Past release notes
Browse all past GitGuardian SaaS releases, feature updates, and hotfixes below.
December 23, 2024
Secrets Detection
- Secrets detection engine upgrade to version 2.129:
- Added 1 detector:
- Modified 4 detectors:
Bug fixes
- Check runs: Updated messages to note flagged secrets lack commit references and remain compromised once leaked.
- Validity check: Fixed an issue where the tooltip incorrectly indicated a token was valid for all endpoints when it was valid for only one.
- Jira issue tracking: Fixed issue where line feeds (\n) were not properly translated to hardBreak nodes, ensuring correct spacing in Jira tickets.
December 12, 2024
Secrets Detection
- Secrets detection engine upgrade to version 2.128:
- Added 4 detectors:
- Modified 1 detector:
Platform
- Navigation: The menu has been redesigned with a collapsible left sidebar for a cleaner, more organized experience.
- VCS integration: Workspace Managers can now disable automatic repository monitoring in GitGuardian, giving you more control when adding new repositories to your perimeter. For an example, see GitHub integration.
Bug fixes
- Health Check: Fixed issue where health checks were run for all GitHub installations. Now only the first installation is checked.
December 5, 2024
Secrets Detection
- Check runs: Business workspaces now have the option to improve their code security by enabling GitGuardian check runs on their GitHub forked repositories. Learn more here.
- Secret pattern exclusion: This feature allows users to define patterns and therefore hide any secret matching the pattern defined. Secret pattern can be applied to all repositories or a defined set of repositories. It provides greater control over exclusion rules, allowing for more precise management of incidents. Learn more.
Platform
- User management: SCIM integration allows user deprovisioning in GitGuardian based on changes in your Identity Provider (IdP). User accounts can be automatically deactivated or deleted when removed from your IdP. User and team provisioning will be supported in a future update. For setup details, refer to our documentation.
- Jira Cloud Issue tracking integration: Introduced a template selection dropdown for manual ticket creation.
Bug fixes
- Performance: Fixed an issue that occasionally caused "504 Gateway Timeout" errors when retrieving memberships.
November 18, 2024
Secrets Detection
- Secrets detection engine upgrade to version 2.126:
Platform
- API: A new parameter,
send_email: true|false
, is now available on endpoints that trigger an email notification, such as when an invitation is created. This allows you to determine whether an email should be sent when using these endpoints. By default, if the parameter is not specified, the email will be sent. - Health Check: Distribute health checks over time rather than executing them simultaneously. This reduces system load, avoids bottlenecks, and enhances monitoring accuracy.
- GitLab integration: Give the ability to configure an instance-level GitLab integration using a read-only admin token. However, since the token lacks permissions for creating system hooks, manual setup is required. Learn more.
Bug fixes
- Historical Scans:
- Fixed UI count on the perimeter page so that "sources successful" now shows the total count of monitored sources, regardless of failed or unscanned sources.
- Standardized the date format for start and end dates in the status tooltip.
- Corrected the repo size display in the status tooltip.
- Incidents: Notify team leaders only when a valid secret is intentionally ignored.
November 4, 2024
Secrets Detection
- Secrets detection engine upgrade to version 2.125:
Platform
- API: All Sources endpoints
now require specific scopes for access. The new
sources:read
scope is required for all GET endpoints to retrieve source information, while thesources:write
scope is required for the PATCH endpoint to update a source's attributes, monitoring status, and business criticality. - Settings: To improve navigation on the
settings page,
we’ve introduced two new dedicated sections:
- Integrations: Organized by source and destination for easier access.
- Secrets: Consolidates items previously found under the "Secrets Detection".
October 28, 2024
Platform
-
ServiceNow Issue tracking integration: This new issue tracking integration allows to create ServiceNow issues from GitGuardian incidents. The feature includes the following:
- possibility to create a ServiceNow issue directly from a GitGuardian incident;
- possibility to automate the creation of a ServiceNow issue for any new Gitguardian incident;
- auto-resolve setting to mark the incident as resolved in your dashboard when the issue is closed in ServiceNow.
Follow our documentation to configure the integration.
October 21, 2024
Secrets Detection
- Secrets detection engine upgrade to version 2.124:
- Added 1 detector:
- Modified 5 detectors:
Platform
- Check runs: GitHub's custom properties can now be leveraged to override the GitGuardian global configuration of check runs. This allows customization at both the repository and organization levels. For more details, please refer to our dedicated documentation
- Historical Scan:
- New "Bulk Historical Scans Management" page for easy tracking, filtering, and detailed insights on all scans.
- Simplify source management with a new filter for instances (e.g., production/staging).
- Members: You now have the option to deactivate a member instead of deleting them. For more details, refer to our documentation.
Bug fixes
- Validity check: Fixed GitLab checker wrongly marking some secrets as valid by improving token validation (impacting custom host validity checks).
- Perimeter: Fixed inaccurate historical scanning statistics displayed on the side panel of the perimeter page.
October 17, 2024
Secrets Detection
- Filepath exclusion: File path exclusions are now applicable to one or more repositories. By targeting file path exclusions to specific repositories, users can significantly reduce the number of irrelevant incidents, enabling more accurate incident management. Learn more.
October 14, 2024
Platform
- Analytics Charts: A new page is available in the Analytics menu. This new feature is available for all business users. Analytics Charts is a powerful feature designed to help you visualize and understand your incidents over time. Whether you are a developer, security lead, or manager, Analytics Charts provides valuable tools to track progress, measure performance, and make informed decisions. Access the Analytics Charts.
