GGClient
now provides aretrieve_secret_incident()
method to retrieve the dashboard incident associated with a secret (see https://api.gitguardian.com/docs#tag/Secret-Incidents/operation/retrieve-incidents).
GGClient
now contains remediation messages obtained from the API/metadata
endpoint.
- The project now uses pdm instead of pipenv.
GGClient
no longer crashes when it receives a server response with no Content-Type header.
Yanked: release process issue.
Yanked: release process issue.
-
Add
GGClient.create_honeytoken_with_context()
method. -
Export scan schemas in addition to dataclasses for sca.
- Added maximum payload size as a property of GGClient.
- Set minimum Python version to >=3.8.
-
GGClient
now obeys rate-limits and can notify callers when hitting one. -
Added the following attributes to
IaCVulnerability
:url
,status
,ignored_until
,ignore_reason
,ignore_comment
. -
Added the
source_found
attribute toIaCScanParameters
andIaCDiffScanEntities
.
- Added
extra_headers
to SCA diff scans.
- Remove
potential_siblings
from models.
- Added the
GGClient.iac_diff_scan()
method. This allows scanning two directories for IaC vulnerabilities and categorizing incidents as new, unchanged or deleted.
- Fixed a bug where py-gitguardian would sometimes increase the length of a document when preparing it to be sent to the secret scan API.
-
Added
GGClient.create_jwt()
method. This is only used to interact with HasMySecretLeaked for now. -
py-gitguardian is now fully type-hinted (#49).
- All HTTP requests are now logged using Python logger. The log message includes the HTTP method, endpoint, status code and duration.
GGClient.iac_directory_scan()
was not correctly sending the files to scan.
-
Added
GGClient.create_honeytoken()
method. -
Added
GGClient.read_metadata()
to read metadata from the server. The metadata is then used by further secret scan calls and is available in a newGGClient.secret_scan_preferences
attribute.
- The
PolicyBreak
class now includes the URL of the policy break if the dashboard already knows about it.
- Python dependencies were not correctly defined: py-gitguardian was using
marshmallow-dataclass
andclick
without depending on them. The package now explicitly depends onmarshmallow-dataclass
and does not useclick
anymore (#43).
Client
can now run IaC scans (GitGuardian/ggshield#405).