fullcourtdefense-cli 1.14.2 → 1.14.4

package/dist/commands/discover.d.ts

@@ -60,6 +60,8 @@ export interface DesktopDiscoveryHost {
     probeMode: 'config' | 'deep';
     /** Windows-only: PowerShell audit coverage (ScriptBlock Logging + Transcription). */
     shellAudit?: ShellAuditReport;
+    /** True when the scan ran on an ephemeral CI runner (GitHub Actions, GitLab, etc.) — not a user machine. */
+    isCi?: boolean;
 }
 export declare function discoverCommand(args: DiscoverArgs, config: BotGuardConfig): Promise<void>;
 /** Upload-only discover — used after install-mcp-gateway --upload. */

package/dist/commands/discover.js

@@ -93,6 +93,16 @@ function machineFingerprint() {
     const seed = [os.hostname(), os.userInfo().username, os.platform(), os.arch()].join('|');
     return crypto.createHash('sha256').update(seed).digest('hex').slice(0, 16);
 }
+/** Detect ephemeral CI runners so they are never listed as user machines in the fleet. */
+function isCiEnvironment() {
+    return process.env.GITHUB_ACTIONS === 'true'
+        || process.env.GITLAB_CI === 'true'
+        || process.env.TF_BUILD === 'True' // Azure Pipelines
+        || !!process.env.JENKINS_URL
+        || !!process.env.BUILDKITE
+        || !!process.env.CIRCLECI
+        || process.env.CI === 'true';
+}
 function buildHostMetadata(userEmail, probeMode = 'config') {
     const info = os.userInfo();
     return {
@@ -103,6 +113,7 @@ function buildHostMetadata(userEmail, probeMode = 'config') {
         scannedAt: new Date().toISOString(),
         probeMode,
         shellAudit: (0, windowsAudit_1.getShellAuditReport)(),
+        isCi: isCiEnvironment() || undefined,
     };
 }
 /** Where MCP client configs live — see discoverPaths.ts for the canonical list. */

