Skip to content

Kingfisher v1.58.0

Choose a tag to compare

@github-actions github-actions released this 16 Oct 21:48
· 84 commits to main since this release
fecf858

[v1.58.0]

  • Added first-class Hugging Face scanning support, including CLI enumeration, token authentication, and integration with remote scans.
  • Condensed GitError formatting to report the exit status and the first informative lines from stdout/stderr, producing concise git clone failure logs.
  • Added support for scanning Google Cloud Storage buckets via --gcs-bucket, including optional prefixes and service-account authentication.
  • Added --skip-aws-account (now accepting comma-separated values) and --skip-aws-account-file to bypass live AWS validation for known canary/honey-token account IDs without triggering alerts. Kingfisher now ships with several canary AWS account IDs pre-seeded in the skip list and now reports matching findings as "Not Attempted" with the "Response" containing "(skip list entry)" so it's clear that validation was intentionally skipped and why.