October 7, 2024
Secrets Detection
- Secrets detection engine upgrade to version 2.122: Enhance recall and
coverage while expanding the range of detectable secrets with new and updated
detectors.
- Added 3 detectors:
- Modified 1 detector:
- VSCode extension: We are excited to announce the release of GitGuardian CLI (ggshield) as a VS Code extension! Files are now automatically scanned upon saving, with detected secrets highlighted in your code and listed as warnings. Additionally, custom remediation messages are provided within your IDE to guide you in resolving any issues efficiently. Download from the marketplace
September 23, 2024
Secrets Detection
- Jira Data Center integration: Jira Data Center integration is now supported for real-time secret detection and honeytoken detection.
Platform
- Saved views: Saved views can now be created in Honeytoken.
Bug fixes
- Personal access token: Resolved a bug to ensure the lifetime of a newly generated personal access token is strictly less than the maximum permissible duration.
September 9, 2024
Secrets Detection
- Confluence Data Center integration: Confluence Data Center integration is now supported for real-time secret detection and honeytoken detection.
- Slack integration: Slack integration is now supported for scanning the full history of your public and private Slack channels to detect leaked secrets.
Platform
- IP allowlist: Managers can now restrict access to the dashboard and API to specified IP addresses or ranges for enhanced security. This feature is available only for Business accounts. Refer to our documentation for more details.
- Historical Scan: Streamline source management with new filters for failure reasons and last scan date.
Bug fixes
- Historical Scan: Improved handling of pending states and fixed an issue where sources were reaching the timeout limit.
August 26, 2024
Secrets Detection
Secrets detection engine upgrade to v2.120: Enhance recall and coverage while expanding the range of detectable secrets with updated detectors.
- Added 2 detectors:
- Modified 6 detectors:
Note concerning the reCAPTCHA Key detector: Due to changes in the behavior of some Google APIs, we are no longer able to ensure the validity of reCaptcha keys. As this detector could be quite "noisy" the validity of the keys was a mandatory prerequisite in the detection flow and this can no longer be the case. We have however improved this detector to be as efficient as possible.
Bug fixes
- Jira Cloud Issue tracking integration: Fixed an issue where the assignee dropdown in Jira template creation was incomplete for projects with a large number of assignees due to pagination limits.
August 14, 2024
Secrets Detection
- Secrets detection engine upgrade to version 2.117: Enhance recall and
coverage while expanding the range of detectable secrets with new and updated
detectors.
- Added 2 detectors: Serpapi Token and Tavily API Key
- Modified 1 detector: GitLab Token
- Validity check: Business workspaces that self-host service providers can now perform validity checks. They can specify the host against which to run a check in the configuration of separate secret detectors. For example you can perform a validity check for a GitLab token secret against your own GitLab instance. For more details, refer to our dedicated documentation.
Platform
- GitGuardian CLI (ggshield) custom remediation message: Admins can now customize remediation messages at pre-commit, pre-push or pre-receive stages and provide to developers useful guidance on how to use internal Vaults etc ... See documentation here.
- Saved views: You can now save your most frequently used filters as views for quicker access. Learn more about about saved views here.
- Historical Scan Enhancements: These enhancements provide better visibility and management of the scanning process. They include progress estimation for both individual and bulk scans, along with comprehensive scan status details such as size, duration, start/end dates, number of commits, branches, queue duration, and more.
- Health Check: Let managers manually start health checks from the GitGuardian dashboard so they can address any failed checks immediately without waiting for the next scheduled run.
- Teams: Get simplified team management with a clear designation of team
leaders. Changing "can_manage|cannot_manage team permissions" to a "team
leader" boolean attribute to designate the team owner. ⚠️ The
team_permissions
field has been deprecated and replaced by theis_team_leader
field in our API for the endpoints/v1/teams/{team_id}/team_memberships
and/v1/teams/{team_id}/team_invitations
.
July 29, 2024
Secrets Detection
- False Positive Remover v1: Our first internal machine learning model halves false positives, ensuring data security and privacy without third-party dependencies. This in-house capability is now available to all Business and Enterprise accounts.
- Remediation tracking: Enhanced the secrets remediation workflow with precise location details for code fixes and real-time tracking of remediation progress. Learn more here.
Platform
- GitLab integration: Upon installing a new integration for GitLab Community Edition, it is now possible to skip the historical scan (to launch it manually later).
Bug fixes
- Microsoft Teams integration: Fixed an issue impacting real-time secret detection in Microsoft Teams channels.
July 15, 2024
Secrets Detection
-
Microsoft Teams integration: Microsoft Teams integration is now supported for real-time secret detection and honeytoken detection.
-
Secrets detection engine upgrade to version 2.116: Enhance recall and coverage while expanding the range of detectable secrets with new and updated detectors.
Added 1 detector
Modified 3 generic detectors
Modified 78 specific detectors
We have enhanced our approach to searching for the prefix linked to the secret, considering more complex scenarios. This allows us to improve recall.
