terrascan

Changelog

• b018d772 Adding CFT scanning support for the resources: (#1149)
• 2f3c2d9a Adds: missing release tag push step (#1151)
• a524076b Bugfix/coginto pool (#1159)
• 2f294b45 Bugfix/s3 user policy (#1157)
• f1acad73 Feature/s3 policy update (#1153)
• ccca7eee Update mkdocs-material from 8.1.10 to 8.2.1 (#1155)
• c8234f4d fix rds encryptionc check policy (#1156)
• 21a73844 release 1.13.2 changelog (#1161)
• b45a099e skip terrascan init for --config-with-error flag (#1160)

Changelog

• 0fd6b7dd Add Policy AC_GCP_0296 - Service Attachment with ACCEPT_AUTOMATIC (#1147)
• b0259e8b Adds: logger in case of flag parsing fails (#1115)
• 969d8dfa Allow internal github repos to pass AC_GCP_0231 & AC_GITHUB_0002 (#1131)
• 090d7679 Allow tfplan format version 0.2 (#1074)
• 14a634ba Feature/ec2 cog lambda acm cft (#1129)
• 575bff2e Feature/eks msk vpc version (#1140)
• 4dae7e4a Feature/rds sage dms load emr msk (#1133)
• 94cc7ced Fix gcp policy AC_GCP_0014 - dnsStateIsNotOn (#1033) (#1107)
• 87ce30e6 Fix typos in docs and release_checklist (#1138)
• c37172a5 Prevent adding both skipped and failure elements (#1123)
• ae4eccb6 Update README.md (#1109)
• d7316b69 Update mkdocs-material from 8.1.4 to 8.1.8 (#1124)
• 683de81c Update mkdocs-material from 8.1.8 to 8.1.9 (#1132)
• b6f2ed06 Update mkdocs-material from 8.1.9 to 8.1.10 (#1141)
• 52e4cdb2 Updates CloudFormation mapper to support additional resources (#1120)
• 08ec43b4 add ability to output normalized resource config with errors (#1134)
• 9780e131 add rule id to docs (#1136)
• b75cab78 fix panic in cft (#1146)
• 7325cf96 fix: pkg/iac-providers/docker/v1/testdata/file-test-data/dockerfile-withmultiple-stages to reduce vulnerabilities (#1144)
• db9103e8 fixes failing docker iac provider test (#1145)
• 950e20ba release/v1.13.1 (#1150)
• 1dc8ebbe update cft mapper (#1143)
• 20ef2321 update cft mapper (#1148)
• f205cff5 updated discord link (#1118)

Changelog

• 790b1dd Fix Sarif file uri path invalid in Windows and update go-sarif to latest (#1070)
• ffd5d75 New k8s policy to detect CVE-2021-25742 (#1069)
• 2cde272 Update mkdocs-material from 7.3.4 to 7.3.6 (#1075)
• 5761394 Update mkdocs-material from 7.3.6 to 8.0.3 (#1092)
• 81f67ad Update mkdocs-material from 8.0.3 to 8.0.5 (#1095)
• ddad143 Update mkdocs-material from 8.0.5 to 8.1.3 (#1101)
• c8344ba Update mkdocs-material from 8.1.3 to 8.1.4 (#1106)
• 6a849d4 fix go mod (#1094)
• 83afdb7 fix input CFT templates based on goformation structs (#1105)
• 84eae3f fix: handles nil pointer issue while extracting container images (#1076)
• 9dec8e8 making change in imageVersionnotusinglatest.rego (#1068)
• 9f75f75 release/v1.13.0 (#1108)
• d2ede64 updating policies to detect cve-2021-25742 (#1071)

