On the Scan Queue, running scans carry no number and are listed first; the waiting scans are numbered 1, 2, 3 in the order they will start.

The Fleet Scan Queue shows each scan's main languages under its project name, and the usage report names the main language of each scan.

A peer that has missed its health checks is reported as not answering rather than busy, the recovery email says how long it was quiet, and the completion email links to the scan's own report.

Ghost now records whether each value it masks is a vendor key, a generated-looking secret or a short, simple one. Vendor keys and generated-looking secrets are still reported in any file, test files included. A finding whose only evidence is a simple value masked in test or development code is set aside instead of counted as an exposed secret.

A finding about test code that names no failure is now listed as INFO: it stays in the report with its evidence and no longer lowers the score. A disabled test, a test that can never fail, a hidden exception or a secret in a test keeps its rating.

Xcode test targets count as test code, a linked file is read once, and a scan that was stopped and resumed says so.

A finding that calls a catch block empty is set aside when every catch in its file is an expected-exception test, a rethrow or a logged failure, and a finding that quotes a call now points at the line where the call opens.

Full technical release notes for 7.4.12 are on the changelog, alongside every other Ghost Architect™ Local release.

Ghost Architect™ Local runs on your own hardware.

If you want an evaluation trial, the download page tells you how to get the tarball, verify it, and start the evaluation trial on your own hardware.

Request Ghost Architect™ Local

EJ Wisner, founder of Ghost Architect™. Local pricing is monthly, per team size, with no per-token bill; the numbers are on the pricing page.