package/dist/commands/discoverSecrets.js

@@ -100,6 +100,8 @@ const SKIP_DIR_NAMES = new Set([
 const MAX_FILE_BYTES = 256 * 1024;
 const MAX_ENV_FILES = 400;
 const MAX_FINDINGS = 200;
+const INLINE_ALLOW_COMMENT = /\b(?:gitleaks:allow|trufflehog:ignore|pragma:\s*allowlist\s+secret|nosecret|secretlint-disable)\b/i;
+const PLACEHOLDER_WORDS = /(?:example|sample|dummy|fake|placeholder|changeme|change_me|replace_me|your[_-]?key|your[_-]?token|test[_-]?only)/i;
 function redact(value) {
     const trimmed = value.trim();
     if (trimmed.length <= 8)
@@ -109,6 +111,21 @@ function redact(value) {
 function findingId(parts) {
     return crypto.createHash('sha256').update(parts.join('|')).digest('hex').slice(0, 16);
 }
+function looksLikePlaceholder(raw, line) {
+    const joined = `${raw} ${line}`;
+    if (PLACEHOLDER_WORDS.test(joined))
+        return true;
+    if (/(?:sk-proj-|sk-|gsk_|xai-|hf_|npm_|ag_org_|shsk_)[x0a]{16,}/i.test(raw))
+        return true;
+    const compact = raw.replace(/[^A-Za-z0-9]/g, '');
+    if (!compact)
+        return false;
+    if (/^(?:x+|0+|1+|a+|z+)$/i.test(compact))
+        return true;
+    if (/^(?:1234567890|abcdef|abc123){2,}$/i.test(compact))
+        return true;
+    return false;
+}
 function scoreFromFindings(findings) {
     let score = 100;
     for (const f of findings) {
@@ -124,11 +141,19 @@ function scoreFromFindings(findings) {
     return Math.max(0, Math.min(100, score));
 }
 function scanTextLines(filePath, content, category, out, seen) {
+    // Placeholder/template files (.env.example, *.sample, *.template) hold intentional
+    // dummy values — report as info so real findings aren't drowned out (Gitleaks
+    // ignores these entirely; we keep them visible but non-alarming).
+    const isExampleFile = /\.(example|sample|template|dist)(\.|$)/i.test(path.basename(filePath));
+    // Vars with client-bundle prefixes ship to the browser by design.
+    const clientExposedPrefix = /^\s*(?:VITE_|NEXT_PUBLIC_|REACT_APP_|EXPO_PUBLIC_|NUXT_PUBLIC_)/;
     const lines = content.split(/\r?\n/);
     for (let i = 0; i < lines.length; i++) {
         const line = lines[i];
         if (!line.trim() || line.trim().startsWith('#'))
             continue;
+        if (INLINE_ALLOW_COMMENT.test(line))
+            continue;
         // First (most specific) pattern wins per matched string — prevents e.g. an
         // sk-ant- Anthropic key from also being reported as a generic OpenAI sk- key.
         const matchedRaws = [];
@@ -144,22 +169,47 @@ function scanTextLines(filePath, content, category, out, seen) {
             if (seen.has(id))
                 continue;
             seen.add(id);
+            // Firebase/Google web API keys behind a client-bundle prefix are public by
+            // design — the risk is a missing restriction, not the exposure itself.
+            const isClientExposedWebKey = pattern.provider === 'google' && clientExposedPrefix.test(line);
+            let severity = pattern.severity;
+            let title = pattern.title;
+            let detail = pattern.impact
+                ? `Matched ${pattern.provider} pattern in ${path.basename(filePath)}. If leaked: ${pattern.impact}.`
+                : `Matched ${pattern.provider} pattern in ${path.basename(filePath)}`;
+            let remediation = pattern.provider === 'private_key'
+                ? 'Move keys to a secure store; never commit private keys. Use ssh-agent or encrypted keys.'
+                : PROVIDER_REMEDIATION[pattern.provider]
+                    || 'Rotate this credential immediately and store it in a secret manager or OS keychain — not in plain files.';
+            if (isExampleFile) {
+                severity = 'info';
+                title = `${pattern.title} (example/template file)`;
+                detail = `Matched ${pattern.provider} pattern in ${path.basename(filePath)} — looks like an intentional placeholder.`;
+                remediation = 'Confirm this is a dummy value. If a real credential was pasted into the example file, rotate it and replace with a placeholder.';
+            }
+            else if (looksLikePlaceholder(raw, line)) {
+                severity = 'info';
+                title = `${pattern.title} (placeholder-like value)`;
+                detail = `Matched ${pattern.provider} pattern in ${path.basename(filePath)}, but the value/line contains common placeholder markers.`;
+                remediation = 'Replace placeholders before production. If this is a real credential despite the placeholder wording, rotate it and move it to a secret manager.';
+            }
+            else if (isClientExposedWebKey) {
+                severity = 'medium';
+                title = 'Google/Firebase web API key (client-exposed)';
+                detail = `Matched google pattern in ${path.basename(filePath)} on a client-bundle variable — this key ships to the browser by design.`;
+                remediation = 'Not a secret in the classic sense, but add HTTP-referrer/API restrictions in Google Cloud console → Credentials so it only works from your domains.';
+            }
             out.push({
                 id,
                 category,
-                severity: pattern.severity,
+                severity,
                 provider: pattern.provider,
                 filePath,
                 lineNumber: i + 1,
-                title: pattern.title,
-                detail: pattern.impact
-                    ? `Matched ${pattern.provider} pattern in ${path.basename(filePath)}. If leaked: ${pattern.impact}.`
-                    : `Matched ${pattern.provider} pattern in ${path.basename(filePath)}`,
+                title,
+                detail,
                 redactedPreview: redact(raw),
-                remediation: pattern.provider === 'private_key'
-                    ? 'Move keys to a secure store; never commit private keys. Use ssh-agent or encrypted keys.'
-                    : PROVIDER_REMEDIATION[pattern.provider]
-                        || 'Rotate this credential immediately and store it in a secret manager or OS keychain — not in plain files.',
+                remediation,
             });
             if (out.length >= MAX_FINDINGS)
                 return;

package/dist/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "1.14.2"
+  "version": "1.14.4"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullcourtdefense-cli",
-  "version": "1.14.2",
+  "version": "1.14.4",
   "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
   "main": "dist/index.js",
   "bin": {
@@ -20,6 +20,7 @@
     "test:shell-guard": "npm run build && node scripts/test-shell-guard.js",
     "test:cmd-guard": "npm run build && node scripts/test-cmd-guard.js",
     "test:posix-guard": "npm run build && node scripts/test-posix-guard.js",
+    "test:secret-posture": "npm run build && node scripts/test-secret-posture-fixtures.js",
     "test:ping-e2e": "npm run build && node scripts/test-ping-e2e.js",
     "prepublishOnly": "npm run build"
   },