- Adafruit IO API Key
- Airtable API Key v2
- Alchemy API Key
- Amazon MWS Token
- Checkout.com Sandbox API Secret Key
- CircleCI Personal Token
- Claude API Key
- Clojars Deploy Token
- Cloudinary API key URL
- Contentful Content Management API Key
- DigitalOcean OAuth Application Token V1
- DigitalOcean Personal Access Token V1
- DigitalOcean Refresh Token V1
- Discord Webhook URL
- Docker Swarm Join Token
- Docker Swarm Unlock Key
- EasyPost API Key
- Firebase Cloud Messaging API Key
- Figma Personal Access Token
- Flutterwave API Key
- Frame IO Token
- GitHub fine-grained personal access token
- GitHub Oauth Access Token
- GitHub Personal Access Token
- GitHub Server-to-server Token
- GitHub User-to-server Token
- GitLab Token
- Grafana Cloud API Key
- Grafana Service Account Token
- Groq API Key
- Heartland API key
- Langchain API Key
- Linear API Key
- Base64 Midtrans API Key
- Notion Integration Token
- npm Token Prefixed
- Nylas API Key
- OpenAI Project API Key
- Paystack Key
- Plaid Access Token
- PlanetScale OAuth Token
- Postman API Key
- PubNub Publish Key
- Readme API Key
- Riot Games API Key
- RubyGems.org API Key
- Samsara API Key
- SendinBlue Key v3
- Sentry Org Auth Token
- Sentry User Auth Token v2
- Shippo API token
- Shopify Generic App Token
- Shopify Private App Token
- Slack App Token
- Slack Configuration Refresh Token
- Slack Configuration Token
- Slack User Token
- Sourcegraph Access Token v3
- Sourcegraph Enterprise subscription Token
- Sourcegraph License Key Token
- Sourcegraph Access Token v2
- Sourcegraph User Gateway Access Token
- Sqreen Token
- Square Access Token
- Stripe Webhook Secret
- Tailscale API Key
- Tailscale OAuth Key
- Tailscale Pre-Authentication Key
- Tailscale SCIM Key
- Tailscale Webhook Key
- Typeform API Token
- Ubidots Token
- Vercel Blob Token
- WakaTime API Key
- WePay token
- Yandex Predictor API Key
- Zillow Key
- Zuplo API Key
-
Incidents: When an incident is ignored with a secret still valid, an email notification is sent to the team manager(s) or to the workspace manager. N.B: this feature is available in the business plan.
-
Weekly email recap: From now on, a new section is displayed in the weekly email recap displaying the number of ignored incident with a secret still valid in the last week. N.B.: this feature is available in the business plan.
SCA
- .NET Support: Scans dependencies for C#, F#, and Visual Basic, broadening the language support.
- Improved Java Support: Transitive dependencies are now scanned in Maven, providing more comprehensive security coverage.
Platform
- Historical Scan:
- Skip historical scan of unchanged repositories since the last scan to save time and resources.
- Filter and sort repositories by scan duration on the Perimeter page for better management.
- Introduced
pending_timeout
status in the API to differentiate between scans failing due to timeouts (timeout
) and those in the queue (pending_timeout
).
- API Enhancements: User feedback on secret incidents is now accessible via
the API, providing better incident management and insights. This information
is included in the
feedback_list
field within the secret incidents' payload - Settings: The data storage location region is now visible in your workspace settings.
Bug fixes
- Check runs: Addition of an optional
Skip
action for check runs on forked repositories that detect secrets, preventing a complete blockage for developers.
June 24, 2024
Secrets Detection
- Incident details: Addition of a 'per page' selector on the occurrences table.
Platform
- Members: Renamed 'role' to 'access level' for clarity.
⚠️ Therole
field has been deprecated and replaced by theaccess_level
field in our API for the endpoints/v1/members
and/v1/invitations
.
June 17, 2024
Secrets Detection
- Secrets detection engine upgrade to version 2.115: Enhance recall and
coverage while expanding the range of detectable secrets with new and updated
detectors.
- 4 detectors added: Sentry Org Auth Token, Sentry User Auth Token v2, Slack Configuration Refresh Token, Slack Configuration Token
- 5 detectors updated: Equinix Authentication Token, Sentry User Auth Token v1, Signifyd API Key, Slack Bot Token, Slack User Token
Bug fixes
- Filepath exclusion: Correct a bug that causes the
*
character in the exclusion pattern to match at least one character when it should match zero or more characters.
June 10, 2024
Secrets Detection
- Confluence Cloud integration: Confluence Cloud integration is now supported for real-time secret detection and honeytoken detection.
June 4, 2024
Secrets Detection
- Secrets detection engine upgrade to version 2.114: Enhance recall and
coverage while expanding the range of detectable secrets with new and updated
detectors.
- 9 detectors added: ASP.NET Decryption Key, ASP.NET Validation Key, Langchain API Key, OpenAI Project API Key, OpenAI Service Account, Sourcegraph Enterprise Subscription Token, Sourcegraph License Key Token, Sourcegraph User Gateway Access Token, WakaTime API Key
- 4 detectors updated: Sentry Token, Generic Database assignment, Generic FTP Assignment, Generic Username Password
- Incidents: Periodic secret validity checks enabled for ignored incidents. See documentation here.
- Filepath exclusions: When adding a new rule, show how many new secret incidents will be hidden by the new filepath exclusion, without recalculating existing hidden incidents.
Platform
- GitLab integration: When a GitLab webhook is found disabled, GitGuardian now attempts to reactivate it automatically (by sending a test payload) before triggering an error message.
- Health Check: Send email notifications when a integration health check fails. For further details, refer to the Configure email preferences page. Note that the notification is not enabled by default for existing accounts and must be turned on manually.
SCA
- Introduction of the Malicious Package detection, to make sure we protect every organization from packages designed to be harmful.
- Highlight Dependency Confusion risk on private dependencies that were not publicly registered, to help organizations lower their exposure to Dependency Confusion attacks.
May 27, 2024
Secrets Detection
- Incidents details: merge commit authors from GitHub are now identified. It is not retroactive.
- API: new endpoint to query the secret incidents of a source.