Changelog

4ee5e04 Accept notification webhook configs as CLI args (#1042)
056c30c Add support for getting line numbers for all attributes (#1055)
474f1b6 Add support for repo-url and branch name in CLI flags and scan output (#1059)
0719c9c Fix notification webhook flow (#1051)
f81d81f Update atlantis base image (#1054)
a3e7161 Update mkdocs from 1.2.2 to 1.2.3 (#1058)
1b60b11 Update mkdocs-material from 7.3.2 to 7.3.3 (#1057)
9c89ec1 Update mkdocs-material from 7.3.3 to 7.3.4 (#1060)
743756d release v1.12.0 (#1066)
835f90b update container image version in helm and kustomize sources (#1050)

Changelog

eaf5927 Adds additional dockerfile policies (#984)
b6337a0 Adds: e2e tests for vulnerability (#1009)
56b6964 Adds: support for harbor registry vulnerability fetching (#1015)
de98118 Optimized disk encryption check code. (#1037)
b11c43a Update README.md with instsall instructions for ArchLinux / Manjaro (#1011)
a400d98 Update docs for AWS.LambdaFunction.Logging.Low.0472 policy (#1027)
683be27 Update mkdocs-material from 7.2.4 to 7.2.6 (#1012)
ec87a48 Update mkdocs-material from 7.2.6 to 7.3.2 (#1043)
c11052e accepted 2xx in response code as success (#1040)
d76a41a fix #1046: helm chart breaking due to invalid configfile name extension (#1047)
362aa86 fix permission issues in creating webhook mode logs file persistence
2bf4cdb fix: added null check before value conversion to avoid panic (#1020)
db18509 release v1.11.0 (#1048)

Changelog

d1a11f3 Adds additional policies for dockerfile (#996)
cecdd6e Adds: e2e test for docker IaC provider (#968)
687863e Bump github.com/hashicorp/go-getter from 1.5.2 to 1.5.7 (#993)
d24a8b8 Bump github.com/hashicorp/hcl/v2 from 2.10.0 to 2.10.1 (#972)
68c36a1 Bump github.com/pelletier/go-toml from 1.8.1 to 1.9.3 (#999)
e55a624 Bump github.com/spf13/afero from 1.5.1 to 1.6.0 (#970)
6ae1274 Extract Docker images from Terraform templates (#937)
b42be70 Extract Docker images from k8s YAML files (#905)
256facf Extract images from Dockerfiles (#1002)
309e9f5 Fix dependency issue that caused dependabot to fail (#966)
05a65a3 Fixes supported Kustomize version (should be v4) (#932)
01184ad Initial support for image scanning (#989)
81495a9 Revert "update resource type to map[string]bool (#992)" (#1001)
c3458b1 Update helm.sh/helm/v3 v3.6.1 (#1000)
1269301 Update mkdocs-material from 7.2.2 to 7.2.3 (#978)
e9017b1 Update mkdocs-material from 7.2.3 to 7.2.4 (#985)
a559f4b added binary based support for kustomize v2 and v3 (#988)
5077005 adds brew instructions to release checklist (#987)
c9f7483 bump up version to 1.10 (#1008)
ced64a2 fix(policies): removing false-positive for K8s namespaces (#961)
a2b9bd2 modify wait logic for service account creation (#979)
5c6a2c1 terrascan should exit with non zero exit code when scan error are present (#994)
9aea292 update changelog (#1005)
3e8d964 update resource type to map[string]bool (#992)

Changelog

c1b2d57 Add support for CFT nested stacks (#949)
7fb8bb4 Adds Terrascan pre-commit (#953)
5477227 Adds support for using Terraform modules cached locally (#940)
11db729 Dockerfile support (#849)
f922d00 Update README.md (#945)
485d577 Update mkdocs-material from 7.1.11 to 7.2.0 (#939)
aaacce2 Update mkdocs-material from 7.2.0 to 7.2.1 (#947)
af9deed Update mkdocs-material from 7.2.1 to 7.2.2 (#954)
d1d21fc fix - config only option used with remote repo scan generates panic (#948)
fad5d92 release v1.9.0 (#965)
a3e0b6e temporary fix for k8s policy filtering issue (#963)
b0c9873 update helm chart progress checklist (#943)

