Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.
9c4918e AWS policy pack update (#737) 964167b Adding release checklist (#734) 4590a3a Feature/aws new policies sp (#751) 2d06d74 Fix NSG associations (#727) d242c2e Gh action terrscan_atlantis release (#733) e6e6b8e Update admission-controller-webhooks-usage.md (#722) 320b191 Update mkdocs.yml (#741) 0c7f4ca add terrascan atlantis container files, scripts and doc. (#684) c44734a adds agrocd integration dockerfile, scripts, doc and examples (#732) 52481bc adds implementation for skipped server mode k8s scan e2e tests (#706) 762c561 adds support to scan directory with all iac providers in cli mode (#674) dee8090 adds support to scan sub folders for terraform iac provider (#640) 881417a changes for argocd integration (#724) 4878eeb doc: add homebrew badge (#714) 0af155d fix failing test (#740) 3bd67ae fixes infinite loop while local variable resolution for terraform (#700) 02c8bce modify iac dir path validation (#720) 95a739e release v1.6.0 (#764) ba7a76a update argo cd documentation (#742) d8fd9c4 update version (#713)
e8e5281 Handle multiple vpc flow logs (#680) a09b879 Moving linux builds to static builds (#708) aecf28d Update index.md (#707) 4c66c22 adding new policy and enhancing the nosiy policy (#575) 5a289d6 adds changelog for v1.5.0 (#692) 5669cbf fix severity output case insensivity fix (#691) 7962a8f updates installation instructions to deduct latest release (#695)
5abf9af 1. fix panic for list variable with no type definition in terraform config (#654) dbaf3a1 AWS Risk Category Changes (#603) cca6d2f AWS new Categories (#581) dfc0d08 Add /go/bin to PATH. (#637) 317a536 Adding openssh to Dockerfile for downloading modules via ssh (#625) 1d1addf Adding support to scan IAC from atlantis workflow (#648) bc364ad Azure Risk Category Changes (#604) 1752bb7 Bugfix/revert policies (#602) 55c1ae1 Category flag e2e tests (#605) 2033718 Fixes broken link in README (#671) 1257ec2 Fixes docs format (#661) d1a198c Log error in LoadIacDir before continuing (#613) 225a914 Makes saving of admission requests configurable via a config file option (#665) c39c7fa Making Category Changes (#606) c6aef0b Moving from goreleaser GH action (#694) 02d312e New Policies for Azure & Category Updates. (#580) 8625834 Reorganized and Updated docs (#655) 23ca9f7 Support for authenticated tf module download (#658) 9546bcc Take file extension from uploaded file (#593) 6bdcf0c Terrascan K8s New categories and ruleRef ID changes (#583) a30788a Terrascan init and config handling refactor (#576) 4a20105 Update cicd.md (#667) c61f306 Update mkdocs-material from 7.0.1 to 7.0.5 (#590) 4d12986 Update mkdocs-material from 7.0.5 to 7.0.6 (#615) 41b159c Update mkdocs-material from 7.0.6 to 7.1.0 (#636) 6929cb2 Update mkdocs-material from 7.1.0 to 7.1.2 (#676) 714cf60 Update mkdocs.yml (#660) a4db22d Update route53LoggingDisabled.rego to ignore private zones (#626) dbb5a91 Updating Rule reference Id's and Policy categories (#582) 71b776f add authentication with API key for the /logs endpoint (#663) dcfbd54 add support for kubernetes validating admission webhook 6604c23 adds support to run k8s validating webhook without dashboard by default (#683) a3bcac7 feature: add support to specify desired categories of violations to be reported (#547) 4df6ce6 filepath fixes in e2e tests (#591) a11f71e fix - init behavior change (#624) 258206b fix - process local sources in remote modules for terraform iac 6103c45 fix kustomize scan breakage on windows (#630) 114222a fix panic for floating point variables for terraform cty types(#653) 585edcc fix recursive variable reference resolution for terraform (#677) 5db6cb2 fix windows tests (#635) 23c8281 make k8s source paths relative to the provided directory for scanning b6732c7 policy download refactor (#618) adf9e7f release v1.5.0 (#689) 9baf154 resolve complex variable types for terraform and add unit tests (#657) 9fe74b4 revert k8s old changes (#608) 538b9ed update helm default chart name and namespace values (#589) 99dc630 updating documentation for k8s admission control (#679) 71a677f v1.4.0 doc updates (#588)
2a7627a Adding code of conduct 2296d3a Adds support for scanning tfplan json file (#562) e838bb5 Bump github.com/spf13/cobra from 1.0.0 to 1.1.1 (#493) 91c018a Fixed incorrect description of a rego policy for RDS encryption bbe97ce Initial changes for e2e testing framework (#553) 7b3593f Merge pull request #501 from dev-gaur/severity_flag efeed62 Merge pull request #527 from patilpankaj212/support-junitXML dabcffb Merge pull request #532 from nathannaveen/nathan/fix/Initializes_Terrascan f14d608 Merge pull request #534 from dev-gaur/update_readme 1afca98 Merge pull request #537 from accurics/docs/v1.3.2 c406568 Merge pull request #541 from patilpankaj212/log-level-fixes 9f3569b Merge pull request #542 from alex-petrov-vt/issue538 b785481 Merge pull request #545 from jlk/add-code-of-conduct 10d6706 Merge pull request #552 from dev-gaur/fix_terrascan_init f9aea57 Merge pull request #558 from dev-gaur/bump_versions f4d7465 Update CHANGELOG.md b579bec Update