Bug fixes
- API: fix a problem causing conflicting information between the UI and the API regarding team permissions.
- Historical scan: attribute automatic historical scans of new repositories to "GitGuardian Bot" in audit logs.
May 20, 2024
Secrets Detection
- Secrets detection engine: upgrade to version 2.113 with the addition of 5 new detectors (Nylas API Key,Sourcegraph Access Token v3, Duplo Cloud API Key,Fernet Key, Vercel Blob Token) and the improvement of 10 detectors (Base64 Generic High Entropy Secret, Generic Database Assignment, Generic High Entropy Secret, PostgreSQL CLI Credentials, Postgres assignment attached port, PostgreSQL Pgpass Credentials, PostgreSQL URI, Sourcegraph Access Token v2, Yelp API Key, Google Gemini API Key).
Platform
- Health Check:
- introduce tracking for the last execution and last successful execution times.
- implement periodic health checks to run every hour. This is a Business-only feature.
Bug fixes
- Custom webhook: fix a bug sending notifications for deactivated secret detectors.
May 13, 2024
Bug fixes
- Jira Cloud Issue tracking integration: fix an issue where Jira automatic configurations remained invisible to 'member' role users within the 'All Incidents' team, ensuring uniform visibility across teams.
May 6, 2024
Platform
- API: the
workspace_id
is now included in the payload of API tokens. - Historical scan: improve historical scan status overview on the perimeter page side bar.
Bug fixes
- Bitbucket Data Center integration:
- fix an issue where uninstalling a Bitbucket project inadvertently occurred when a token was removed, despite other valid tokens being present.
- enhance logging mechanisms surrounding Bitbucket token operations for better troubleshooting.
- Check runs: display accurate error message when a check run fails due to rate limiting.
April 29, 2024
Bug fixes
- API: correct a bug that allowed members to view sources they should not
have been able to access when using the
/sources
endpoint. - Check runs: fix a bug that is causing related incident IDs to be missing in the check run summary.
April 23, 2024
Secrets Detection
- Secrets detection engine: upgrade to version 2.111 with the addition of 3 new detectors (Grafana Cloud API Key, Groq API Key, Nx Cloud Token) and the improvement of 1 detector (Generic High Entropy Secret)
Platform
- Filters: the history of AI queries can now be deleted.
Bug fixes
- GitLab integration: when re-enabling a disabled webhook in GitLab, the error on the GitGuardian dashboard is now cleared automatically within 20 minutes.
- Filters: the "per-page" selection for each table is now persisted.
April 16, 2024
Platform
- Vault integration: CyberArk, a leader in privileged access management, helps secure, manage, and monitor privileged accounts and credentials. This integration leverages CyberArk to securely manage secrets and automate secret rotation, enhancing security alongside GitGuardian's leak detection capabilities. Refer to our documentation for more details.
April 15, 2024
Secrets Detection
- Secrets detection engine: Generic CLI Secret and Generic Database Assignment detectors are now supported and active by default for data sources other than VCS.
- Secrets detection engine: upgrade to version 2.110 with the addition of 4 new detectors (Dropbox Key, Midtrans API Key, Sanity Token, Zuplo API Key) and the improvements of 3 detectors (Artifactory Token, GoCardless API Key, Plivo Auth Tokens).
SCA
- Add the last modification date of the dependency files to the SCA incidents along with the dedicated filter.
Bug fixes
- GitLab integration: fix an issue where the installation status was incorrectly displaying as 'no longer monitored' in the tooltip, despite being actively monitored.
April 10, 2024
Secrets Detection
- Jira Cloud issue tracking integration: introduction of a new version of
our Jira Cloud integration for issue tracking. It now offers
- automatic creation of a Jira issue as soon as a new incident is triggered,
- management of Jira custom fields,
- and an auto-resolve feature that marks the incident as resolved in your dashboard when the issue is closed in Jira Cloud. More information available in the documentation.
April 8, 2024
Secrets Detection
- Secrets detection engine: upgrade to version 2.109 with the addition of 2 new detectors (Azure Open AI API key, Kubernetes Docker Secret) and the improvement of 4 detectors (GitLab Token, Google API Key, Okta Keys, Slack Bot Token)
Honeytoken
- Context creation strategies for honeytoken deployment jobs now allow to choose only dynamic contexts.
Platform
- Incidents details: introduction of a secret identity card on each secret incident detail page.
- Privacy mode: this (mode) allows to obfuscate secrets and other sensitive information on the GitGuardian UI.
Bug fixes
- Incidents: resolve a bug triggered by secret incidents detected by custom detectors, causing the incidents list to fail to load.
- Check runs:
- improve error collection on check runs.
- fix an issue where GitHubNotFound errors prevented the completion of check runs.
April 2, 2024
SCA
- Shifting left metrics available in SCA analytics to demonstrate the impact of ggshield’s use in CI.
March 25, 2024
SCA
- add support for PHP dependencies.
- add the EPSS score to the incidents along with its dedicated filter.
Bug fixes
- Incidents: resolve a loading error encountered when utilizing the "occurrences count" filter.
- Audit log: correct the logs related to the creation and removal of teammates through the API.
- GitLab integration:
- fix GitLab installation check task issue affecting system hook installations.
- fix an issue with sending emails to users who are no longer token owners within the GitLab installation.
March 18, 2024
Secrets Detection
- Secrets detection engine: upgrade to version 2.108 with the addition of 3 new detectors (Snowflake API credentials, Replicate User Access Token, Workato API Key) and the improvement of 3 detectors (Rails Master Key, Generic password, Generic High Entropy secret)
- Incidents: it is now possible to filter on Occurrences count.
