v1.10.1

Tool Improvements

• Improve context handling universally by @egibs in #876

Rule Improvements

• Use language-specific filter rules to reduce false-positives by @egibs in #880

Full Changelog: v1.10.0...v1.10.1

v1.10.0

Tool Improvements

• Improve Workflow hygiene by @egibs in #836
• Add initial support for image diffing by @egibs in #837
• Persist credentials for git commands by @egibs in #859
• Improve UPX and nested archive extractions by @egibs in #864
• Remove extracted files after scanning, add sync.Pools, other optimizations/cleanup by @egibs in #867
• Fix diff arg parsing, fix image extraction edge case by @egibs in #871
• Fix quotes in release Workflow by @egibs in #874

Rule Improvements

• Update third-party rules as of 2025-04-09 by @octo-sts in #850
• Update third-party rules as of 2025-04-11 by @octo-sts in #851
• Update third-party rules as of 2025-04-15 by @octo-sts in #853
• Update third-party rules as of 2025-04-16 by @octo-sts in #854
• Update third-party rules as of 2025-04-17 by @octo-sts in #856
• Spring 2025 rule update for Javascript, Python, Shell by @tstromberg in #861
• Update third-party rules as of 2025-04-20 by @octo-sts in #868
• Improve detection of malicious obfuscated Javascript, PowerShell and Lua by @tstromberg in #866
• Improve detection of node-telegram attack by @tstromberg in #869

Developer Improvements

• Update yara-x installation instructions to not require root by @egibs in #835
• Immediately fail refreshes if UPX is not present by @egibs in #870
• Fix golangci-lint-lint error propagation by @egibs in #873

Full Changelog: v1.9.0...v1.10.0

v1.9.0

Tool Improvements

• action: Pull interactive check out into a function by @jonjohnsonjr in #823
• feat: add basic zstd compression support by @stevebeattie in #842

Rule Improvements

• Update third-party rules as of 2025-03-13 by @octo-sts in #825
• Update third-party rules as of 2025-03-18 by @octo-sts in #832
• Fix rustdoor rules causing macOS malware detections by @egibs in #833
• Update third-party rules as of 2025-03-24 by @octo-sts in #840
• Reduce false positives/increase signal for various languages, tools, and packages by @egibs in #838

Developer Improvements

• Update yara-x to 0.14.0 by @egibs in #843
• Update golangci-lint and yara-x versions by @egibs in #834

New Contributors

• @stevebeattie made their first contribution in #842

Full Changelog: v1.8.8...v1.9.0

v1.8.8

Tool Improvements

• Hide analysis hint when scan findings are present for JSON/YAML by @egibs in #797

Rule Improvements

• Update third-party rules as of 2025-02-09 by @octo-sts in #792
• Update third-party rules as of 2025-02-17 by @octo-sts in #802
• Update third-party rules as of 2025-02-18 by @octo-sts in #805
• Update third-party rules as of 2025-02-23 by @octo-sts in #806
• Update third-party rules as of 2025-02-25 by @octo-sts in #810
• Update third-party rules as of 2025-03-06 by @octo-sts in #814
• Update third-party rules as of 2025-03-09 by @octo-sts in #815

Developer Improvements

• Check if renderer is nil rather than not nil by @egibs in #817 (see also: #816)

Full Changelog: v1.8.7...v1.8.8

v1.8.7

Tool Improvements

• Update yara-x to 0.13.0 by @egibs in #790
• Pull in clog fix to reduce log output by @egibs in #784

Rule Improvements

• Update third-party rules as of 2025-02-03 by @octo-sts in #786
• Update sonar_analyzer_override rule with new rule name by @egibs in #788

Full Changelog: v1.8.6...v1.8.7

v1.8.6

Tool Improvements

• Extract .jar and .zip files concurrently, use buffer for all io.Copy operations by @egibs in #779

Rule Improvements

• Update third-party rules as of 2025-01-26 by @octo-sts in #780

Full Changelog: v1.8.5...v1.8.6

v1.8.5

Tool Improvements

• Remove FileReport Error field in favor of custom error type by @egibs in #777

Full Changelog: v1.8.4...v1.8.5

v1.8.4

Tool Improvements

• scan: Fix panic if renderer is not set. by @wlynch in #774
• Optimize memory usage in report.go and scan.go by @egibs in #772

Rule Improvements

• Update third-party rules as of 2025-01-20 by @octo-sts in #769

Developer Improvements

• Overhaul profiling code to improve accuracy by @egibs in #767

New Contributors

• @wlynch made their first contribution in #774

Full Changelog: v1.8.3...v1.8.4

v1.8.3

Tool Improvements

• Remove scanner pool in favor of single-use scanners by @egibs in #765

Full Changelog: v1.8.2...v1.8.3

v1.8.2

Tool Improvements

• Allow for number of scanners to be configurable by @egibs in #762

Developer Improvements

• chore: remove go version in golangci config in favor of go version in go.mod by @chenrui333 in #763

Full Changelog: v1.8.1...v1.8.2