December 2024

Welcome to the December 2024 release notes! This month, GitGuardian introduces several key updates, including enhanced security through new secrets detection capabilities, API improvements, and an updated settings navigation. Here’s what’s new:

• Secrets Detection: Added support for check runs on GitHub forked repositories and secret pattern exclusions for more precise incident management.
• Platform: Redesigned menu with a collapsible sidebar for easier navigation.
• SCIM Integration: Now supports user deprovisioning based on changes in your Identity Provider (IdP).

Read on for a detailed look at the latest features and improvements.

December 23, 2024

  Secrets Detection

• Secrets detection engine upgrade to version 2.129.1:
  • Added 1 detector:
    • GitLab OAuth Application Token
  • Modified 4 detectors:
    • Base64 Generic High Entropy Secret
    • GitGuardian Test Token Checked
    • MSSQL Credentials
    • Zendesk Token

  Fixes

• Check runs: Updated messages to note flagged secrets lack commit references and remain compromised once leaked.
• Validity check: Fixed an issue where the tooltip incorrectly indicated a token was valid for all endpoints when it was valid for only one.
• Jira issue tracking: Fixed issue where line feeds (\n) were not properly translated to hardBreak nodes, ensuring correct spacing in Jira tickets.

December 12, 2024

  Secrets Detection

• Secrets detection engine upgrade to version 2.128.0:
  • Added 4 detectors:
    • Jenkins API token
    • chpasswd Username Password
    • Nessus Agent Key
    • Statsig Server Secret Key
  • Modified 1 detector:
    • FTP credentials assignment

  Platform

• Navigation: The menu has been redesigned with a collapsible left sidebar for a cleaner, more organized experience.
• VCS integration: Workspace Managers can now disable automatic repository monitoring in GitGuardian, giving you more control when adding new repositories to your perimeter. For an example, see GitHub integration.

  Fixes

• Health Check: Fixed issue where health checks were run for all GitHub installations. Now only the first installation is checked.

December 05, 2024

  Secrets Detection

• Check runs: Business workspaces now have the option to improve their code security by enabling GitGuardian check runs on their GitHub forked repositories. Learn more here.
• Secret pattern exclusion: It allows users to define patterns and therefore hide any secret matching the pattern defined. Secret pattern can be applied to all repositories or a defined set of repositories. It provides greater control over exclusion rules, allowing for more precise management of incidents. Learn more.

  Platform

• Navigation: The menu has been redesigned with a collapsible left sidebar for a cleaner, more organized experience.
• User management: SCIM integration allows user deprovisioning in GitGuardian based on changes in your Identity Provider (IdP). User accounts can be automatically deactivated or deleted when removed from your IdP. User and team provisioning will be supported in a future update. For setup details, refer to our documentation.

  Fixes

• Performance: Fixed an issue to retrieve the memberships, which sometimes lead to "504 Gateway Time-out" errors.