New Features and Enhancements
“Other” type has been added to the Secret Types pie chart on the BluPrint page. The pie chart should now show the top 6 secret types as well as a 7th that is composed of all of the remaining types. Clicking on any of the pie sections should take the user to a filtered table for the selected secret type.
Many additional enhancements have been added to identify false positives where secrets are concerned.
Additional tags have been added to auto-dismissed secrets - staging and sample
False positive improvements made with regards to passwords found in XML files
Free Trial Edition
The Enterprise Edition features and bug fixes listed in these release notes also apply to the Free Trial Edition.
CORE-8828 - Descriptions in Alerts and Events were not matching for Non-inclusive Language. Events were just showing “Customer Regex” instead of helpful description.
Many bug fixes with regards to false positives as well.
Note that BluBracket is not currently able to identify and alert on secrets in languages that do not use traditional assignment operators (Lisp, Scheme and Clojure for example).
GitHub Payload Cap
GitHub payloads are capped at 25 MB. If your event generates a larger payload, a webhook will not be fired which means that BluBracket will not be able to identify the event. This may happen, for example, on a create event if many branches or tags are pushed at once. We suggest monitoring your payload size to ensure delivery. Please refer to the following GitHub document: https://developer.github.com/webhooks/#payloads .