Jay Simoni

maximum commenter_input length?

2

I started getting the following error `Error: An error occurred trying to start process '/usr/bin/docker' with working directory '/home/runner/work/...'. Argument list too long ` with ``` - name: Terragrunt Plan...

filename:.history finds all files with history in the filename

1

The filename:.history test matches all files with "history" anywhere in the filename which generates a large number of false positives.

checkov-action not working with terraform plans

15

My terraform/terragrunt process generates a number of terraform plans as json files. When I run: `checkov -d applied/accounts/plans/` locally, checkov successfully provides the results of scanning all of those json...

Support additional session tags like GITHUB_BASE_REF and GITHUB_EVENT_NAME

4

We'd like to be create a trust document on the AWS Role assumed by GitHub Action workflow that only authorizes a workflow that runs on a pull request that targets...

**Is your feature request related to a problem? Please describe.** There are a number of great [queries defined for IAM Role & Policies](https://github.com/Checkmarx/kics/tree/master/assets/queries/terraform/aws) however, as AWS recommends the use of...

Please review the [Community Note](https://github.com/trufflesecurity/trufflehog/blob/main/.github/community_note.md) before submitting ## Description We would like to be able to exclude specific secret values rather than entire files/folders. ### Preferred Solution add a --exclude-secrets...

**Describe the bug** The [launchdarkly-access-token](https://github.com/gitleaks/gitleaks/blob/master/cmd/generate/config/rules/launchdarkly.go) rule is not detecting [LaunchDarkly Access Tokens](https://docs.launchdarkly.com/home/account-security/api-access-tokens). **To Reproduce** `gitleaks detect -v` on a git repo with a LaunchDarkly Access Token. ([example key](https://docs.gitguardian.com/secrets-detection/secrets-detection-engine/detectors/specifics/launch_darkly_personal_token)) **Expected behavior**...

There should be logic that requires the sponsor username to be different than the sponsored username. You shouldn't be able to sponsor yourself!