GuardDog Files

New features

• feat(verify): add support for verifying directories by @bthuilot in https://github.com/DataDog/guarddog/pull/539

Bug fixes and improvements

• Detect Base64-decoded content being passed to execution functions in Go by @martinvoigt-dd in https://github.com/DataDog/guarddog/pull/547
• [Go - New Detection] Detect executable downloads in Go by @dd-ahmed in https://github.com/DataDog/guarddog/pull/548
• Adding new NPM obfuscation case by @sobregosodd in https://github.com/DataDog/guarddog/pull/557
• Semgrep timeout fix + use of env variables to set max_target_bytes by @tesnim5hamdouni in https://github.com/DataDog/guarddog/pull/556
• [Go - New Detection] Detect data collection and exfiltration in Go by @dd-ahmed in https://github.com/DataDog/guarddog/pull/553
• Update shady links rule by @tesnim5hamdouni in https://github.com/DataDog/guarddog/pull/563
• Refactor to use Dependency structure by @sobregosodd in https://github.com/DataDog/guarddog/pull/564
• Fix scan on empty python dependencies by @sobregosodd in https://github.com/DataDog/guarddog/pull/568

Chores

• Bump setuptools from 75.6.0 to 76.0.0 by @dependabot in https://github.com/DataDog/guarddog/pull/538
• Bump disposable-email-domains from 0.0.108 to 0.0.120 by @dependabot in https://github.com/DataDog/guarddog/pull/540
• Bump pygit2 from 1.16.0 to 1.17.0 by @dependabot in https://github.com/DataDog/guarddog/pull/545
• Bump googleapis-common-protos from 1.66.0 to 1.69.2 by @dependabot in https://github.com/DataDog/guarddog/pull/544
• Bump jinja2 from 3.1.4 to 3.1.6 by @dependabot in https://github.com/DataDog/guarddog/pull/546
• Bump deprecated from 1.2.15 to 1.2.18 by @dependabot in https://github.com/DataDog/guarddog/pull/542
• Bump packaging from 21.3 to 24.2 by @dependabot in https://github.com/DataDog/guarddog/pull/541
• Bump lxml from 5.2.2 to 5.3.2 by @dependabot in https://github.com/DataDog/guarddog/pull/555
• Bump bracex from 2.3.post1 to 2.5 by @dependabot in https://github.com/DataDog/guarddog/pull/551
• Bump exceptiongroup from 1.2.0 to 1.2.2 by @dependabot in https://github.com/DataDog/guarddog/pull/552
• Bump mypy-extensions from 1.0.0 to 1.1.0 by @dependabot in https://github.com/DataDog/guarddog/pull/562
• Updating deps and top pkgs by @sobregosodd in https://github.com/DataDog/guarddog/pull/567
• Bump iniconfig from 2.0.0 to 2.1.0 by @dependabot in https://github.com/DataDog/guarddog/pull/560

New Contributors

• @martinvoigt-dd made their first contribution in https://github.com/DataDog/guarddog/pull/547
• @dd-ahmed made their first contribution in https://github.com/DataDog/guarddog/pull/548
• @tesnim5hamdouni made their first contribution in https://github.com/DataDog/guarddog/pull/556

Full Changelog: https://github.com/DataDog/guarddog/compare/v2.5.0...v2.6.0