Changelog

35afbe6 Add support for arm linked templates (#903)
2443118 Do not initiate policy engine incase of --config-only flag
cf582eb Remove unnecessary KMS deletion window code (#918)
35c7ca1 Update mkdocs from 1.2.1 to 1.2.2 (#935)
dbf90e8 Update mkdocs-material from 7.1.10 to 7.1.11 (#938)
29201a7 Update mkdocs-material from 7.1.9 to 7.1.10 (#929)
ef959f1 Update overview.md (#919)
656744d Updating the dax cluster policy (#909)
8bba815 add github-sarif writer for github suited sarif output (#907)
89555e5 add integrations overview and minor fixes (#913)
80c00e0 fix error log message for terraform file (#914)
c9d73e0 fix go mod files (#941)
73bcc12 fix(sws/cloudfront): wrong check tls version (#928)
d231a43 fixed e2e test cases for --config-only
5513a0f fixes: broken doc links (#921)
1721cde minor-doc-fix (#916)
c299d50 policy to detect a service without selector (#931)
bf23634 release v1.8.1 (#942)
87efa51 terraform 0.15 support (#860)
aba0d62 update getting started and Usage, fix links (#920)

Changelog

325985d Add ID Field in Azure Policies (#872)
9e962b9 Add Microsoft Azure ARM as an IaC Provider (#736)
95b02c4 Added "id" field support & policy validation tests (#843)
7a4de55 Addind AWS Network Security Policies (#866)
32a4c15 Adding Id fix for github policies (#874)
6e3cc71 Adding missing Id field for GCP policies (#870)
6b7b83f Bugfix/az nw sec policies (#862)
4bbb647 Bugfix/k8s id field (#873)
bcc4cf2 Change api, Add support for s3 bucket resource and better cft loader (#865)
9f050b3 Fix authorization header for http request (#877)
b8fda7c Fixes incorrect filepath reporting in sarif output & added e2e tests for sarif output (#863)
7fd8ba0 Minor documentation fixes (#908)
1b58346 Spilt usage docs (#890)
c3f372f Update Integration Docs.md (#885)
c43ec4a Update cicd.md (#901)
51a71f8 Update cicd.md (#902)
4bf9b35 Update mkdocs from 1.1.2 to 1.2.1 (#886)
1db0999 Update mkdocs-material from 7.1.4 to 7.1.8 (#859)
0734df7 Update mkdocs-material from 7.1.8 to 7.1.9 (#895)
a74765d Update usage.md (#893)
decb1e9 Updates documentation on Terrascan github action (#894)
c04acd4 Updating network security policies for GCP (#869)
bedfaa1 Use CGO independent package for sqlite (#906)
40c0aa8 add in-file instrumentation segment (#910)
36ca6eb add proper values via metadata (#888)
7d20723 adding ID field (#871)
c642063 fix broken link to usage.md (#855)
80902fa fix error messages reported from hcl diags (#911)
2ca5eb1 fix(pkg/policies/opa/rego/azure/azurerm_container_registry/containerregistryresourcelock.rego): check correct fields (#858)
617ef74 fixed sarif unit tests hardcoding code smell (#857)
cee9ab4 fixes: recursive loop when parent and child module has same local block (#900)
4fd7642 improves: filename in remote module (#867)
2fdc14d k8s policies refactor (#879)
0f0be20 mod policies to achieve parity with siac (#878)
1f316eb release v1.8.0 (#912)

