v1.8.8

Tool Improvements

• Hide analysis hint when scan findings are present for JSON/YAML by @egibs in #797

Rule Improvements

• Update third-party rules as of 2025-02-09 by @octo-sts in #792
• Update third-party rules as of 2025-02-17 by @octo-sts in #802
• Update third-party rules as of 2025-02-18 by @octo-sts in #805
• Update third-party rules as of 2025-02-23 by @octo-sts in #806
• Update third-party rules as of 2025-02-25 by @octo-sts in #810
• Update third-party rules as of 2025-03-06 by @octo-sts in #814
• Update third-party rules as of 2025-03-09 by @octo-sts in #815

Developer Improvements

• Check if renderer is nil rather than not nil by @egibs in #817 (see also: #816)

Full Changelog: v1.8.7...v1.8.8

v1.8.7

Tool Improvements

• Update yara-x to 0.13.0 by @egibs in #790
• Pull in clog fix to reduce log output by @egibs in #784

Rule Improvements

• Update third-party rules as of 2025-02-03 by @octo-sts in #786
• Update sonar_analyzer_override rule with new rule name by @egibs in #788

Full Changelog: v1.8.6...v1.8.7

v1.8.6

Tool Improvements

• Extract .jar and .zip files concurrently, use buffer for all io.Copy operations by @egibs in #779

Rule Improvements

• Update third-party rules as of 2025-01-26 by @octo-sts in #780

Full Changelog: v1.8.5...v1.8.6

v1.8.5

Tool Improvements

• Remove FileReport Error field in favor of custom error type by @egibs in #777

Full Changelog: v1.8.4...v1.8.5

v1.8.4

Tool Improvements

• scan: Fix panic if renderer is not set. by @wlynch in #774
• Optimize memory usage in report.go and scan.go by @egibs in #772

Rule Improvements

• Update third-party rules as of 2025-01-20 by @octo-sts in #769

Developer Improvements

• Overhaul profiling code to improve accuracy by @egibs in #767

New Contributors

• @wlynch made their first contribution in #774

Full Changelog: v1.8.3...v1.8.4

v1.8.3

Tool Improvements

• Remove scanner pool in favor of single-use scanners by @egibs in #765

Full Changelog: v1.8.2...v1.8.3

v1.8.2

Tool Improvements

• Allow for number of scanners to be configurable by @egibs in #762

Developer Improvements

• chore: remove go version in golangci config in favor of go version in go.mod by @chenrui333 in #763

Full Changelog: v1.8.1...v1.8.2

v1.8.1

Tool Improvements

• Increase scanner pool safety; fix panics and data races by @egibs in #760

Full Changelog: v1.8.0...v1.8.1

v1.8.0

⚠️ As of v1.8.0, malcontent leverages yara-x rather than go-yara ⚠️

Reference this section of the README for more information.

Tool Improvements

• Add support for zstd RPM files by @egibs in #732
• Update diff output to delineate between changed and unchanged files by @egibs in #726
• Add support for UPX files by @egibs in #731
• Add statistics to JSON and YAML reports by @egibs in #730
• Address more extraction edge cases; improve naming and consistency by @egibs in #733
• Migrate from go-yara to yara-x; improve performance and readability by @egibs in #734

Rule Improvements

• Update third-party rules as of 2024-12-23 by @octo-sts in #736
• Update third-party rules as of 2024-12-24 by @octo-sts in #737
• Update third-party rules as of 2024-12-30 by @octo-sts in #740
• Update third-party rules as of 2025-01-09 by @octo-sts in #748
• Update third-party rules as of 2025-01-14 by @octo-sts in #756
• Address critical false positives for systemd, redpanda, various Python packages, and yarn by @egibs in #757

Developer Improvements

• Add malware disclaimer by @egibs in #728
• Add perl to third-party Workflow by @egibs in #752
• Trust $GITHUB_WORKSPACE in third-party Workflow by @egibs in #753
• Specify bash for PR creation; quote more strings by @egibs in #755
• Specify -H for PR creations by @egibs in #758

Full Changelog: v1.7.1...v1.8.0

v1.7.1

Tool Improvements

• Split up archive.go into type-specific files; add wider zlib support by @egibs in #723

Full Changelog: v1.7.0...v1.7.1