Shane Frasier

Error indent/outdent mismatch: 2 with multi-line

2

First of all, thanks for providing such a great tool that manages to parse shell syntax correctly 99% of the time. That's no small feat! I have a case where...

It would be nice to add the latest commit hash to __init__.py

2

It would be nice to somehow add the latest commit hash as part of the version string or as a separate variable in `__init__.py`. This would be a useful piece...

Sometimes returns None for Valid HTTPS

3

# 🐛 Bug Report pshtt sometimes returns `None` for the `Valid HTTPS` field. Originally reported by @climber-girl. ## To Reproduce This error is difficult to reproduce. It happened with the...

Need more exhaustive check to determine if an HSTS header will be ignored

2

# 🐛 Bug Report Consider the function `hsts_check()` in `pshtt/pshtt.py`. It's not just a bad hostname that should cause the HSTS header to be ignored. It is also ignored if...

How should we handle HSTS headers and HTTP redirects in the redirect chain?

2

# 🐛 Bug Report The current pshtt logic that examines the HSTS headers gives credit if any HSTS header encountered in the redirect chain involves the initial endpoint/hostname. If the...

Other requests response exception

2

# 🐛 Bug Report When performing pshtt scanning, sometimes we get an error in AWS Lambda stating "other requests response exception". In this case we do not receive scan results...

HSTS max-age discrepancy

2

# 🐛 Bug Report SSLLabs reports some sites as having an HSTS max-age value while pshtt does not. ## To Reproduce Compare SSLLabs and pshtt output for `www.iad.gov`, `www.cnss.gov`, or...

pshtt and sslyze appear to be inconsistent with respect to certificate expiration

1

@dav3r noticed that if he performs the MongoDB queries `db.https_scan.find({'latest':True, 'https_expired_cert':True})` and `db.sslyze_scan.find({'latest':True, 'not_after':{'$lte':util.utcnow()}})` then he gets different answers. Specifically, the first query returns more results. While sslyze is just...

This PR was automatically created by Snyk using the credentials of a real user.Snyk has created this PR to fix one or more vulnerable packages in the `rubygems` dependencies of...

# 🐛 Summary # When working on #57 I noticed that the section headings in `project-setup/branch-protection.md` are inconsistent. Some use a gerund phrase (e.g. "Selecting a skeleton") while others use...