mkdocs-material from 6.2.7 to 6.2.8 (#539) 98e57b3 Update mkdocs-material from 6.2.8 to 7.0.1 (#567) 69541fb add options to specify desired severity level of violations to be reported 237c04e add writer for junit-xml 58e5f45 added tests for NewExecutor func bda153e adds e2e test scenarios for help and scan command (#564) bbb4a56 adds e2e tests for api server (#585) 6728908 adds support to display passed rules (#572) b93b508 bump versions to v1.3.3 6b79a9c changed the description message (#559) 26bae02 enhancement: scan terraform registry modules as remote type (#513) 78f6458 fix - improved description for init command 1027346 fix filepaths and home directory lookup (#566) b24b89b fix the 'repo already exist' bug and improve error logging for terrascan init fa44485 fix: renamed the json file to remove spaces (#560) f390891 fixes typo 3ef25b6 include docs for latest policy updates 3ffda3e incorporate review changes 3e5170b log level changes for load iac functions ab29871 release 1.4.0 (#586) 6d9e34e reverts to master version 065e010 support for config_only option in api server file scan output (#579) 57ade8a updated go module files (#557) 82dc401 updated readme for v1.3.2 bdfcba8 updates changelog for v1.3.2 ba304e5 updates with new version
1d244a6 Adding code of conduct 4d16e32 Bump github.com/spf13/cobra from 1.0.0 to 1.1.1 (#493) 54f740b Fixed incorrect description of a rego policy for RDS encryption 9088544 Merge pull request #509 from accurics/amirbenv-patch-1 62069cb Merge pull request #514 from accurics/pyup-update-mkdocs-material-6.2.5-to-6.2.6 78dd045 Merge pull request #515 from harkirat22/policy/k8s-improvement ae9effc Merge pull request #516 from harkirat22/policy/aws-launch-config 47d55e0 Merge pull request #517 from gaurav-gogia/fix_405 fd73ed6 Merge pull request #518 from gaurav-gogia/fix_376 31bd625 Merge pull request #520 from harkirat22/harkirat22/bug-fix dd0643a Merge pull request #522 from harkirat22/aws-instance-policies 7682371 Merge pull request #523 from gauravgahlot/docs-fixes 5641824 Merge pull request #524 from accurics/pyup-update-mkdocs-material-6.2.6-to-6.2.7 0b0e9ec Merge pull request #526 from harkirat22/fix_391 40a9ac6 Merge pull request #529 from dev-gaur/fix#521 4febd3b Merge pull request #531 from dev-gaur/init_hot_fix 8c8afcd Update CHANGELOG.md 372796a Update CHANGELOG.md 270f7fd Update README.md d6827b2 Update mkdocs-material from 6.2.5 to 6.2.6 9265b67 Update mkdocs-material from 6.2.6 to 6.2.7 439de58 Update mkdocs-material from 6.2.7 to 6.2.8 (#539) b7f17a1 add support for pod container fcec126 adding new rule to fix bug #391 029a082 bump terrascan version to v1.3.2 1d869c1 bump versions to v1.3.3 6e7a4dd fix - improved description for init command 8cb8e7c fix the 'repo already exist' bug and improve error logging for terrascan init 9b134e8 fix typos in docs aba0c76 fixes #376 4eb3d33 fixes #405 ed57996 fixes typo 471b58e include docs for latest policy updates 92942a9 incorporate review changes 0868005 log level changes for load iac functions 7deaf8e made rule reference ids unique, solves bug#519 afb7ec5 new set of policies for EC2 instance 0fda427 policy for instance profile (launch config) 52625fd policy to check launch config has imdsv1 cc306bc policy to check monitoring for launch config e2ff0a7 policy to check security group for lauch config 24bdc7a refactor init command for robust policy download checks 1fa832f removed irrelevant error 0afa877 removed local policy testing folder 31cff39 reverts to master version df1bd8a terrascan init will download new policies 1d25c62 updated CHANGELOG.md 3869f87 updated go module files (#557) 6d348fe updated readme for v1.3.2 25ce756 updates changelog for 1.3.1 226f00e updates changelog for v1.3.2 cde0357 updates docs with 1.3.1 version 0c72906 updates with new version
9088544 Merge pull request #509 from accurics/amirbenv-patch-1 62069cb Merge pull request #514 from accurics/pyup-update-mkdocs-material-6.2.5-to-6.2.6 78dd045 Merge pull request #515 from harkirat22/policy/k8s-improvement ae9effc Merge pull request #516 from harkirat22/policy/aws-launch-config 47d55e0 Merge pull request #517 from gaurav-gogia/fix_405 fd73ed6 Merge pull request #518 from gaurav-gogia/fix_376 31bd625 Merge pull request #520 from harkirat22/harkirat22/bug-fix dd0643a Merge pull request #522 from harkirat22/aws-instance-policies 7682371 Merge pull request #523 from gauravgahlot/docs-fixes 5641824 Merge pull request #524 from accurics/pyup-update-mkdocs-material-6.2.6-to-6.2.7 0b0e9ec Merge pull request #526 from harkirat22/fix_391 40a9ac6 Merge pull request #529 from dev-gaur/fix#521 4febd3b Merge pull request #531 from dev-gaur/init_hot_fix fed8436 Merge pull request #533 from dev-gaur/release_v1.3.2 372796a Update CHANGELOG.md 270f7fd Update README.md d6827b2 Update mkdocs-material from 6.2.5 to 6.2.6 9265b67 Update mkdocs-material from 6.2.6 to 6.2.7 b7f17a1 add support for pod container fcec126 adding new rule to fix bug #391 029a082 bump terrascan version to v1.3.2 9b134e8 fix typos in docs aba0c76 fixes #376 4eb3d33 fixes #405 7deaf8e made rule reference ids unique, solves bug#519 afb7ec5 new set of policies for EC2 instance 0fda427 policy for instance profile (launch config) 52625fd policy to check launch config has imdsv1 cc306bc policy to check monitoring for launch config e2ff0a7 policy to check security group for lauch config 24bdc7a refactor init command for robust policy download checks 0afa877 removed local policy testing folder df1bd8a terrascan init will download new policies 25ce756 updates changelog for 1.3.1 cde0357 updates docs with 1.3.1 version
