Secrets are judged where they are, and connection-string passwords are masked

A finding about a hardcoded secret is now rated by the files that actually hold the value it quotes, and a password inside a database connection string is masked before any model reads the file.

When every file holding the quoted secret is test, example or development-only configuration, the finding is MEDIUM at most, even if it cites production files for another point. A password in production configuration keeps its rating.

A finding whose evidence is only inside a comment or a documentation example is now listed as INFO: it stays in the report and no longer lowers the score. A real secret left in a comment keeps its rating.

Full technical release notes for 7.4.14 are on the changelog, alongside every other Ghost Architect™ Local release.

Ghost Architect™ Local runs on your own hardware.

If you want an evaluation trial, the download page tells you how to get the tarball, verify it, and start the evaluation trial on your own hardware.

Request Ghost Architect™ Local

EJ Wisner, founder of Ghost Architect™. Local pricing is monthly, per team size, with no per-token bill; the numbers are on the pricing page.