Gabriel Marquet

No disabling redaction anymore ?

4

Hi, I have tried Mizu a while ago and there was a way to disable redaction, I can't find that option anymore, anywhere. Is that even possible anymore ? it...

Enhance reporting with metrics

2

## Is your feature request related to a problem? Please describe. Even is ggshield is properly deployed on developer machines etc... we don't get much insights and metrics about "how...

api-importer write-only role for uploads

1

**Is your feature request related to a problem? Please describe** Currently, the api-importer role is too permissive really, as it allows reading sensitive information, even though it could be leaked...

These api endpoints seem to be missing for now https://docs.github.com/en/rest/dependabot/alerts?apiVersion=2022-11-28#list-dependabot-alerts-for-an-enterprise

fuzzing SOCKS5 ?

3

Hello :) Thanks a lot for the great blog post about the recent CVE ! https://daniel.haxx.se/blog/2023/10/11/how-i-made-a-heap-overflow-in-curl/ Just made me wonder if the SOCKS implementation was fuzzed ?

After debugging and testing out automigrate, the autoupdate doesn't work nicely. adding these lines to the built javascript fixes the problem, although not clean `var details = {};` `typeof(index.fields) ===...

Notification for new findings

5

**Is your feature request related to a problem? Please describe** This is a very simple idea, but sometimes, when you manage a mix of tools that are cloud-hosted, and DIY...

Cross file analysis ?

3

Hey ! Just wondering if you had the problem of performing the detection cross-file ? Like, one index file, and many controller files with functions declared there to handle your...

Spring: Add Semgrep metavar for exact path/route variables

5

Attempt at fixing/improving https://github.com/mschwager/route-detect/issues/10 and https://github.com/mschwager/route-detect/issues/12 Adding a $PATH metavar in the rules allows you to really extract the exact values Only on unauthorized paths for now, I tried also...

Browser viz is hiding route paths for Java Spring in title

4

Thanks for this cool tool ! Was actually playing with a similar idea using semgrep :) I think the "title" in the semgrepData JSON object is super long for some...