Kube Bench Versions Save

Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark

v0.7.3

3 weeks ago

Changelog

  • d2d3e72 Currently, certain commands involve retrieving all node names or pods and then executing additional commands in a loop, resulting in a time complexity linearly proportional to the number of nodes. (#1597)
  • dc8f4d3 build(deps): bump github.com/aws/aws-sdk-go-v2 from 1.25.2 to 1.26.0 (#1589)
  • 45afbd7 build(deps): bump github.com/aws/aws-sdk-go-v2/config (#1577)
  • 73e1377 build(deps): bump github.com/jackc/pgx/v5 from 5.4.3 to 5.5.4 (#1586)
  • dc74416 build(deps): bump golang from 1.22.0 to 1.22.1 (#1583)
  • 65c484e build(deps): bump k8s.io/client-go from 0.29.1 to 0.29.3 (#1587)

v0.7.2

2 months ago

Changelog

  • 2374e7b Rancher checks correction (#1563)
  • 72eee4b build(deps): bump alpine from 3.19.0 to 3.19.1 (#1557)
  • 66a2151 build(deps): bump codecov/codecov-action from 3 to 4 (#1561)
  • 3021706 build(deps): bump github.com/aws/aws-sdk-go-v2/config (#1554)
  • f297da6 build(deps): bump golang from 1.21.6 to 1.22.0 (#1569)
  • 3db3f73 build(deps): bump golangci/golangci-lint-action from 3 to 4 (#1568)
  • 57132a6 build(deps): bump gorm.io/driver/postgres from 1.5.4 to 1.5.6 (#1567)
  • faeceb5 job.yaml: Adding /var/lib/cni mounts for proper CIS 1.1.9 and 1.1.0 checking (#1547)
  • ee5e4af update rke-cis-1.24 benchmarks: corrected errors and tests (#1570)

v0.7.1

3 months ago

Changelog

  • 13da372 Updating the rh-1.0 OCP checks (#1548)
  • faa1b4b build(deps): bump actions/cache from 3 to 4 (#1551)
  • 221ff4f build(deps): bump actions/setup-go from 4 to 5 (#1537)
  • 39c29fb build(deps): bump alpine from 3.18.3 to 3.19.0 (#1535)
  • 3894987 build(deps): bump github.com/aws/aws-sdk-go-v2 from 1.18.0 to 1.24.1 (#1550)
  • 8c47d59 build(deps): bump github.com/spf13/viper from 1.14.0 to 1.18.2 (#1541)
  • 628999c build(deps): bump golang from 1.21.5 to 1.21.6 (#1549)
  • 151efc3 build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 (#1542)
  • cc6c091 build(deps): bump gorm.io/driver/postgres from 1.4.6 to 1.5.4 (#1514)
  • b17aa70 build(deps): bump k8s.io/apimachinery from 0.29.0 to 0.29.1 (#1553)
  • 7efba2b build(deps): bump k8s.io/client-go from 0.26.0 to 0.29.0 (#1540)
  • a93b19f build(deps): bump k8s.io/client-go from 0.29.0 to 0.29.1 (#1552)
  • 57fba22 chore: update base image to ubi9 (#1556)
  • a4b46f5 chore: update go version to 1.21 (#1546)

v0.7.0

4 months ago

Changelog

  • f8fe5ee Add CIS Benchmarks support to Rancher Distributions RKE/RKE2/K3s (#1523)
  • 7a55d5d Issue: The initial command produces "root:root" as its output only when the file is present. However, if the file is missing, the command will still run successfully, though the desired output of "root:root" won't be obtained. (#1538)
  • 292678a build(deps): bump actions/checkout from 3 to 4 (#1492)
  • 64c0492 build(deps): bump docker/login-action from 2 to 3 (#1500)
  • 1393449 build(deps): bump docker/setup-buildx-action from 2 to 3 (#1497)
  • 2b466ab build(deps): bump docker/setup-qemu-action from 2 to 3 (#1503)
  • 63055a7 build(deps): bump github.com/fatih/color from 1.14.1 to 1.16.0 (#1520)
  • 0918b41 build(deps): bump github.com/golang/glog from 1.0.0 to 1.1.2 (#1489)
  • 875fbc7 build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.8.0 (#1530)
  • dc0580c build(deps): bump golang from 1.21.1 to 1.21.3 (#1507)
  • f353bc4 build(deps): bump golang from 1.21.3 to 1.21.5 (#1534)
  • ade7cef build(deps): bump gorm.io/gorm from 1.25.1 to 1.25.5 (#1516)
  • c3e3c4c chore: remove refs to deprecated io/ioutil (#1504)
  • fac90f7 feat(cis-1.24-microk8s): Add support to CIS-1.24 for microk8s distro (#1510)
  • 0c553cd fix wrong use of flag in test_items found in 4.13 and 4.14 (#1528)
  • 92a18e7 support CIS Kubernetes Benchmark v1.8.0 (#1527)

v0.6.19

6 months ago

Changelog

  • 7f5a2eb build(deps): bump docker/build-push-action from 4 to 5 (#1498)

v0.6.18

6 months ago

Changelog

v0.6.18-rc

6 months ago

Changelog

  • 20ad805 Bump docker base images (#1465)
  • 3ef3e9a build(deps): bump alpine from 3.18.2 to 3.18.3 (#1487)
  • 276d30a build(deps): bump crazy-max/ghaction-docker-meta from 4 to 5 (#1499)
  • d70459b build(deps): bump golang from 1.20.4 to 1.20.6 (#1475)
  • e1c6c80 build(deps): bump golang from 1.20.6 to 1.21.1 (#1494)
  • 34ef478 build(deps): bump goreleaser/goreleaser-action from 4 to 5 (#1495)
  • 7ad0f2f updates to the readme

v0.6.17

9 months ago

Changelog

  • c8cabc4 Update job.yaml (#1477)

v0.6.16

9 months ago

Changelog

v0.6.16-rc

9 months ago

Changelog

  • aa16551 Fix node.yaml - 4.1.7 and 4.1.8 audit by adding uniq (#1472)
  • 40cdc1b Fix test_items in cis-1.7 - node - 4.2.12 (#1469)
  • e2e353a build(deps): bump actions/setup-go from 3 to 4 (#1402)
  • a727d73 build(deps): bump golang from 1.19.4 to 1.20.4 (#1436)
  • b29ed6b chore: add fips compliant images (#1473)