- Check runs: skip actions are now aligned with the ignored reasons (false
positive, test credential, low risk). Tags
(
Tagged as [false positive|test credential|low risk] in check runs
) are added to the corresponding secret incident when this action is taken. - API: the breakdown of secret incidents by severity is displayed in the payload of the sources.
Bug fixes
- Bitbucket Data Center integration: improve handling of token revocation to prevent issues when a repository changes ownership.
March 11, 2024
SCA
- SCA: add support for PHP dependencies.
Bug fixes
- Health Check: improve health check error messages by differentiating between SaaS and self-hosted environments and utilizing non-HTTP status-like codes.
- Incident details: fix an issue on the git patch restricted visibility feature that was preventing members from seeing the patch they were involved in based on email matching.
- Jira integration: fix an issue that was hindering the assignment on JIRA tickets upon creation.
March 4, 2024
Platform
- GitHub and GitHub Enterprise Server integration: the integration settings have been updated with actions to easily configure write permissions essential for Honeytoken deployment jobs. Learn more with our documentation for GitHub or GitHub Enterprise Server.
- Incidents: tags are exposed in the All occurrences CSV report.
Bug fixes
- GitLab integration:
- fix an issue where the GitLab instance URL was incorrectly displayed instead of the GitLab token name.
- remove the "Check Again" button from the health check for users on the Free plan.
February 26, 2024
Secrets Detection
- Jira Cloud integration: Jira Cloud integration is now supported for real-time secret detection and honeytoken detection.
- Secret SLAs: add the "First detected" date in incidents details and the associated filter in the Secret incident dashboard.
February 19, 2024
Secrets Detection
- Secrets detection engine: upgrade to version 2.106 with the improvement of 3 detectors (Generic Password, Generic High Entropy Secret, Base64 Generic High Entropy Secret).
Honeytoken
- Honeytoken deployment jobs: automate the deployment of honeytokens in your code repositories from GitLab, GitHub and GitHub Enterprise Server! This is a business-only feature. Read more about Deployment jobs in our documentation.
February 13, 2024
Platform
- Check runs: improve causes of errors transparency and timeouts in the check run summary.
IaC
- IaC Security: shifting left metrics available in IaC analytics to demonstrate the impact of ggshield’s use in CI.
Bug fixes
- Bitbucket Data Center integration: correct failure message and re-check button when the Bitbucket integration stops working.
- Historical scan: fix an issue with missing audit logs for historical scans.
- GitHub integration: performance improvement when a lot of repositories are added at the same time.
February 6, 2024
Bug fixes
- Bitbucket integration:
- fix an issue which revoke the access token when the project only has read permission.
- syncing installs with a new token now correctly retains projects linked to the old token, preventing unintended deletion of all projects.
January 29, 2024
Secrets Detection
- Secrets detection engine: upgrade to version 2.105 with the addition of 1 new detector (Square Token).
Platform
- Incidents: exporting CSV secret incidents now allows changing the separator used, comma (default) or tab. More details in the Export data section of the documentation.
- Check runs: the incident status is displayed in the GitHub check run details.
January 22, 2024
Secrets Detection
- Secrets detection engine: upgrade to version 2.104 with the addition of 2 new detectors (Bunny.net API Key, Hugging Face user access token) and the improvement of 4 detectors (Beamer API Key, NuGet API Key, Paypal OAuth2 Keys, Twitter Tokens).
- Secrets detection: for a better recall experience, all detectors are now activated by default on every new workspace and on existing workspaces under the Free plan. 3 detectors used to be deactivated by default: Generic Password, Username password and Base64 Generic High Entropy Secret.
Platform
- SSO: the option 'Force SSO' applies to owners as well when enabled. More details in the Force SSO section of the documentation.
- Azure repos integration: improvement of the billing metrics. You now must
check the
Graph:Read
scope in your Personal Access Token. More information in our VCS integrations documentation.
Bug fixes
- GitHub integration: disable repositories are now marked as such when searching GitHub integrations.
- GitLab integration (group hooks): we now detect and notify by email and raise a healthcheck error when a GitLab group hook was disabled by GitLab, causing the monitoring not to work anymore.
January 15, 2024
Secrets Detection
- Secrets detection engine: upgrade to version 2.103 with the addition of 4 new detectors (CircleCI Project Token, Claude API Key, Grafana Service Account Token With Host, Klaviyo API Key) and the improvement of 4 detectors (CircleCI Personal Token, Django Secret Key, Generic High Entropy Secret, Heroku Platform Key).
January 9, 2024
Secrets Detection
- Slack integration: Slack integration is now supported for real-time secret detection and honeytoken detection.
- Incident details: update of the default remediation workflow.
- Secret incidents: addition of 2 new columns (
element_url
,author_name
) in the CSV report of secret occurrences to support other data sources. - API: addition of
hsml_hash
in the payload of secret incidents. Thehsml_hash
is used to discover the potential public leaks of your secrets using Has My Secret Leaked.
IaC
- IaC Security: addition of a new tag named
Ignored using ggshield
to highlight incidents ignored using ggshield. - IaC Security: addition of a new playbook for auto ignoring incidents that are ignored using ggshield. This is a Business-only feature and can be deactivated.
Platform
- Check runs: the preview of the "How to remediate" instructions in markdown is enhanced when you customize them.
- Custom detectors: improve error messages for invalid regex when requesting a custom detector.
Bug fixes
- GitLab integration: fix an issue where revoked tokens weren't detected as such if not actively used by a configured GitLab group.
