All issues

Search results

hygiene: suppression files carry a recoverable fingerprint of the secret, config narrowing is only generically disclosed, and closing keywords in prose keep closing issues

Status: Open.

#673 In awslabs/ferret-scan;

· sectoramen opened on Sep 11, 2026

precision on honest repos: city names as PERSON_NAME 80, UPC as PHONE 70 — with three claims corrected downward

Status: Open.

#672 In awslabs/ferret-scan;

· sectoramen opened on Sep 11, 2026

plaintext path does no character normalization, so ordinary documents miss structured patterns (consolidates normalization + letter/digit boundaries)

Status: Open.

#671 In awslabs/ferret-scan;

· sectoramen opened on Sep 11, 2026

office: the .xml-only assumption blinds redaction to .rels — 6th instance; needs a per-format redaction contract harness

Status: Open.

#670 In awslabs/ferret-scan;

· sectoramen opened on Sep 11, 2026

redaction: synthetic replacements are valid Luhn PANs on real IINs, so a redacted file re-detects as containing a card

Status: Open.

#669 In awslabs/ferret-scan;

· sectoramen opened on Sep 11, 2026

redaction write-back destroys non-ASCII bytes: José becomes Jos in the redacted copy

Status: Open.

#668 In awslabs/ferret-scan;

· sectoramen opened on Sep 11, 2026

gate integrity: three ways the tool reports success on work it did not do (consolidates exit resolver, coverage ledger, --exclude)

Status: Open.

#667 In awslabs/ferret-scan;

· sectoramen opened on Sep 11, 2026

pdf: page content is emitted bottom-to-top on half of real PDFs — and flipping the sort is NOT the fix

Status: Open.

#666 In awslabs/ferret-scan;

· sectoramen opened on Sep 11, 2026

pdf: a per-page goroutine has no recover, so one malformed page kills the process

Status: Open.

#665 In awslabs/ferret-scan;

· sectoramen opened on Sep 11, 2026

sarif, gitlab-sast: 40 of 64 detection types have no description — every report says "Sensitive data of type X was detected"

Status: Open.

#662 In awslabs/ferret-scan;

· sectoramen opened on Sep 11, 2026

audit the remaining case-fold-then-index sites — 261 found by SSA taint, 4 confirmed and fixed, 1 mechanism-confirmed

Status: Open.

#659 In awslabs/ferret-scan;

· sectoramen opened on Sep 11, 2026

complexity guard: two maxGrowthRatio controls sit under the 1.5x margin convention on macos, and the linear control's 6.40x is unexplained

Status: Open.

#649 In awslabs/ferret-scan;

· sectoramen opened on Sep 10, 2026