3bc7f14 1. initial changes for registry module support 2. fix issue of remote module containing local modules 390eed3 1. initial changes for registry module support 2. fix issue of remote module containing local modules bfbd608 1. initial changes for registry module support 2. fix issue of remote module containing local modules 78fd1d2 1. initial changes for registry module support 2. fix issue of remote module containing local modules 5885f2c Bump github.com/hashicorp/go-getter from 1.5.1 to 1.5.2 181d5b3 Bump github.com/hashicorp/go-retryablehttp from 0.6.6 to 0.6.8 e153cde Merge branch 'master' into dependabot/go_modules/github.com/hashicorp/go-getter-1.5.2 13670d7 Merge branch 'remote-module-support' of https://github.com/patilpankaj212/terrascan into remote-module-support 3589f96 Merge branch 'remote-module-support' of https://github.com/patilpankaj212/terrascan into remote-module-support 8e3e41b Merge pull request #495 from accurics/dependabot/go_modules/github.com/hashicorp/go-getter-1.5.2 a8461cf Merge pull request #496 from accurics/dependabot/go_modules/github.com/hashicorp/go-retryablehttp-0.6.8 26c7ee4 Merge pull request #503 from accurics/readme_skip 51aaf1f Merge pull request #505 from patilpankaj212/remote-module-support 51b686e Merge pull request #507 from williepaul/fix-darwin-arm64-build 6a282a9 Merge pull request #508 from kanchwala-yusuf/v1.3.1 64e6608 Update README.md e6691bb Update README.md ee2a46d Update README.md 1abfc7a Update README.md b452f0a Update README.md bf49487 Update README.md 4b7462e fix dependencies that were breaking the darwin/arm64 build bc015ac fix static check failure 8cb68f1 fix static check failure f784302 fix static check failure 4ccc1d0 go mod tidy 1fe039d refactor DownloadRemoteModule func and more tests 19128c9 refactor DownloadRemoteModule func and more tests e64db7f refactor DownloadRemoteModule func and more tests 88073ee release v1.3.1 3b70d88 tests for remote module 48ae5d9 tests for remote module 32c1196 tests for remote module 7f02c6b tests for remote module
2b8e2cd #394: recognize that empty values for username and password in master_auth block will disable basic auth
c33ebed -support color for default output -change color for 'file'
9d40d8e 1. added setup func to download policies 2. fix code smells
4fbe4ac 1. fix debug messages 2. fix typos in test name
3fd3d95 1. fix debug messages 2. fix typos in test name
c36691f 1. fix panic for list variables 2. test for list variables
33cd0e7 1. fix summary order 2. fix colored writer test
bf202e0 1. format summary 2. print empty quotes when resource name is absent
10ee6d5 1. modify existing tests of Run 2. add new tests for Run
e0c2e07 1. remove _ from test func 2. define variable for error string in test func
63d9867 1. support of rule skip comment for tf 2. human readable output modifications
0212180 1. support skip and scan rules in the server mode 2. refactor the existing config reader code 3. update unit tests 4. incorporate PR review comments
f0cbb79 1. support skip resource with comment. 2. skipped resource violations in output.
2ca27b9 1. toml config file based rule skipping 2. tests around rule scanning and skipping
c4b9aa7 1. update fix for exit code 2. remove default command code
6603436 APE-1319: Revamped Getting Started Section
a086a65 Add Docker image release tagging on release
6d79769 Add new policy for checking insecure_ssl on github_repository_webhook
185f8c6 Add policy AC-K8-NS-SE-M-0188 for CVE-2020-8554
3f759b9 Add v13 flag option for terraform iac
6da5e88 Add v13 flag option for terraform iac
1f296e6 Added Unit test coverage for Kustomize V3 Iac-provider
b1c5360 Added terraform v14 support
d356d5c Apply fix for self referential variables to non-parent modules
87cf969 Bump github.com/gorilla/mux from 1.7.4 to 1.8.0
4d74093 Bump github.com/hashicorp/go-version from 1.2.0 to 1.2.1
eb7e1dc Bump github.com/hashicorp/go-version from 1.2.0 to 1.2.1
03ea645 Bump github.com/iancoleman/strcase from 0.1.1 to 0.1.3
2330164 Bump github.com/mattn/go-isatty from 0.0.8 to 0.0.12
a264778 Bump github.com/mattn/go-isatty from 0.0.8 to 0.0.12
9664dcc Bump github.com/pelletier/go-toml from 1.8.0 to 1.8.1
7d0e3a0 Bump github.com/spf13/afero from 1.3.4 to 1.5.1
feb1a9e Bump github.com/zclconf/go-cty from 1.2.1 to 1.7.1
7a14d2d Bump go.uber.org/zap from 1.13.0 to 1.16.0
07092e5 Bump sigs.k8s.io/kustomize/api from 0.6.5 to 0.7.1
1801ce9 Bump sigs.k8s.io/kustomize/api from 0.7.1 to 0.7.2
385da16 Bump sigs.k8s.io/kustomize/api from 0.7.1 to 0.7.2
a4dc4ef Fire clientCertificateEnabled rule when client certificate is enabled
