20 00:24:28 +00:00
2026-10-06 23:42:19 +00:00
2026-10-20 00:24:28 +00:00
2026-10-20 00:24:28 +00:00
2026-11-02 17:44:00 +00:00
2026-11-07 15:44:35 +00:00
2026-11-08 14:26:14 +00:00
2026-11-01 00:29:06 +00:00
2026-11-02 17:44:00 +00:00
2026-10-24 23:55:21 +00:00
2026-11-03 10:52:35 +00:00
2026-11-04 03:01:32 +00:00
2026-10-26 04:32:27 +00:00
2026-10-04 07:58:41 -07:00
2026-10-20 00:24:28 +00:00
2026-10-25 05:06:30 +00:00
2026-10-26 04:32:27 +00:00
2026-10-20 00:24:28 +00:00
2026-10-25 16:35:45 +00:00
2026-11-01 08:12:16 +00:00
2026-10-20 00:24:28 +00:00
2026-11-01 09:52:31 +00:00
2026-11-03 15:41:57 +00:00
2026-10-31 10:23:41 +00:00
2026-11-08 15:36:28 +00:00
2026-11-01 09:35:42 +00:00
2026-11-08 14:26:14 +00:00
2026-11-03 22:58:53 +00:00
2026-11-03 17:08:30 +00:00
2026-10-26 04:32:27 +00:00
2026-10-26 04:32:27 +00:00
2026-10-26 04:32:27 +00:00
2026-10-20 00:24:28 +00:00
2026-10-20 00:24:28 +00:00
2026-11-02 01:07:12 +00:00
2026-11-08 14:26:14 +00:00
2026-11-05 00:50:43 +00:00
2026-11-09 23:06:04 +00:00
2026-10-28 02:58:29 +00:00
2026-11-04 01:32:57 +00:00
2026-10-26 04:32:27 +00:00
2026-11-03 00:39:09 +00:00
2026-10-20 00:24:28 +00:00
2026-10-31 05:53:14 +00:00
2026-10-20 00:24:28 +00:00
2026-10-29 04:22:41 +00:00
2026-10-27 03:04:06 +00:00
2026-10-27 03:04:06 +00:00
2026-10-20 00:24:28 +00:00
2026-11-04 03:03:39 +00:00
2026-10-17 00:41:41 +00:00
2026-11-01 06:11:17 +00:00
2026-11-04 01:32:24 +00:00
2026-11-08 14:26:14 +00:00
2026-11-02 09:16:58 +00:00
2026-10-11 16:48:11 +00:00
2026-10-03 07:54:09 -07:00
2026-11-08 00:59:38 +00:00
2026-11-01 06:11:17 +00:00
2026-11-08 00:59:38 +00:00
2026-10-27 17:20:55 +00:00
2026-10-07 23:29:05 +00:00
2026-10-27 15:11:13 +00:00
2026-11-10 01:33:31 +00:00
2026-11-03 10:52:35 +00:00
2026-10-20 00:24:28 +00:00
2026-10-20 00:24:28 +00:00
2026-11-02 16:20:02 +00:00
2026-11-02 16:20:02 +00:00
2026-10-20 00:24:28 +00:00
2026-11-10 02:12:29 +00:00
2026-10-20 00:24:28 +00:00
2026-11-04 03:38:56 +00:00
2026-11-07 22:18:18 +00:00
2026-10-02 11:11:00 -07:00
2026-11-02 14:49:46 +00:00
2026-10-20 00:24:28 +00:00
2026-11-01 05:57:18 +00:00
2026-11-04 03:38:56 +00:00
2026-11-03 01:40:07 +00:00
2026-11-03 01:40:07 +00:00
2026-11-08 01:46:06 +00:00
2026-11-02 19:33:38 +00:00
2026-11-09 23:41:35 +00:00
2026-11-02 19:33:38 +00:00
2026-11-09 11:28:20 +00:00
2026-11-04 02:59:50 +00:00
2026-10-20 00:24:28 +00:00
2026-10-01 13:55:16 -07:00
2026-10-16 22:00:32 +00:00
2026-10-04 07:58:41 -07:00
2026-10-10 23:26:08 +00:00
2026-11-01 00:29:06 +00:00
2026-11-07 18:43:11 +00:00
2026-11-06 18:14:51 +00:00
2026-11-06 08:47:50 +00:00
2026-11-09 04:14:37 +00:00
2026-11-06 08:47:50 +00:00
2026-11-08 14:26:14 +00:00
2026-11-08 14:26:14 +00:00
2026-11-06 08:47:50 +00:00
2026-11-03 17:08:30 +00:00
2026-11-03 19:49:58 +00:00
2026-11-03 14:30:58 +00:00
2026-11-07 18:43:11 +00:00
2026-11-02 09:16:58 +00:00
2026-11-07 06:52:04 +00:00
2026-11-08 02:18:23 +00:00
2026-11-01 05:57:18 +00:00
2026-10-26 04:32:27 +00:00
2026-10-31 05:06:03 +00:00
2026-10-01 11:57:48 -07:00
2026-11-01 06:11:17 +00:00
2026-10-20 00:24:28 +00:00
2026-11-07 06:52:04 +00:00
2026-10-26 04:32:27 +00:00
2026-10-01 11:57:48 -07:00
2026-11-09 23:06:04 +00:00
2026-10-26 04:32:27 +00:00
2026-11-05 08:42:30 +00:00
2026-10-26 23:45:45 +00:00
2026-11-09 23:42:47 +00:00
2026-11-06 19:26:10 +00:00
2026-10-26 07:22:44 +00:00
2026-11-06 21:08:42 +00:00
2026-10-01 11:57:48 -07:00
2026-10-29 05:35:56 +00:00
2026-10-20 00:24:28 +00:00
2026-10-27 06:36:56 +00:00
2026-11-02 19:33:38 +00:00