Repository navigation

Fix false secret matches in source maps - #655

Merged

sandstream merged 25 commits into

mainfrom

fix/build-sourcemap-false-positive

Oct 30, 2026

Merged

Fix false secret matches in source maps#655
sandstream merged 25 commits into
mainfrom
fix/build-sourcemap-false-positive

Commits on Oct 30, 2026
- Fix false secret matches in source maps
  sandstream
  committed
  f988813
- Scan source maps incrementally
  sandstream
  committed
  b04dee9
- Handle unusual source map entries safely
  sandstream
  committed
  fc536ff
- Bound source map scan work
  sandstream
  committed
  837ce3f
- Report incomplete scans without hiding findings
  sandstream
  committed
  095e348
- Handle invalid and escaped source map fields
  sandstream
  committed
  5dc69c6
- Reject invalid source map formats
  sandstream
  committed
  a0b47c6
- Scan invalid source content without false matches
  sandstream
  committed
  5e582c6
- Retain generic credentials in invalid source maps
  sandstream
  committed
  b573c9a
- Decode metadata and incomplete source maps
  sandstream
  committed
  af19b51
- Report ambiguous source-map values
  sandstream
  committed
  8038a19
- Continue scans past ambiguous values and fixtures
  sandstream
  committed
  012b1b2
- Exclude source maps for test modules
  sandstream
  committed
  7790fc4
- Preserve findings from incomplete bundle scans
  sandstream
  committed
  2bab998
- Align build scan test exclusions
  sandstream
  committed
  7803e73
- Keep findings in truncated maps and scan comparisons
  sandstream
  committed
  7f894aa
- Avoid cross-source matches in malformed maps
  sandstream
  committed
  7b5f588
- Bound malformed JSON token scanning
  sandstream
  committed
  f7aeafd
- Inspect recoverable unfinished source strings
  sandstream
  committed
  bc6f629
- Recover incomplete trailing escapes
  sandstream
  committed
  092c142
- Describe source-map metadata scan limits
  sandstream
  committed
  07a15fa
- Format source-map regression tests
  sandstream
  committed
  b485170
- Preserve coverage classification for skipped checks
  sandstream
  committed
  698fb91
- Fix CI review findings
  sandstream
  committed
  a4b3462
- Update build-scan command contract
  sandstream
  committed
  71b44ea

Commits

Commits on Oct 30, 2026