http://open-source-security-software.net/project/graudit/releases.atom Recent releases for graudit 2026-04-02T08:11:00.452044+00:00 python-feedgen graudit v2.3 graudit v2.3 2019-10-15T08:21:57+00:00 - Added database for finding sensitive information (secrets) - C database no longer deprecated - Created low hanging fruit rules for C/C++ (seafruit.db) - Added more test cases to avoid some past mistakes - Updated make and make install rules to match new version changes - Removed the all rules database - Updated documentation - Improved bsdgrep/OSX support - Improved PHP rules for stream bugs (ie: phar://) - Added and updated python rules - More Java rules and cleanup of Java rules - More dotNet rules - More android rules - More iOS rules - Added basic JavaScript rules - Added additional script to show C taint analysis (misc/b0ftaint.sh) - Added script for finding low hanging/high impact PHP bugs (misc/flatline.*) - Added script for using flatline rules in taint analysis (misc/vulntaint.sh) - Added script for scanning github repos with flatline (misc/gitscan) - Added script for finding interesting files and secrets (misc/graufflehog.sh) 2019-10-15T08:21:57+00:00 graudit v2.4 graudit v2.4 2020-03-28T08:05:28+00:00 Updated documentation Seafruit.db removed (now in fruit.db) Added low hanging fruit databases for several languages Added basic support for Go language Added basic support for COBOL (@_bcoles) Fixed faulty rules in Python and Java (@quakehead, @l0ss) Updated C rules Updated PHP rules (FFI and more) Updated Node rules Reworked Makefile for signatures 2020-03-28T08:05:28+00:00 graudit v2.6 graudit v2.6 2020-06-19T05:09:32+00:00 Fixed carriage return tolerance in graudit Added basic scala rules Updated Java rules QoL tweaks to Nim rules dotnet fruit rules dotnet rules overhauled Added more unit tests Updated PHP rules Improved PHP stream rules Fixed bug for PHP stream rules Fixed bug when listing databases in empty directories 2020-06-19T05:09:32+00:00 graudit 2.7 graudit 2.7 2020-10-12T10:59:03+00:00 Carriage return tolerance fixed for non GNU sed versions Updated PHP rules Updated C rules Updated dotnet rules Updated android rules Added Electron rules Additional PHP and secret rules from @beyefendi 2020-10-12T10:59:03+00:00 graudit v2.8 graudit v2.8 2020-10-30T04:39:47+00:00 Updated Electron rules Updated PHP rules More scala rules and a scala signature set Updated C rules Updated Java rules Updated fruit rules Documentation tweaks Improved error handling Updated gitscan script AMPscript and ssjs example rules git log scanner example script 2020-10-30T04:39:47+00:00 graudit v2.9 graudit v2.9 2021-04-09T02:15:07+00:00 Fix for GRDIR by @micharu123 Improved C fruit rules Improved js fruit rules Started python fruit rules Updated documentation Fixed typo in dotnet rules (@0x10f2c) Reformatted parts of graudit for readability misc/onlyfiles.sh filescanning with only files matching globs 2021-04-09T02:15:07+00:00 graudit v3.0 graudit v3.0 2021-04-29T06:11:22+00:00 Fixed broken Java rule causing massive false positives Additional PHP fruit rules 2021-04-29T06:11:22+00:00 graudit v3.1 graudit v3.1 2021-06-21T00:29:01+00:00 Updated secret rules Updated dotnet rules Updated C rules Updated Java and Mongose rules (@IoannisMatzaris) Added ~/graudit/signatures to database locations Updated documentation (@Montycarlo) 2021-06-21T00:29:01+00:00 graudit v3.2 graudit v3.2 2021-10-29T03:28:44+00:00 - Fixed a compatibilty bug in misc/serializephp.sh - Updated PHP rules - Updated Java rules - Updated fruit rules - Updated secret rules - Updated default - Updated android rules (@r3zk0n) - Updated dotnet rules - Changed misc/gitlog.sh to an interactive format - Added *.map to files that are ignored unless -A is used - Fixed line endings in some rule files - Altered some error handling slightly 2021-10-29T03:28:44+00:00 graudit v3.3 graudit v3.3 2022-01-20T06:48:31+00:00 Fixed false positive rate in compressed js files More secret rules Restructured and updated classic asp rules Updated fruit rules Updated SQL rules Updated spsqli rules Updated ruby rules (@r3zk0n) Updated android rules Updated java rules Updated dotnet rules Fixed greedyness in perl super global rules Improved test case Bug fixes for dotnet and sql rulesets Added test case for bad quantifiers in rules Changed test cases for consistency and portability Rule set for auditing SCA exclusions Updated ampscript rules Added .github/ files for sponsorship/issues/pull requests 2022-01-20T06:48:31+00:00 graudit v3.4 graudit v3.4 2022-03-01T06:14:32+00:00 Fixed a path issue in misc/taintfind.sh Changed installation instructions for better usage Added link to tutorial video in documentation Updated PHP rules Updated dotnet rules Updated xss rules Updated secrets rules Added support for setting default arguments via env vars Added test cases for environment variables Fixed a bug in database listing function Updated misc/phptaint.sh 2022-03-01T06:14:32+00:00 graudit v3.5 graudit v3.5 2022-12-23T06:21:18+00:00 Added Eiffel rules (@bcoles) Updated secret rules Reduced false positives in php rules Reduced false positives in nim rules Added typescript rules Fixed path issue in misc/gitscan Bugfix for actionscript, asp and ios rules Rule correctness adjustments to asp rules Minor documentation updates 2022-12-23T06:21:18+00:00