8a70f9e Fix infinite loop on variable resolution
21d311b Fix link to rego playground in policies documentation
7e1a1bb Fix typo in architecture documentation
2986401 Fix: potential bug added in PR #470
2536a09 Fix: potential bug added in PR #470
66c14cd Fixing policy description
12ce5c6 For human readable output display json output when '--config-only' is used
433415c IMDSv1 check policy
d6872fa IMDSv1 policy: update category, description
df73bc4 IMDSv1 policy: update category, description
5fc9818 Merge branch 'imdsv1-fix' of github.com:accurics/terrascan into imdsv1-fix
283d7d9 Merge branch 'master' into dependabot/go_modules/go.uber.org/zap-1.16.0
2df50b4 Merge branch 'master' into issue-422
23fe143 Merge branch 'master' of github.com:accurics/terrascan into argo-cd-hook
9058454 Merge pull request #386 from HorizonNet/issue-355
4d42c95 Merge pull request #387 from accurics/pyup-update-mkdocs-material-6.1.4-to-6.1.5
dbd5237 Merge pull request #393 from dinedal/fix_infinite_loop_on_variable_resolution
6a24967 Merge pull request #396 from acc-jon/issue394
d37fb58 Merge pull request #397 from therasec/bugfix/gcpcosimage
ab97a48 Merge pull request #399 from dev-gaur/issue_379
55a6c2c Merge pull request #401 from accurics/pyup-update-mkdocs-material-6.1.5-to-6.1.6
9b32df3 Merge pull request #402 from lucas-giaco/master
a463ede Merge pull request #409 from HorizonNet/issue-403
4614d5d Merge pull request #410 from HorizonNet/issue-398
8d6e722 Merge pull request #417 from harkirat22/master
929e377 Merge pull request #419 from accurics/imdsv1-fix
559c45d Merge pull request #420 from accurics/fix-jon-testorder
51d6b44 Merge pull request #423 from HorizonNet/issue-421
f96af13 Merge pull request #424 from HorizonNet/issue-422
2498741 Merge pull request #425 from accurics/pyup-update-mkdocs-material-6.1.6-to-6.1.7
9c5476c Merge pull request #427 from acc-jon/windows-colors
90e4ea7 Merge pull request #428 from gauravgogia-accurics/master
287b370 Merge pull request #430 from accurics/ape-1319
7cc4f16 Merge pull request #431 from patilpankaj212/human_readable_output
32ff137 Merge pull request #434 from kanchwala-yusuf/feature/skip-rules
ce61b02 Merge pull request #435 from accurics/docs/fix-link
c57bb06 Merge pull request #436 from patilpankaj212/scan-refactor
b8a6849 Merge pull request #441 from patilpankaj212/scan-and-skip-rules
960c77b Merge pull request #443 from chenrui333/go-1.15
02e77b8 Merge pull request #444 from chenrui333/add-dependabot-support
432ec9f Merge pull request #445 from accurics/pyup-update-mkdocs-material-6.1.7-to-6.2.3
4557d22 Merge pull request #447 from accurics/dependabot/go_modules/github.com/gorilla/mux-1.8.0
9ac1b32 Merge pull request #448 from accurics/dependabot/go_modules/sigs.k8s.io/kustomize/api-0.7.1
6fab349 Merge pull request #449 from accurics/dependabot/go_modules/github.com/zclconf/go-cty-1.7.1
0f79088 Merge pull request #452 from accurics/docs/pipeline
5a19951 Merge pull request #454 from accurics/argo-cd-hook
20a4bdb Merge pull request #455 from patilpankaj212/annotations-based-skipping
45a7885 Merge pull request #456 from accurics/amirbenv-patch-1
5385258 Merge pull request #457 from harkirat22/master
c39a76d Merge pull request #458 from patilpankaj212/fix-exit-code-on-error
76bf739 Merge pull request #460 from harkirat22/master
f9b176c Merge pull request #462 from ScaleSec/deprecated_gcs_bucket
3368850 Merge pull request #463 from accurics/amirbenv-patch-1
5c565e6 Merge pull request #464 from accurics/pyup-update-mkdocs-material-6.2.3-to-6.2.4
2272168 Merge pull request #465 from accurics/k8s-generateName
e5f74e4 Merge pull request #466 from patilpankaj212/skip-comment-and-scan-summary-additions
49bf32d Merge pull request #470 from dev-gaur/tf14besides12
792166e Merge pull request #473 from harkirat22/harkirat22/362
7c974f6 Merge pull request #474 from harkirat22/harkirat22/359
12f226a Merge pull request #475 from harkirat22/harkirat22/352
c313c32 Merge pull request #476 from harkirat22/harkirat22/432
12b58f2 Merge pull request #479 from patilpankaj212/bugFix
29bbd42 Merge pull request #480 from williepaul/policy-update-2021-01-14
9b65423 Merge pull request #481 from accurics/dependabot/go_modules/github.com/pelletier/go-toml-1.8.1
0cbd6d0 Merge pull request #482 from accurics/dependabot/go_modules/github.com/hashicorp/go-version-1.2.1
9002ce6 Merge pull request #484 from accurics/dependabot/go_modules/github.com/iancoleman/strcase-0.1.3
c713b5c Merge pull request #485 from accurics/dependabot/go_modules/github.com/spf13/afero-1.5.1
5b63ac8 Merge pull request #486 from accurics/dependabot/go_modules/go.uber.org/zap-1.16.0
ddb6f64 Merge pull request #487 from accurics/v1.3-docs
4ef6ce1 Merge pull request #488 from accurics/pyup-update-mkdocs-material-6.2.4-to-6.2.5
a3cee2d Merge pull request #489 from harkirat22/harkirat22/331
4a05a56 Merge pull request #490 from harkirat22/harkirat22/382
643a76a Merge pull request #492 from accurics/dependabot/go_modules/github.com/mattn/go-isatty-0.0.12
b445fd0 Merge pull request #494 from accurics/dependabot/go_modules/sigs.k8s.io/kustomize/api-0.7.2