Changelog

95aba12 Add AWS CFT as an IaC Provider (#815)
a4d7af9 1. fix failing test due to log message assertion (#812)
b899922 Add ID Field for AWS Policies' Metadata (#831)
48f92ef Add ID Field for K8s Policies' Metadata (#826)
cb2be19 Add module name in violation summary for terraform scans (#774)
07c1e4f Add a kustomize based guide for setting up terrascan server and validating webhook in kubernetes (#739)
0a1912f Add e2e tests for k8s admission control validating webhook (#772)
1d7e5b9 Add webhook setup capability and remote repo scan capability in the helm charts (#778)
940a446 Added source_range 0.0.0.0/0 (any) to avoid rule violations (#776)
3f02324 Adding Aws new policies cloudTrail (#810)
5f4b15a Adds support to scan config resources with applicable policies & Refactors filteration (#803)
5057073 Adds: in-file instrumentation for resource prioritizing (#802)
05e4db3 Automate generation of TLS Certs using Helm (#779)
8fc20b2 Bugfix/use ref id old format (#846)
0f03866 Bump up to Go 1.16 (#836)
9adfe1d Do not trim resource id from tfplan json (#825)
53eda39 Documentation (#768)
37cef51 Feature/az id field (#808)
72e3ebc Fix accurics.azure.AKS.3 (#712)
0eae483 Fixing the bug for google_kms_crypto_key policies (#848)
01c8d78 Initial addition of terrascan helm chart (#688)
636515e JSON and Rego updated (#787)
82e5242 Support for spaces in policy reference_id (#833)
0cf4ed6 Update mkdocs-material from 7.1.2 to 7.1.4 (#746)
9db3868 Update mkdocs-redirects from 1.0.1 to 1.0.3 (#710)
d7e16f6 Update policy description to match correct port. (#777)
9ac1667 Update usage.md (#765)
1839b24 [feat.] Merge Webhook and Server Helm Chart (#817)
1229942 [fix] Add Alternate names for k8s services (#834)
9ff6f2f add check for env vars and kms, fixes #682 (#827)
0d8bc97 add id field for matching policies siac/terrascan (#824)
0ed8ef7 add logging middleware for server (#785)
afc2a18 add support for YAML format for terrascan config file (#816)
fafdda4 add support for sarif format violation reports (#806)
dc0b428 add validation for tls private key and cert file values (#771)
971845a bucket policy check false positive fix (#828)
358fc67 check for loopback addresses in endpoint slice (#830)
a3f26c1 config file changes for terrascan server (#780)
b012204 enhancing aws policies (#829)
23bb0ae fix multierror variable issue for helm, kustomize and k8s (#818)
cbbde51 fix terraform inner block reference resolution (#844)
0c3c547 fix: add validation for module local source dir in terraform iac (#793)
0e4c830 fix: modified docker file to use UID of user (#773)
eff166f fix: moves the pending test to running (#819)
5060bbb fixing the policy (#847)
ff2c2a5 improve unit tests for config reader package (#820)
66159bd making file paths relative for k8s IaC (#821)
e4ae20c policy metadata changes to include policy_type and resource_type (#792)
9316d5d reference ids with & and fixed (#845)
446b80f release 1.7.0 (#850)
bea2473 removed pod level securityContext support (#790)
669631a shifted custom atlantis container source under integrations/ directory (#758)
696481d shifted opa engine warning message to debug log level (#800)
dec6618 type assertion check for hcl.Body (#832)

Changelog

9c4918e AWS policy pack update (#737)
964167b Adding release checklist (#734)
4590a3a Feature/aws new policies sp (#751)
2d06d74 Fix NSG associations (#727)
d242c2e Gh action terrscan_atlantis release (#733)
e6e6b8e Update admission-controller-webhooks-usage.md (#722)
320b191 Update mkdocs.yml (#741)
0c7f4ca add terrascan atlantis container files, scripts and doc. (#684)
c44734a adds agrocd integration dockerfile, scripts, doc and examples (#732)
52481bc adds implementation for skipped server mode k8s scan e2e tests (#706)
762c561 adds support to scan directory with all iac providers in cli mode (#674)
dee8090 adds support to scan sub folders for terraform iac provider (#640)
881417a changes for argocd integration (#724)
4878eeb doc: add homebrew badge (#714)
0af155d fix failing test (#740)
3bd67ae fixes infinite loop while local variable resolution for terraform (#700)
02c8bce modify iac dir path validation (#720)
95a739e release v1.6.0 (#764)
ba7a76a update argo cd documentation (#742)
d8fd9c4 update version (#713)