- Force SSO activation: fix an issue where authentication page “Force SSO Toggle” enabled “By default to all incident team” toggle as well.
December 11, 2023
Secrets Detection
- Secrets detection engine: upgrade to version 2.102 with the addition of 8 new detectors (Base64 AWS IAM Keys, Base64 AWS SES Keys, Readme API Key, Tailscale API key, Tailscale oauth key, Tailscale pre-auth key, Tailscale SCIM key, Tailscale webhook key) and the improvement of 1 detector (Vercel API Access Token).
IaC
- IaC Security: Azure Repos integration is now supported for monitoring your IaC misconfigurations.
November 27, 2023
Features
- Azure Repos integration: the monitoring of your Azure Repos repositories is now done in real-time. Refer to the documentation for more details.
- Filters: a new way of filtering pages, more streamlined and intuitive.
- Jira Cloud integration: jira issues can now be created without assigning them to anyone.
- Source criticality: a new parameter at the source level to help users prioritize their Secret, SCA, and IaC incidents. Refer to the documentation for more details.
- SCA & IaC grant access: access can now be granted to Members on specific SCA and IaC incidents.
- IP allow-listing for Honeytoken: it is now possible to add IP ranges to an allow-list, ensuring events from these IPs won’t trigger the honeytokens. Learn more about IP rules.
- Secrets detection engine: upgrade to version 2.101 with the addition of 1 new detector (Airtable API Key v2) and the improvement of 4 detectors (Generic High Entropy Secret, New Relic API Service Key, GitLab Enterprise Token, GitHub App Keys).
Bug fixes
- API: fix
/secret_detectors
endpoint to filter out detectors that have been administratively disabled by GitGuardian.
November 15, 2023
Features
- Incident details: listing of places where secrets have been publicly leaked.
- Secrets detection engine: upgrade to version 2.100 with the addition of 2 new detectors (Sourcegraph Token, Cohere API Key) and the improvement of 2 detectors (Jira Token, Atlassian Oauth2 Keys).
Bug fixes
- GitHub integration: handling of GitHub app ownership transfer: It is now possible to change ownership without deleting the self-hosted application.
- Incidents: filtered results in CSV export: CSV export keeps the filters applied.
- GitHub integration: improvement of checkruns to support the GitHub Merge Queue feature.
October 30, 2023
Features
- IaC Security: introduction of a new "Source Criticality" field and filter to help prioritization of IaC incidents (for IaC beta testers only). Note that the Source Criticality must first be defined in the Perimeter page.
- Teams: users can now filter the incidents and the perimeter pages based on their teams. Managers have the flexibility to filter any team, while Members can only filter their own teams.
- Secrets detection engine: upgrade to version 2.99.1 with the addition of 2 new detectors (Google Bard, Webflow API token) and the improvement of 4 detectors (Microsoft Azure Storage Account key, SSH credentials, Generic High Entropy Secret, Generic password).
Bug fixes
- Azure repos integration: installation status now persistently remains until completed during user navigation.
- Azure repos integration: removing a token no longer causes a crash in other installation.
- Bitbucket Data Center integration: prevents connection errors from revoking a Bitbucket token, letting instances go through maintenance without needing to re-enter their token afterwards.
October 16, 2023
Features
- Incident details: git patches of occurrences can now have restricted visibility to only the teams and developers involved with the occurrence, thanks to a workspace setting.
- Incident details: if the git patch of an occurrence is too large, a link to the Version Control System is displayed instead.
- API: New endpoint to retrieve secret incidents of a team.
- IaC Security: introduction of new remediation analytics accessible on the platform (for IaC beta testers only).
- ggshield: ggshield auth login flow now asks you to confirm scopes.
Bug fixes
- Teams: fix a bug that caused incidents belonging to an unmonitored repository to still be visible to the team.
October 3, 2023
Features
- Historical scan: addition of some details in the status tooltip, including scan duration and number of commits and branches scanned. For failed scans, the tooltip now also displays the reason for the failure.
- API: a rate limiting is now applied. Refer to our documentation for more details.
- Secrets detection engine: upgrade to version 2.98 with the addition of four new detectors (Aiven, Infracost API Key, Rollbar API Access Token, Vercel API) and the improvement of 2 detectors (Okta Keys, Username Password).
September 28, 2023
Features
- Incidents: addition of the
Publicly leaked
tag to secret incidents that have been leaked outside of your perimeter on public GitHub. Refer to our documentation for more details.
September 21, 2023
Features
- Incident details: a limit of 1000 occurrences per incident is now in place.
- Onboarding: addition of links redirecting to the
Get Started
page in the notifications when the first scan is complete. - Secrets detection engine: upgrade to version 2.97.
- Alerting integrations: alerting integrations are now available at team level. More information in our teams documentation.
Bug fixes
- Check runs: fix neutral check runs being created on workspaces with check runs disabled.
- Notifications: fix Linkedin link in email footer.
September 4, 2023
Bug fixes
- Custom detectors: update the message when a custom detector request cannot be edited due to its current status.
- Incident details: fix a bug causing the absence of an expiration date on public share links generated by the Auto-healing playbook.
- Health check: prevent UI from crashing on unknown Health check error code.
- API: fix timeout issues on the
/occurrences/secrets
endpoint when using a date filter. - SSO: fix conflict happening when signing up via SSO while having a pending invitation.
August 22, 2023
Features
- IaC Security: addition of a waiting list for joining the IaC beta program.
- IaC Security: introduction of monitoring and remediation IaC features on GitGuardian's platform.