6251a4a Merge pull request #497 from dev-gaur/fix_potential_bug_470
d301c3a Merge pull request #499 from dev-gaur/tf_v13_flag
f75dd1a Merge pull request #502 from kanchwala-yusuf/release-1.3.0
f4c70ae Merge remote-tracking branch 'origin/master' into lucas-giaco/master
8b644b5 Return varRef instead of val
e336ad6 Update CHANGELOG.md
01e26c4 Update CHANGELOG.md
34979da Update CHANGELOG.md
9ae9128 Update README.md
bad6027 Update README.md
5f48ba9 Update README.md
bcb5790 Update README.md
bc4a4f3 Update README.md
ae1763f Update README.md
916ecf8 Update go.mod
f506ca4 Update go.sum
7bf5afa Update mkdocs-material from 6.1.4 to 6.1.5
766bae8 Update mkdocs-material from 6.1.5 to 6.1.6
8d82c92 Update mkdocs-material from 6.1.5 to 6.1.6
dd2d7fd Update mkdocs-material from 6.1.6 to 6.1.7
b6ce97a Update mkdocs-material from 6.1.7 to 6.2.3
9c71078 Update mkdocs-material from 6.2.3 to 6.2.4
cea7d75 Update mkdocs-material from 6.2.4 to 6.2.5
1fd99c3 Update mkdocs-material from 6.2.4 to 6.2.5
9ff312a Update policy example in the documentation
be9c502 Using constants
bae80a8 Using constants
cecc7bf add ScanSummary to ViolationStore
ff73e3a add annotations in test file
60ce034 add annotations in test file
62236df add cases for human readable
fe0c724 add check for privileged containers (rule 106)
3bafe49 add comment for SkipRules in ResourceConfig struct
df42ce9 add link to CLI options
31ee512 add support for extracting rules to skip from terraform resource config comments
b6db0ae add test in run_test for scan and skip rules using config file
c727767 add warning message for terraform v12 users
a359304 added unit tests for breaking changes case
a05d83d adding an else condition to relate management lock with resource group
39067c7 adding an else condition to relate the flow log with vpc
ab0ebc6 adding rule to check if waf is enabled at cloud front distribution
e0e6bd7 adding specific steps to argocd integration
51888c4 adding unit tests for extracting rule ids to skip from terraform resource config comments
380e60a adding unit tests for testing no rule ids present
a194b49 adds gitlab and github ci integration docs
a1e3947 adds link to k8s policy docs
12f6439 adds logo
4bd932b annotations based skipping
919aece annotations based skipping
443129b bump go to 1.15
6e7b687 changed the description to include the vulnerable versions
1f0e811 deps: add dependabot support
5a6d70e display error to user if config only used with human
66bdd4f docs updates for policies
b1c8f99 exit with status 1 in case of an scan error
78b6822 fix code smells
451e72c fix code smells
c02bd36 fix incorrect loop exit
c79dce5 fix output format
305a8e2 fix sonar duplication issue
fe2dca0 fix tests breaks due to resource config change
276ed9e fix too many arguments for Run func
d583cd3 fix writer tests
91fa2ed fixes dead link to old getting started page
f87e2b7 fixes docs
0953440 fixes gcp cos node image policy
a95164e fixes links
3fff7b9 fixes typo
a4857a3 fixing existing terraform unit tests
72653b4 fixing existing writer unit tests
e3016dc fixing typos
932a1a6 hopefully remove test failures due to non-deterministic comparisons
b2a7d06 hopefully remove test failures due to non-deterministic comparisons
8080e17 human readable output for terrascan
bbc6e5a including a check for verifying in line policy is mentioned or not, thus solves the false positive issue #359
0ea7356 incorporate review comments
49562fe incorporated the review comments
26120dc initial changes for rule id based scan and skip
e90045c introduce constructor func for ScanOptions
3942de8 local make cicd results
be19375 makes case agnostic
e5cec3e merge with origin
580847e modify tests for k8s iac-provider
08f94ec move function to extract rules IDs to utils package
9103637 other scan summary details
e8d1068 policy for CVE-2020-8555
293a98e policy update 2021-01-14 37 rule(s) added 0 rule(s) deleted
6530dc8 rebase and fix failing test
8b2528e recognize metadata.generateName
bc056a5 refactor scan command
eefda2c rego update
d2cb1a8 remove lines added for testing
eeab9fe remove rules that have been replaced by the newer format
71645d2 rename ScanCommand to ScanOptions
209fb65 run refactor and tests
9f68c60 service check wasn't required
e6af151 set console mode on windows so colors render
dcd02a1 snake case for human readable
91790db solves issue #331
f3cf216 solves issue #331
8fbe227 solves issue #382, and improved policy to relate disk with the instance
fdf8dae solves issue #382, and improved policy to relate disk with the instance
66bb640 terrascan argo-cd instructions
d7a2543 test for resource skipping
846a792 test for resource skipping
cb11130 tests for writers
cf4e248 tweak argo cd instructions
73a1169 update regex and unit tests
88481ce update version to v1.3.0
96dfc94 update version to v1.3.0
117c40c update writer tests
349d5c9 updates changelog
0ddc688 updates changelog
1b56749 updates changelog for next release
321cf34 updates policy docs
303d716 updates policy docs
522abb9 updates relevant to v1.3.0 and latest features
2101022 updates version flag on help
a56806c using hash placeholder instead of latest.