Changelog

e8e5281 Handle multiple vpc flow logs (#680)
a09b879 Moving linux builds to static builds (#708)
aecf28d Update index.md (#707)
4c66c22 adding new policy and enhancing the nosiy policy (#575)
5a289d6 adds changelog for v1.5.0 (#692)
5669cbf fix severity output case insensivity fix (#691)
7962a8f updates installation instructions to deduct latest release (#695)

Changelog

5abf9af 1. fix panic for list variable with no type definition in terraform config (#654)
dbaf3a1 AWS Risk Category Changes (#603)
cca6d2f AWS new Categories (#581)
dfc0d08 Add /go/bin to PATH. (#637)
317a536 Adding openssh to Dockerfile for downloading modules via ssh (#625)
1d1addf Adding support to scan IAC from atlantis workflow (#648)
bc364ad Azure Risk Category Changes (#604)
1752bb7 Bugfix/revert policies (#602)
55c1ae1 Category flag e2e tests (#605)
2033718 Fixes broken link in README (#671)
1257ec2 Fixes docs format (#661)
d1a198c Log error in LoadIacDir before continuing (#613)
225a914 Makes saving of admission requests configurable via a config file option (#665)
c39c7fa Making Category Changes (#606)
c6aef0b Moving from goreleaser GH action (#694)
02d312e New Policies for Azure & Category Updates. (#580)
8625834 Reorganized and Updated docs (#655)
23ca9f7 Support for authenticated tf module download (#658)
9546bcc Take file extension from uploaded file (#593)
6bdcf0c Terrascan K8s New categories and ruleRef ID changes (#583)
a30788a Terrascan init and config handling refactor (#576)
4a20105 Update cicd.md (#667)
c61f306 Update mkdocs-material from 7.0.1 to 7.0.5 (#590)
4d12986 Update mkdocs-material from 7.0.5 to 7.0.6 (#615)
41b159c Update mkdocs-material from 7.0.6 to 7.1.0 (#636)
6929cb2 Update mkdocs-material from 7.1.0 to 7.1.2 (#676)
714cf60 Update mkdocs.yml (#660)
a4db22d Update route53LoggingDisabled.rego to ignore private zones (#626)
dbb5a91 Updating Rule reference Id's and Policy categories (#582)
71b776f add authentication with API key for the /logs endpoint (#663)
dcfbd54 add support for kubernetes validating admission webhook
6604c23 adds support to run k8s validating webhook without dashboard by default (#683)
a3bcac7 feature: add support to specify desired categories of violations to be reported (#547)
4df6ce6 filepath fixes in e2e tests (#591)
a11f71e fix - init behavior change (#624)
258206b fix - process local sources in remote modules for terraform iac
6103c45 fix kustomize scan breakage on windows (#630)
114222a fix panic for floating point variables for terraform cty types(#653)
585edcc fix recursive variable reference resolution for terraform (#677)
5db6cb2 fix windows tests (#635)
23c8281 make k8s source paths relative to the provided directory for scanning
b6732c7 policy download refactor (#618)
adf9e7f release v1.5.0 (#689)
9baf154 resolve complex variable types for terraform and add unit tests (#657)
9fe74b4 revert k8s old changes (#608)
538b9ed update helm default chart name and namespace values (#589)
99dc630 updating documentation for k8s admission control (#679)
71a677f v1.4.0 doc updates (#588)