- IaC Security: introduction of new ggshield pre-commit, pre-push, pre-receive and ci IaC subcommands.
- Secrets detection engine: upgrade to version 2.96 with the addition of two new detectors (Generic Terraform Variable Secret, CARTO API Access Token) and the improvement of 2 detectors (Generic Password, Base64 Basic Authentication).
August 7, 2023
Features
- Incidents: addition of a waiting list for the upcoming feature of secret detection in data sources other than VCS.
- Incident details: the public sharing is now a workspace setting.
- Secrets detection engine: upgrade to version 2.95 with the addition of two new detectors (Databricks Authentication Token With Hostname, Hashicorp Vault Token).
Bug fixes
- Incidents: fix the sorting of incidents by severity when some severities are automatically set.
- Incidents: fix wrong occurrence count on incident page.
- Incidents: the tooltip displaying the sources is now displayed correctly.
- Custom webhook: fix duplicate notifications being sent when setting incident severity using a bulk action.
- API: fix invalid link in personal access token expiration email notification.
July 25, 2023
Bug fixes
- Custom webhook: fix notifications for when a bulk action is performed. Previously, only one notification would be sent for the first incident affected by the bulk action. However, now notifications are sent for each incident that is modified by the bulk action.
July 24, 2023
Features
- Incident details: the public sharing toggle has been moved to the "Grant access" modal, which has been renamed to the "Share" modal. For a more detailed explanation, please refer to our collaboration and sharing documentation.
- Incidents: add an explanation tooltip to the "Default branch" tag.
- Integrations: modification of the Integrations and Settings/Integrations pages.
- Secrets detection engine: upgrade to version 2.94 with the addition of four new detectors (Azure Active Directory API Keys, Docusign API Key, Pinecone API Key, Pinecone API Key and environment) and the improvement of two detectors (Generic Password, Coveralls Personal Token).
Bug fixes
- Personal access tokens: personal access tokens can now be searched by name, and ordering by name now works correctly.
July 10, 2023
Features
- Incident details: filters have been added to the occurrences table.
- Honeytokens: addition of country flag next to the IP address in the events table.
- Honeytokens: new IP tagging feature: it is now possible to create custom rules to assign tags to honeytoken events based on their IP address. Use this to recognize events originating from known IP addresses, such as those internal to your organization. For more information, check out the documentation here.
- API: new endpoints to manage labels for honeytokens.
- Secrets detection engine: upgrade to version 2.93 with some detection improvements.
Bug fixes
- API: fix an error preventing the creation of an invitation when the role was not specified.
Deprecation
- Custom webhook v1: the feature has been replaced by the event-based custom webhooks. More information in the documentation here.
June 26, 2023
Features
- Incidents: addition of the
Default branch
tag to secret incidents that occurred on the default git branch of a repository. - Secrets detection engine: upgrade to version 2.92 with the addition of two new detectors (AWS SES Keys, Forest Admin API Key) and the improvement of six detectors (Atlassian Oauth2 Keys, Contentful Content Delivery API Key, Etsy Developer Key, GitLab Token, HubSpot API Key, MS Team webhook).
- API: managers of workspaces under the Business plan can now enforce a maximum lifetime for personal access tokens generated on their workspace.
Bug fixes
- PagerDuty Integration: title update in PagerDuty incidents to eliminate confusion regarding the number of occurrences.
June 12, 2023
Features
- Incident details: feedback about the incident can now be submitted in a standardized way through a form that is available on the incident's page. Refer to this page for more information on how to use this form effectively and involve your developer population during the remediation process.
- Incidents: addition of new filter to select the incidents that are publicly shared.
- Teams: team owners with the Member role can now invite brand new users to the workspace when adding teammates to their team. This is a Business-only feature and can be deactivated. For more details, please refer to this page.
- Grant access: users with
Full access
incident permissions can now invite brand new users to the workspace when granting access to an incident. This is a Business-only feature and can be deactivated. For more details, please refer to this page. - Honeytoken: a new button "How to test your honeytoken" has been added to make it easier to test the trigger and alerting mechanism.
- Honeytoken: clicking on the honeytoken
Publicly exposed
tag now opens a modal that shows all the public commits where the honeytoken was discovered by GitGuardian. - Honeytoken: it is now possible to filter events based on their tags (AWS internal, GitGuardian Public Monitoring IP).
- Honeytoken: it is now possible to manage labels from the Honeytoken settings page.
- Secrets detection engine: upgrade to version 2.91 with the addition of two new detectors (Tableau Personal Access Token, Yelp API key) and the improvement of two detectors (GitHub Access Token, OpenAI API Key).
Bug fixes
- Teams: fix a bug that prevented invitees, who already had a GitGuardian workspace, from being added to the expected teams when they accepted an invitation.
- Emails: button URLs are now hardcoded to prevent a bad user experience when the button is not visible due to HTML-escaping by email providers.
May 30, 2023
Features
- Custom severity rules: new option to recompute severity scoring manually.
- Secrets detection engine: upgrade to version 2.90 with the addition of two new detectors (Palantir JWT, Figma Personal Access Token) and the improvement of one detector (LDAP credentials).
- Honeytoken: “Created at” column has been added to the honeytoken list, and it is now possible to sort on this property.
- Honeytoken: honeytokens can now be searched by ID.
- Honeytoken: an email notification is sent when a honeytoken is found to be publicly exposed.
- API: labels are added to honeytoken endpoints.
Bug fixes
- ggshield: fix a redirection issue upon usage of
ggshield auth login
.
