gitea-mirror/sif - sif - Gitea: Git with a cup of tea

gitea-mirror/sif

Fork 0

mirror of https://github.com/lunchcat/sif.git synced 2026-07-28 22:40:54 -07:00

Commit Graph

Author	SHA1	Message	Date
TigahandGitHub	6b7762fcdf	fix(scan): require a real bucket listing body before flagging s3 exposure (#282 )	2026-07-22 12:36:29 -07:00
TigahandGitHub	77f203e47c	feat(scan): broaden cloudstorage bucket name candidates (#162 ) the extractPotentialBuckets TODO asked to handle non-adjacent label combos and strip the tld. strip the trailing tld label so we stop guessing it ("com", "com-s3", "example-com"), and pair every label with every other rather than only adjacent ones, so a deep host like shop.cdn.example yields shop-example too. this widens the candidate set (and the s3 probes) per host. multi-part suffixes like .co.uk still leave a junk label; publicsuffix would refine that as a follow-up.	2026-06-22 17:48:45 -07:00

Author

SHA1

Message

Date

TigahandGitHub

6b7762fcdf

fix(scan): require a real bucket listing body before flagging s3 exposure (#282 )

2026-07-22 12:36:29 -07:00

TigahandGitHub

77f203e47c

feat(scan): broaden cloudstorage bucket name candidates (#162 )

the extractPotentialBuckets TODO asked to handle non-adjacent label
combos and strip the tld. strip the trailing tld label so we stop
guessing it ("com", "com-s3", "example-com"), and pair every label
with every other rather than only adjacent ones, so a deep host like
shop.cdn.example yields shop-example too.

this widens the candidate set (and the s3 probes) per host. multi-part
suffixes like .co.uk still leave a junk label; publicsuffix would
refine that as a follow-up.

2026-06-22 17:48:45 -07:00