9eaf1a2 writer test
a56270e Add check for visibility for github_repository 53657d0 Add instructions for booting terrascan demo 85a0666 Add line about kubernetes YAML/JSON support c228665 Add new policy for checking insecure_ssl on github_organization_webhook 780408e Add policy set for GitHub provider 8b5f811 Add step-by-step instructions for interacting with the demo env 5b612ed Bring Go to 1.15 in Github Actions 414035d Bring Go to 1.15 in Github Actions d6eb16e Fix typo 9792a28 Fixed messed up merge cd2c0c5 Fixes header e783b6b Fixes typo 35c1c54 Merge branch 'colorize' of github.com:acc-jon/terrascan into colorize f799685 Merge branch 'master' into issue-325 2fe16cc Merge branch 'master' into issue-325 e1df4c1 Merge branch 'master' of https://github.com/accurics/terrascan 1f89abd Merge pull request #1 from accurics/master afc78b5 Merge pull request #319 from kklin/demo-badge 570cc9b Merge pull request #333 from HorizonNet/issue-326 424c823 Merge pull request #334 from HorizonNet/issue-325 c061f02 Merge pull request #335 from accurics/readme-update-k8s 0b22a65 Merge pull request #336 from accurics/auto-pickup-supportedtypes f380b89 Merge pull request #337 from accurics/docs/github-policies dcd76dd Merge pull request #340 from accurics/pyup-update-mkdocs-material-5.5.12-to-5.5.14 9aad2cf Merge pull request #343 from kmonticolo/fix_typo 25a7c45 Merge pull request #344 from accurics/bugfix/fix-providers-unit-test f1c80fe Merge pull request #345 from accurics/feature/downloader-support 45a6ee9 Merge pull request #346 from accurics/pyup-update-mkdocs-material-5.5.14-to-6.0.1 556d333 Merge pull request #347 from acc-jon/colorize 49f66ed Merge pull request #348 from accurics/pyup-update-mkdocs-material-6.0.1-to-6.0.2 347bee3 Merge pull request #350 from HorizonNet/issue-339 2c964d5 Merge pull request #351 from accurics/feature/support-resolve-variable-references a8084f6 Merge pull request #354 from acc-jon/master 4a5d34d Merge pull request #356 from accurics/pyup-update-mkdocs-material-6.0.2-to-6.1.0 222bd31 Merge pull request #357 from accurics/feature/aws-serverless-regos fd2bf7c Merge pull request #360 from accurics/bugfix/add-git-binary 935e3b0 Merge pull request #361 from accurics/bugfix/fix-http-request d7bc4aa Merge pull request #366 from accurics/bugfix/large-file 7a8e07f Merge pull request #368 from acc-jon/master fb7b01c Merge pull request #370 from accurics/pyup-update-mkdocs-material-6.1.0-to-6.1.2 411a4aa Merge pull request #371 from accurics/pyup-update-mkdocs-material-6.1.2-to-6.1.3 e3bb0bd Merge pull request #372 from acc-jon/master d375f0e Merge pull request #373 from acc-jon/issue365 ba331e0 Merge pull request #374 from accurics/pyup-update-mkdocs-material-6.1.3-to-6.1.4 73d29aa Merge pull request #377 from williepaul/add-helm-support 5c96b2f Merge pull request #378 from dev-gaur/add_kustomize_support 19f5527 Merge pull request #381 from williepaul/fix-helm-subchart-rendering 6512163 Merge pull request #383 from gliptak/patch-1 6b484b1 Merge pull request #384 from gliptak/patch-2 62a3549 Merge pull request #385 from williepaul/disable-cgo-in-dockerfile ee0bd01 Merge pull request #388 from therasec/docs/1.2.0 25d5b56 Merge pull request #389 from kklin/rm-demo 2d1374b Merge pull request #390 from kanchwala-yusuf/update-version/1.2.0 64a974a Remove demo badge f536982 Remove demo badge f4d9bd5 Renamed GitHub repository policy ID 51c3eb8 Update demo docs to use new Blimp demo version 84bb503 Update mkdocs-material from 5.5.12 to 5.5.14 e3f1b02 Update mkdocs-material from 5.5.14 to 6.0.1 0c7aa1e Update mkdocs-material from 6.0.1 to 6.0.2 2e6f213 Update mkdocs-material from 6.0.2 to 6.1.0 700b668 Update mkdocs-material from 6.1.0 to 6.1.2 ad98ac2 Update mkdocs-material from 6.1.2 to 6.1.3 164964a Update mkdocs-material from 6.1.3 to 6.1.4 c2a3b43 add JSON termcolor tests bf715f3 add JSON termcolor tests 0481625 add ability to download remote repository in CLI fc46888 add comments, debug log messages and code clean up c4457da add config only option to remote repo scanning API in http server 11be46b add cty map to golang map converter c3c2fc6 add downloader support c57aa66 add function to return list of supported Iac Types a15af41 add function to return list of supported policy types fe1044b add git binary to terrascan docker image, required by downloader 637d286 add method to clean up cached/installed repositories d834e2e add method to download remote repo with type specified d88a767 add method to generate random string 8492103 add policy path for tests d8b9d7c add remote scanning support in http server 8b274be add support for colored output 24272d0 add support for colored output 5fd0685 add support for downloading remote modules in terraform v12 Iac scanning c79f2a8 add support for resolving variable references for file scan 659e15b add support for resolving variable references in a module 538704c add support for resolving variables initialized/overriden in module calls 160743f add support to download remote repo in CLI 392c486 add support to get list of iac types with default versions 10bd8c9 add support to resolve cross module references 1bfce05 add support to resolve lookup references 0b0103e add support to resolve references in a slice 3d19a3f add supported to resolve multiple references in the same expression e057bfe add unit test for GenRandomString() method e72bf36 add unit test for downloader methods 530d679 add unit test for remote module installer clean up 58d4745 add unit tests for GetURLSubDir 25d8b94 add unit tests for module-download file 7c9fa06 add unit tests for policy package ece2ab1 added kustomize support 442e39a added vendor/ in .gitignore b92d331 address #365 by