May 15, 2023
Features
- Custom severity rules: the severity ruleset used by the automated severity scoring is now customizable to maximize the coverage of automatically scored incidents.
- Automated severity scoring: automated severity scoring is now activated by default for all workspaces under the Free plan.
Bug Fixes
- Authentication: fix broken email confirmation link when registering with email and password.
- User signup: fix user signup email verification link.
May 2, 2023
Features
- Automated severity scoring: automated severity scoring is now activated by default for new workspaces.
- API: secret detectors are now exposed in the API
- Secrets detection engine: upgrade to version 2.89 with the addition of five new detectors: Azure Cosmos DB Credentials, Redis Server Password, DigitalOcean Refresh Token, DigitalOcean OAuth Application Token and DigitalOcean Personal Access Token.
Bug fixes
- Custom severity rule: fix wrong timeline when setting a manual severity to an incident having only an automatic severity.
- Grant access: copy-pasting now works correctly.
April 17, 2023
Features
- Incidents: filepaths can now be searched in the free text search of the secret incidents table.
- Secrets detection engine: upgrade to version 2.88 with the addition of two new detectors: Cloudinary API keys and MongoDB Atlas Keys.
Bug fixes
- Incidents: performance for loading secret incidents has been improved for workspaces with a large number of incidents.
- Loader: fix loader size in incident and Perimeter pages.
- API: comment field is now required on incident note creation endpoint.
April 11, 2023
Feature
- Honeytoken: introduction of new Honeytoken icon in the sidebar: module is coming soon! Join the waitlist to be notified when it becomes available.
April 3, 2023
Features
- Custom remediation workflow: remediation workflow is now 100% customizable thanks to the deletion of the last static step.
- Secrets detection engine: upgrade to version 2.87 with the addition of a new detector (Keycloak Api Keys).
- API: new endpoints are added for API tokens management (personal access tokens and service accounts).
- API: new fields
resolver_id
andignorer_id
are available into the secret incident payload.
Bug fixes
- VCS Integrations: Bitbucket instances can be deleted even if the account is no longer in the Business plan.
- Detectors list: when the validity checks are disabled, the detectors are sorted by status.
- Notifications: fix empty emails being sent after an occurrence was found during real time scan.
- Personal access tokens:
Restricted
users now only see the scan scope in the personal access token form.
March 20, 2023
Bug fixes
- Jira integration: Jira ticket creation CTAs are hidden for workspaces without a single Jira site installed.
- Jira integration: fix permission issues by disabling the configure button
for users without a
Manager
role and allowing users with theRestricted
role andcan edit
permissions to create a Jira ticket.
March 6, 2023
Features
- Subscription: New and existing users can subscribe to a Business plan via the AWS Marketplace.
Bug fixes
- Members: fix invitation link for new members.
February 20, 2023
Bug fixes
- ggshield:
ggshield auth login
flow now expires after 5 minutes. - Incidents: performances when filtering incidents on a detector are improved.
- VCS integrations: fix broken links to documentation.
February 15, 2023
Features
- Automated severity scoring: incident severity can now be scored and assigned automatically.
February 6, 2023
Features
- Azure Repos: addition of a loader and notifications when an organization is being installed.
- API: add filters to multiple endpoints
Bug fixes
- GitHub: fix the integration of a GitHub installation with a large number of repositories.
- Incidents: fix performance issue when filtering on detectors.
- GitHub: fix check-runs running forever by enforcing a timeout.
January 23, 2023
Features
- Alerting integration: introduction of the new Jira integration. More information available in the documentation.
- API: Specify missing scopes in error message when the API token being used doesn't include the appropriate scopes.
January 10, 2023
Features
- Azure Repos: Azure Repos integration is now available. You can scan your Azure Repos repositories for secrets detection.
January 9, 2023
Features
- IaC: add analytics page to monitor IaC scanning usage (beta).
- Perimeter: improve display of the historical scan's last status information.
Bug fixes
- Members: Restricted users can now be promoted without requiring to add them in a team.
December 21, 2022
Features
- Custom Remediation Workflow: Remediation workflow can now be customized in the settings.
December 15, 2022
Features
- VCS integrations: workspaces with less than 25 contributing developers can now monitor their private collaborative repositories for free.
- SSO: SSO configuration is enabled for all plans (free and business).
December 13, 2022
Features
- Custom webhook: addition of the new event-based custom webhook integration.
- Teams: addition of a description field for your teams.
- Teams: the "all-incidents" team is now visible in the members table.
Bug fixes
- SSO: fix "sign in" redirection for SSO connection.
November 28, 2022
Features
- API: expose
external_id
representing the VCS id of a source in APIsource
payload. - Historical scan: increase the maximum size of the historical scan from 1GB to 12GB for Business workspaces.
Bug fixes
- Historical scan: reduce errors during scans of large repositories.
- Members: fix the sorting when navigating through pages.
November 15, 2022
Features
- Historical scan: new email template for historical scan report.
Bug fixes
- GitLab integration: handle timeout errors when setting up a new instance.
- Playbooks: fix incorrect default permission
can view
applied with auto-access playbook instead of correctcan edit
. - Filepath exclusions: ignore hidden occurrences in the auto-access playbook and notifications.
- Custom webhooks: fix incorrect event names.
November 3, 2022
Features
- Azure Repos: introducing Azure Repos integration. This feature is available in beta upon request.
- Custom webhooks: update the
action
field with more user-friendly messages. - Perimeter page: update the information displayed in the Protection section.
- Analytics: addition of all the ggshield modes to the Analytics section.