nishils

Integrate against Clair for Docker image scanning

2

This will take some work as Clair would need to be external to Salus. We would add support for pushing images to Clair and getting the results. We can provide...

Add Support for lockfile-lint (NPM/Yarn)

1

https://github.com/lirantal/lockfile-lint/tree/master/packages/lockfile-lint https://github.com/lirantal/lockfile-lint/issues/10

https://github.com/securego/gosec/issues/394

Want to track this issue here: https://github.com/securego/gosec/issues/393

Provide Default Regexes

1

It would be cool if we can reference https://github.com/dxa4481/truffleHogRegexes/blob/master/truffleHogRegexes/regexes.json and use it as a default source of regexes for the PatternMatch scanner. This should be an easy add.

Are authentication tags validated?

2

Hi there, I can't get authentication tags to validate when using chacha20-poly1305. Decryption works just fine but when I purposefully mangle the authentication tag or the additional authenticated data (aad),...

Pasting into Mail Compose Window Doesn't Paste

1

When pasting data into the mail compose window, it does not paste.

In Github actions, Tufflehog flags the SHA pin of a Cloudflare action as an unverified Cloudflare secret

1

Please review the [Community Note](https://github.com/trufflesecurity/trufflehog/blob/main/.github/community_note.md) before submitting ### TruffleHog Version latest via the docker registry ### Trace Output ### Expected Behavior Do not flag cloudflare actions that are SHA pinned...