properly handling submodule path 6d5d3be adds analytics bde73b6 adds clarification on default behavior c0b5705 adds documentation for '-t all' flag b2ea41d adds helm docs e1a0422 adds initial helm support - supports loading of helm v3 charts via the iac dir command (iac file is invalid) - adds default iac versions for all iac types - adds unit tests - adds ability to properly specify default iac version for a given iac type 57ac4a2 adds kustomize to docs 733831c adds new policies e910754 adds policy docs 7ed87c5 adds policy to check kms on lambdas e07d60d adds rego checking lambda is config to launch on a vpc 5530d27 adds rego for insecure cors config 14fb90e adds rule for cloudwatch logs encryption 8dc98c2 adds section for github policies ae5d650 allow config file for global policy config 82ea9ac allow multiple cloud types, default to all 4b8d917 automatically pick supported Iac versions for help display 1a2f072 change file name 7e73f26 changes 34870a6 changing repo for testing a332115 changing repo url from ssh to http 1a35277 clean up flag handling 2a0e3ac clean up flag handling 250d464 commenting a log message for now 220795f fix a bug when rendering subcharts - in some cases, subcharts could not be rendered properly - change how we render values such that default capabilities are set, preventing rendering errors - set lintmode to true to allow ignoring of certain rendering errors from within the rendering engine - add resource count checking to load-dir unit tests - update error messages to make sure we are including the error data d5bde39 fix gofmt errors eb26ba5 fix imports ec68170 fix indentation 9c460f4 fix indentation f1f5231 fix lint, style issues 24c4948 fix logging init. clean up tests. use globlal toml config file for policy config 8d4bad1 fix send request method, previously hardcoded 772901b fix sonarcloud issues - avoids some repeated strings by using logger.With() - move rendering code into a separate function - remove a duplicate test - add more comments 83473ea fix sonarcloud issues - try #2 with cognitive complexity by moving for loop outside of the render func - update error level of some log messages 577d5ca fix style bbc2f90 fix style issue 94cd15a fix style, tests for policy type "all" 695801c fix supported providers unit test, sort the wanted result b038fab fix test args 43c4970 fix typo 6889c14 fix typo 613d2e5 fix unit tests daecab4 fix unit tests - make sure empty directories are created by adding a placeholder file 545692f fixes dockerfile build issues - disables CGO to prevent any dependencies from failing the build - the GOARCH variable was named incorrectly and not being picked up during the docker build - locked both the alpine and golang versions for the docker build ed26230 fixes policy name 48b6ea8 fixes review comments - adds .yml to the valid list of chart yamls - default to 1 instead of 0 for source line in the helm_chart resource - TODO: add values.yml support for rancher a8fce5a fixes severity 95401c4 fixes severity d23b460 fixes typo b0f28f1 fixes typo and removes severity from reference id 62ce1c1 fixing error messages for unit tests fdc888a fixing exisiting unit tests 368fd23 fixing unit tests dcd6cb7 import 'sort' package f5fed60 improve isRef method, reorder switch cases for str ref resolution b5778ea improve regex pattern, getLocalName method and string replace method for local references 308c69b improve regex pattern, getLocalName method and string replace method for lookup references d27c892 improve regex pattern, getLocalName method and string replace method for module references 876587a improve regex pattern, getLocalName method and string replace method for variable references 4bf99eb improve variable regex pattern, improve gwtVarName method 25f258c last minute fixes 5960227 load global config from toml config file 5789f8f making staticcheck happy 8ac4d82 missing access logs 09d81f8 optimized yaml utility function 0e3d31a organizing reference resolution into multiple files 4f99d24 pick automatically pick up list of supported types in cli help 557294c properly handle nested submodules (#365) 765a2ef refactor and add unit test for remote scan repo API handler 794df55 refactor downloader package, add downloader interface d1806c3 refactor module download 5183da8 refactor styling to support styles file 2eed6bc refactor styling to support styles file 2f6b772 refactoring downloader package 9385d11 remove Chart.yml from valid helm chart names - Chart.yml is used by rancher, but we would likely support rancher in a separate iac type, so removing from helm 54b4891 remove redundant methods from cli/run.go ff4b428 removes comment c89ee87 removes large file 54ab58d removes severity from reference ids 03ac868 removing code smells bac379d reverting back the unit test cases changes 04be644 reverts to using latest aea0e0b rewording 20f32e0 rewording 3508fe5 sort supportedPolicyTypes output fff04ae trying to resolve sonar cloud code duplication issue 8a523ad update debug log messages 53db1a0 update go mod files 388a93b update module files 77be67d update module files b10a8e1 update version to v1.2.0 cfc49ca updates changelog 37d0f15 updates description a5cc45f updates error message severity and suppresses a normalization error - errors were output when helm template rendering created a blank file, which is still valid yaml - the "invalid kind" message is suppressed in this case, since rendering an empty template may be intentional - error log levels and also error messages were updated per review comments af0af4d updates latest k8s policies acf5e18 updates version and kustomize support 1f643b1 updating regex and logs 45d2b18 updating scannign section with additional examples
