feat(sdk): replace detect-secrets library with kingfisher#11694

Open

danibarranqueroo wants to merge 22 commits into

PROWLER-2083-replace-detect-secrets-library-with-a-new-one

Commits on Jun 25, 2026

Merge branch 'master' into PROWLER-2083-replace-detect-secrets-library-with-a-new-one
danibarranqueroo
committed
chore: add secrets flag into aws schema
danibarranqueroo
committed
chore(sdk): remove deprecated detect_secrets_plugins config option
danibarranqueroo
committed
fix(sdk): skip secret re-validation in cloudwatch line-number rescan
danibarranqueroo
committed
docs: complete secret-scanning check list and note provider-wide validation
danibarranqueroo
committed
feat(sdk): add batched secret scanning to amortize kingfisher subprocess cost
danibarranqueroo
committed
perf(sdk): batch secret scanning across cloudwatch, lambda and ecs resources
danibarranqueroo
committed
refactor(sdk): batch secret scanning across all remaining secret checks
danibarranqueroo
committed
docs: document the batched secret-scanning check structure
danibarranqueroo
committed
perf(sdk): batch the cloudwatch multiline-event rescan
danibarranqueroo
committed
refactor(sdk): remove unused single-payload detect_secrets_scan helper
danibarranqueroo
committed
fix(sdk): bound the kingfisher subprocess with a timeout and type the batch helper
danibarranqueroo
committed
test(sdk): cover the verified-secret escalation path across secret checks
danibarranqueroo
committed
docs(sdk): correct secret-scanning docs, changelog and OpenStack check notes
danibarranqueroo
committed
docs(sdk): add version badge and engine-history note to secret-scanning checks guide
danibarranqueroo
committed

Commits on Jun 26, 2026