Stacs

Overview

This release adds a few convenience features to STACS. It also relaxes the version constraint to allow STACS to be installed under Python 3.8.

🛠️ **New Features**

* Specification of the number of threads is now possible via `--threads` (defaults to: `10`)

🍩 **Improvements**

* Version constraint has been relaxed to allow Python 3.8 (per request 16).
* Cache directories are attempted to be cleaned-up after run.
* Cache directories now have a timestamp appended to avoid collisions if previous run failed.
* Minor changes to release management process to allow easier rebuilds of containers with new rules.

🐛 **Bug Fixes**

* N/A

Overview

This release makes a small change to the way the STACS container runs. The container entrypoint now checks whether the scan directory contains an ignore list. If so, this will be loaded automatically.

🛠️ **New Features**

* The STACS container now attempts to automatically load a `stacs.ignore.json` from the scan directory.
* Latest STACS rules, including new rules for:
* JSON Web Tokens (JWTs)
* Stripe API tokens (secret keys).

🍩 **Improvements**

* Clean-up of Pydantic validator for the ignore list model.

🐛 **Bug Fixes**

* N/A

Overview

🛠️ **New Features**

* Added the ability to skip corrupt archives rather than failing the STACS run.
* This must be explicitly enabled using the `--skip-unprocessable` flag.
* A warning message will be produced for each 'skipped' archive.

🍩 **Improvements**

* Added additional debug level logging related to file enumeration.
* This output is only provided when run with the `--debug` flag.

🐛 **Bug Fixes**

* N/A

Overview

This releases uses a different libarchive wrapper in order to improve compatibility, due to an unresolved issue with the currently used wrapper.

🛠️ **New Features**
* N/A

🍩 **Improvements**
* Move to `python-libarchive` from `libarchive` for [better cross distribution compatibility](https://github.com/dsoprea//PyEasyArchive/issues/50).
* This is mostly a work around, so it may be swapped in future, but this should be a transparent change.

🐛 **Bug Fixes**

* N/A

Overview

🛠️ **New Features**
* N/A

🍩 **Improvements**
* N/A

🐛 **Bug Fixes**

* Adjust samples to ensure that the sample after the finding starts from the end of the finding, rather than the start.

Overview

🛠️ **New Features**
* N/A

🍩 **Improvements**
* Added `development` extras to simplify development environment setup.
* Identification of rules now uses the rule identifier, rather than name.

🐛 **Bug Fixes**
* Fix off-by-one in finding line number counting.