e498942 Adds exit code when issues are found c7b4797 Fix headers 0a73752 Manage relative module path 5a30d06 Merge branch 'master' into kubernetes-support 4f0bd92 Merge branch 'master' into kubernetes-support c44a663 Merge pull request #291 from accurics/bugfix/xml-output b4caa81 Merge pull request #292 from accurics/pyup-update-mkdocs-material-5.5.6-to-5.5.7 1ae533b Merge pull request #295 from erichs/doc-fixes - Fixes typos in documentation 3f21021 Merge pull request #296 from accurics/bugfix/docker 37760a9 Merge pull request #297 from accurics/update-policies-082020 ca75f86 Merge pull request #298 from accurics/Upa-acc-patch-1 d170c17 Merge pull request #299 from accurics/feature/exitstatus 053660a Merge pull request #300 from accurics/pyup-update-mkdocs-material-5.5.7-to-5.5.8 17ffd93 Merge pull request #301 from accurics/bugfix/capitalization 118129a Merge pull request #306 from zmarouf/patch-1 b698de5 Merge pull request #307 from accurics/pyup-update-mkdocs-material-5.5.8-to-5.5.12 f98373b Merge pull request #308 from guilhem/relative_module 618475a Merge pull request #309 from accurics/add-config-only-output d182f1c Merge pull request #313 from accurics/kubernetes-support 97b7612 Merge pull request #314 from accurics/jon-badges 2953c19 Merge pull request #315 from chenrui333/add-homebrew-installation 6eb0a6b Merge pull request #316 from accurics/bugfix/template-rendering-issue f6c1acb Merge pull request #317 from accurics/bugfix/output-logs-to-stderr 3402ba9 Merge pull request #318 from accurics/change-docker-default 67e42be Merge pull request #321 from accurics/bugfix/fix-checkIpForward-rule cbe6c35 Merge pull request #322 from accurics/revert-321-bugfix/fix-checkIpForward-rule 1a90445 Merge pull request #323 from accurics/fix-check-ip-forward 4c30787 Merge pull request #327 from accurics/docs/k8s ab92377 Merge pull request #328 from accurics/update-k8s-initial-policies 63b757e Rename KubeDashboardDisabled.rego to kubeDashboardDisabled.rego f107f76 Revert "fixed a bug in checkIpForward" 7d1f18a Typo fixes 434dba7 Typo fixes 246797c Update README.md 6beb097 Update about.md 298b6e6 Update about.md eb9cc0c Update mkdocs-diagrams from 0.0.2 to 1.0.0 b11d8ae Update mkdocs-diagrams to 1.0.0 c1a13ea Update mkdocs-material from 5.5.6 to 5.5.7 04fe83b Update mkdocs-material from 5.5.7 to 5.5.8 63727a1 Update mkdocs-material from 5.5.7 to 5.5.8 602a557 Update mkdocs-material from 5.5.8 to 5.5.12 ffe2a49 Update readme 605edca Updating changelog with v1.1.0 enhancements and bugfixes 65636ce Updating changelog with v1.1.0 enhancements and bugfixes ae346e8 add changes missing from the last commit - error message updates - added config-only unit test - removed unnecessary checks in the api server 89ad5b1 add support to print resource config as an output 52babb8 adds docs for k8s policies 6ee0af2 adds exit code explanation to docs 9ccf599 adds go get instructions 791123d bumps version references to 1.1.0 1edf439 changing header name from CLI Output formats to CLI Output types de8e375 chore(docs): add homebrew installation 9cb321b chore(docs): fix indent of tar extraction d5418b5 clean up go.mod/go.sum 75253ce documents policy changes 5b3ae20 fix template rendering bug - templates were only being rendered once per file, rather than once per rule - thus, the first render for each file would win, and violations could trigger (or be missed) if using a shared template f8267da fix typo 5b3a2b2 fix typo in readme, clean formatting 2719aac fix xml output e573629 fixed a bug in checkIpForward "not api.config.can_ip_forward == true" should be "api.config.can_ip_forward == true" by default, can_ip_forward is false, so no need to check for existence of the key before checking if can_ip_forward is true 688b7d1 fixed checkIpForward rule (gcp) ecd531b fixed location of the readOnlyRootFilesystem param 2372876 fixed merge issue - silenced a noisy log and downgraded the severity of another a94f375 fixed review comments - error message updates - added config-only unit test - removed unnecessary checks in the api server - changed resource representation to match terraforms resource naming 3dcd3c7 fixes a core dump when template_args are not set in the rule 8bd290e fixes format errors on docs 85e88e4 fixes formatting error 7d8ad0a fixes github ref for pushing latest docker image af127cb fixes github ref for pushing latest docker image c468b39 fixes if statement 7742b15 fixes if statement 915ec5b fixes if statement 0ac6c04 fixes if statement 2fbe793 fixes issue template as we no longer use python 42853a7 initial kubernetes support (continued) - add Jon’s change for a relative directory resolve bug - go.mod tidy - don’t call os.exit() from run() when running unit tests - simplify k8s normalization—no manual json parsing - fix default AWS IaC type (was set to was instead of terraform) - fixed JSON loading bug - increased unit test coverage 04ceabe initial kubernetes support - adds support for kubernetes violation detection in yaml using repo - adds default iac versions/types per policy/cloud provider - policies and more unit tests to follow in the next checkin 3f3e7b5 initial policy set for k8s e97fa89 move server command out of ENTRYPOINT and into CMD - sets the base command as default - per @acc-jon 142dccc removes dup comment 4198bdc send logs to stderr instead of stdout f2a9f32 update documentation with description of different output formats supported in terrascan 44544f0 update readme ee580c0 updated download instructions post install b4565c9 updated k8s policy set and documentation 9ff59b2 updated policies to the latest set d978c3a updates with new help output which includes k8s relates instructions