Conversation
Dev -> Stable 2.8.4
Automated Docs Update
Replace the single PR-author org membership check with a unified step that iterates all committers on the PR and checks each against: 1. GitHub API account type (type == "Bot" for App accounts) 2. Org membership Commits with no associated GitHub login are treated as non-exempt (prevents bypass via spoofed email with no GitHub account). Tested on aconite33/cla-workflow-test: - Human committer: correctly required CLA - github-actions[bot]: correctly skipped via API type check
Tested on aconite33/cla-workflow-test with only pull-requests:write and statuses:write -- both human CLA and bot skip paths work correctly. The CLA assistant uses PERSONAL_ACCESS_TOKEN (app token) for writing signatures to the remote CLA repo, not GITHUB_TOKEN.
Fix CLA workflow to skip bots and check all committers
# Conflicts: # .github/workflows/cla.yml
Merge stable into dev to resolve CLA workflow conflict
Merge dev into stable: CLA workflow update
More Adjectives
Contributor
📊 Performance Benchmark Report
📈 Detailed Results (All Benchmarks)
🎯 Performance Summary+ 1 improvement 🚀
23 unchanged ✅🔍 Significant Changes (>10%)
🐍 Python Version 3.11.15 |
Codecov Report❌ Patch coverage is Additional details and impacted files@@ Coverage Diff @@
## 3.0 #3022 +/- ##
======================================
- Coverage 91% 91% -0%
======================================
Files 440 440
Lines 37685 37560 -125
======================================
- Hits 34104 33973 -131
- Misses 3581 3587 +6 ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
- Update deps_pip and pyproject.toml to baddns~=2.1.0 - Pass self.scan.helpers.dns.blastdns as dns_client (was .resolver) - Replace MODERATE confidence level with MEDIUM to match baddns 2.1.0
Fix docs pipeline, again
Bumps [ruff](https://github.com/astral-sh/ruff) from 0.15.10 to 0.15.12. - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.15.10...0.15.12) --- updated-dependencies: - dependency-name: ruff dependency-version: 0.15.12 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
headers: 1150 → 289 (-75%); removed pecl_http C constants, CGI env vars, HTTP status reason phrases, PHP superglobals, Apache module names, WAP-era device cruft, defunct platforms (BAE/FirePHP/Tomboy/Mosso/Prototype.js/ Hixie-76 WebSocket/RFC2965 Cookie2), per-app webhook signatures and CSRF headers, and joke/typo/fragment entries. parameters: 6514 → 5224 (-20%); removed case-insensitive duplicates, numbered single-app dump residue (u1-u50, sql* series), pfSense WebGUI form fields, SMF install fields, phpMyAdmin admin-form fields, phpBB forum-specific entries, ID3 audio-tag tool entries, all 1- and 2-letter entries, and 3-letter entries that aren't well-known abbreviations.
…ute_short options
…/ruff-0.15.12 Bump ruff from 0.15.10 to 0.15.12
Updates the requirements on [pytest](https://github.com/pytest-dev/pytest) to permit the latest version. - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@8.3.1...9.0.3) --- updated-dependencies: - dependency-name: pytest dependency-version: 9.0.3 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>
…ing http protocols
…t-cleanup Paramminer Cleanup / Update
Neo4j fix - serialize host_metadata
Contributor
|
I have read the CLA Document and I hereby sign the CLA 3 out of 8 committers have signed the CLA. |
enhancement: in fingerprintx, emit `URL_UNVERIFIED` event upon detecting http protocols
inspect.getsource(cls) relies on linecache heuristics that mis-anchor on Python 3.13+ and can return a single indented attribute line, which ast.parse rejects with IndentationError. Read the whole source file instead — each baddns submodule is one class per file.
Contributor
|
recheck |
fix(test): parse baddns submodule source from file (Py 3.13+ fix)
The url_full YARA rule and the full_url_regex / full_url_regex_strict post-filters all required hosts to be word-character labels, so URLs with bracketed IPv6 hosts (http://[2001:db8::1]/, http://[::1]:8080/...) were dropped at extraction time. Add a [0-9a-fA-F:]+ alternative to the host part of all three patterns so IPv6 URLs are emitted as URL_UNVERIFIED events alongside DNS-name URLs. Adds bbot/test/test_step_1/test_excavate_url_regexes.py — 6 cases that pin both the new IPv6 acceptance and a regression guard for the existing DNS-name / IPv4 URLs. Closes #1815
Adds linktr.ee profile detection to the existing social module, alongside LinkedIn / GitHub / Discord / etc. The username pattern is the 3-30 character window of [a-zA-Z0-9._] that Linktree uses on its sign-up page. Extends test_module_social.TestSocial with a Linktree fixture and asserts both the canonical url and profile_name fields on the emitted SOCIAL event. Closes #2399
Closes #1876. Hetzner offers S3-compatible Object Storage at three locations (Falkenstein fsn1, Nuremberg nbg1, Helsinki hel1), addressed at https://<bucket>.<location>.your-objectstorage.com/. cloudcheck already ships a Hetzner provider, so this just plugs a new bucket_hetzner module into the existing bucket_template: - regions = ['fsn1', 'nbg1', 'hel1'] - all three Object Storage locations documented at https://docs.hetzner.com/storage/object-storage/overview/ - base_domains = ['your-objectstorage.com'] - supports_open_check = True (S3 list-bucket protocol) Adds a focused smoke test verifying the module wires up to the cloudcheck Hetzner provider and emits the documented URL shape. The shared Bucket_Amazon_Base inherited test pattern depends on the cloudcheck regex capturing bucket + host as separate groups, but Hetzner's current cloudcheck regex matches <bucket>.your-objectstorage.com without a region segment - so the smoke-test layout is used here until the cloudcheck regex is region-aware.
Add Linktree to social module (#2399)
…/pytest-gte-8.3.1-and-lt-10 Update pytest requirement from <9,>=8.3.1 to >=8.3.1,<10
Updates the requirements on [uvicorn](https://github.com/Kludex/uvicorn) to permit the latest version. - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](Kludex/uvicorn@0.32.0...0.46.0) --- updated-dependencies: - dependency-name: uvicorn dependency-version: 0.46.0 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>
Add Hetzner Object Storage bucket-cataloger module (#1876)
Excavate: extract IPv6 URLs (#1815)
…/uvicorn-gte-0.32-and-lt-0.47 Update uvicorn requirement from <0.40,>=0.32 to >=0.32,<0.47
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
8 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.