Tfsec Versions Save

Security scanner for your Terraform code

v1.28.5

3 months ago

What's Changed

Create auto-close-issues.yml by @simar7 in https://github.com/aquasecurity/tfsec/pull/2104
chore(deps): bump github.com/go-git/go-git/v5 from 5.5.2 to 5.11.0 by @dependabot in https://github.com/aquasecurity/tfsec/pull/2131
chore(deps): bump google.golang.org/grpc from 1.52.0 to 1.56.3 by @dependabot in https://github.com/aquasecurity/tfsec/pull/2132
chore(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 by @dependabot in https://github.com/aquasecurity/tfsec/pull/2133
chore(deps): bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 by @dependabot in https://github.com/aquasecurity/tfsec/pull/2134

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.28.4...v1.28.5

v1.28.4

7 months ago

What's Changed

chore(ci): Update docs generation runner by @simar7 in https://github.com/aquasecurity/tfsec/pull/2101

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.28.3...v1.28.4

v1.28.3

7 months ago

What's Changed

Print the transition message as standard error by @yu-iskw in https://github.com/aquasecurity/tfsec/pull/2099
chore(ci): Fix CI issues by @simar7 in https://github.com/aquasecurity/tfsec/pull/2100

New Contributors

@yu-iskw made their first contribution in https://github.com/aquasecurity/tfsec/pull/2099

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.28.2...v1.28.3

v1.28.2

7 months ago

What's Changed

chore(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1930
Set github stale bot message "days" to its config by @nitrocode in https://github.com/aquasecurity/tfsec/pull/1963
Fix table in usage.md by @Eforen in https://github.com/aquasecurity/tfsec/pull/1922
chore(deps): bump github.com/spf13/cobra from 1.6.0 to 1.6.1 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1933
Update snapshot-release.yml by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1971
chore(deps): bump crazy-max/ghaction-import-gpg from 5.1.0 to 5.2.0 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1928
chore(deps): bump goreleaser/goreleaser-action from 3 to 4 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1964
chore(deps): bump github.com/liamg/memoryfs from 1.4.3 to 1.5.0 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1944
chore(deps): bump github.com/aquasecurity/defsec from 0.82.2 to 0.82.6 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1951
Update snapshot-release.yml by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1973
chore(deps): bump golangci/golangci-lint-action from 3.2.0 to 3.3.1 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1947
chore(deps): bump actions/stale from 6 to 7 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1968
docs: Add Trivy migration guide by @simar7 in https://github.com/aquasecurity/tfsec/pull/1961
chore(deps): bump golangci/golangci-lint-action from 3.3.1 to 3.4.0 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1981
chore(deps): bump github.com/liamg/memoryfs from 1.5.0 to 1.6.0 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1984
Update golangci-lint.yml by @giorod3 in https://github.com/aquasecurity/tfsec/pull/2009
bump go to version 1.19 by @simar7 in https://github.com/aquasecurity/tfsec/pull/2013
chore(deps): bump github.com/aquasecurity/defsec from 0.82.6 to 0.84.1 by @dependabot in https://github.com/aquasecurity/tfsec/pull/2008
chore(deps): bump alpine from 3.16.0 to 3.17.2 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1998
fix typo of drop-invalid-headers doc by @tk3fftk in https://github.com/aquasecurity/tfsec/pull/1976
chore(deps): bump github/issue-labeler from 2.5 to 3.0 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1989
fix: sha256 command by @aiell0 in https://github.com/aquasecurity/tfsec/pull/1987
feat(config): use spf13/viper to read config from env vars by @nitrocode in https://github.com/aquasecurity/tfsec/pull/1990
docs: Trivy callout and migration guide added by @AnaisUrlichs in https://github.com/aquasecurity/tfsec/pull/2021
feat: Add a transition message by @simar7 in https://github.com/aquasecurity/tfsec/pull/2067
docs: README tfsec to trivy migration callout by @AnaisUrlichs in https://github.com/aquasecurity/tfsec/pull/2020
chore(deps): bump github.com/cloudflare/circl from 1.1.0 to 1.3.3 by @dependabot in https://github.com/aquasecurity/tfsec/pull/2055

New Contributors

@nitrocode made their first contribution in https://github.com/aquasecurity/tfsec/pull/1963
@Eforen made their first contribution in https://github.com/aquasecurity/tfsec/pull/1922
@giorod3 made their first contribution in https://github.com/aquasecurity/tfsec/pull/2009
@aiell0 made their first contribution in https://github.com/aquasecurity/tfsec/pull/1987
@AnaisUrlichs made their first contribution in https://github.com/aquasecurity/tfsec/pull/2021

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.28.1...v1.28.2

v1.28.1

1 year ago

What's Changed

chore(deps): bump github.com/liamg/memoryfs from 1.4.2 to 1.4.3 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1893
chore(deps): bump actions/stale from 5 to 6 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1910
chore(deps): bump github.com/AlecAivazis/survey/v2 from 2.3.5 to 2.3.6 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1891
chore: Update defsec to v0.82.2 by @liamg in https://github.com/aquasecurity/tfsec/pull/1932

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.28.0...v1.28.1

v1.28.0

1 year ago

What's Changed

Add missing docs from recent additions to defsec by @reedloden in https://github.com/aquasecurity/tfsec/pull/1884
fix wrong code block by @dawez in https://github.com/aquasecurity/tfsec/pull/1883
feat: support exclude expiry in config by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1897
feat: support optional provider and service name in custom checks by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1899
fix: Ensure rego input is properly filled for nested slices by @liamg in https://github.com/aquasecurity/defsec/pull/952
fix: Readd policy wildcards rule to default framework by @liamg in https://github.com/aquasecurity/defsec/pull/954
feat: add OnlyContains helper function by @owenrumney in https://github.com/aquasecurity/defsec/pull/953

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.27.6...v1.28.0

v1.27.6

1 year ago

What's Changed

docs: Add module ignore documentation by @liamg in https://github.com/aquasecurity/tfsec/pull/1875
build: Speed up caching and tidy actions build by @liamg in https://github.com/aquasecurity/tfsec/pull/1876
fix: Use mktemp instead of /tmp to securely manage temporary directories by @reedloden in https://github.com/aquasecurity/tfsec/pull/1870
chore: Update defsec to v0.73.0 by @liamg in https://github.com/aquasecurity/tfsec/pull/1877

New Contributors

@reedloden made their first contribution in https://github.com/aquasecurity/tfsec/pull/1870

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.27.5...v1.27.6

v1.27.5

1 year ago

What's Changed

fix: Resolve S3 regressions by @liamg in https://github.com/aquasecurity/tfsec/pull/1867

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.27.4...v1.27.5

v1.27.4

1 year ago

What's Changed

fix: panic in sqs adapter by @liamg in https://github.com/aquasecurity/tfsec/pull/1866

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.27.3...v1.27.4

v1.27.3

1 year ago

What's Changed

fix: Fix s3 public access block linking by @liamg in https://github.com/aquasecurity/tfsec/pull/1865

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.27.2...v1.27.3