Changelog

2a7627a Adding code of conduct
2296d3a Adds support for scanning tfplan json file (#562)
e838bb5 Bump github.com/spf13/cobra from 1.0.0 to 1.1.1 (#493)
91c018a Fixed incorrect description of a rego policy for RDS encryption
bbe97ce Initial changes for e2e testing framework (#553)
7b3593f Merge pull request #501 from dev-gaur/severity_flag
efeed62 Merge pull request #527 from patilpankaj212/support-junitXML
dabcffb Merge pull request #532 from nathannaveen/nathan/fix/Initializes_Terrascan
f14d608 Merge pull request #534 from dev-gaur/update_readme
1afca98 Merge pull request #537 from accurics/docs/v1.3.2
c406568 Merge pull request #541 from patilpankaj212/log-level-fixes
9f3569b Merge pull request #542 from alex-petrov-vt/issue538
b785481 Merge pull request #545 from jlk/add-code-of-conduct
10d6706 Merge pull request #552 from dev-gaur/fix_terrascan_init
f9aea57 Merge pull request #558 from dev-gaur/bump_versions
f4d7465 Update CHANGELOG.md
b579bec Update mkdocs-material from 6.2.7 to 6.2.8 (#539)
98e57b3 Update mkdocs-material from 6.2.8 to 7.0.1 (#567)
69541fb add options to specify desired severity level of violations to be reported
237c04e add writer for junit-xml
58e5f45 added tests for NewExecutor func
bda153e adds e2e test scenarios for help and scan command (#564)
bbb4a56 adds e2e tests for api server (#585)
6728908 adds support to display passed rules (#572)
b93b508 bump versions to v1.3.3
6b79a9c changed the description message (#559)
26bae02 enhancement: scan terraform registry modules as remote type (#513)
78f6458 fix - improved description for init command
1027346 fix filepaths and home directory lookup (#566)
b24b89b fix the 'repo already exist' bug and improve error logging for terrascan init
fa44485 fix: renamed the json file to remove spaces (#560)
f390891 fixes typo
3ef25b6 include docs for latest policy updates
3ffda3e incorporate review changes
3e5170b log level changes for load iac functions
ab29871 release 1.4.0 (#586)
6d9e34e reverts to master version
065e010 support for config_only option in api server file scan output (#579)
57ade8a updated go module files (#557)
82dc401 updated readme for v1.3.2
bdfcba8 updates changelog for v1.3.2
ba304e5 updates with new version

Changelog

1d244a6 Adding code of conduct
4d16e32 Bump github.com/spf13/cobra from 1.0.0 to 1.1.1 (#493)
54f740b Fixed incorrect description of a rego policy for RDS encryption
9088544 Merge pull request #509 from accurics/amirbenv-patch-1
62069cb Merge pull request #514 from accurics/pyup-update-mkdocs-material-6.2.5-to-6.2.6
78dd045 Merge pull request #515 from harkirat22/policy/k8s-improvement
ae9effc Merge pull request #516 from harkirat22/policy/aws-launch-config
47d55e0 Merge pull request #517 from gaurav-gogia/fix_405
fd73ed6 Merge pull request #518 from gaurav-gogia/fix_376
31bd625 Merge pull request #520 from harkirat22/harkirat22/bug-fix
dd0643a Merge pull request #522 from harkirat22/aws-instance-policies
7682371 Merge pull request #523 from gauravgahlot/docs-fixes
5641824 Merge pull request #524 from accurics/pyup-update-mkdocs-material-6.2.6-to-6.2.7
0b0e9ec Merge pull request #526 from harkirat22/fix_391
40a9ac6 Merge pull request #529 from dev-gaur/fix#521
4febd3b Merge pull request #531 from dev-gaur/init_hot_fix
8c8afcd Update CHANGELOG.md
372796a Update CHANGELOG.md
270f7fd Update README.md
d6827b2 Update mkdocs-material from 6.2.5 to 6.2.6
9265b67 Update mkdocs-material from 6.2.6 to 6.2.7
439de58 Update mkdocs-material from 6.2.7 to 6.2.8 (#539)
b7f17a1 add support for pod container
fcec126 adding new rule to fix bug #391
029a082 bump terrascan version to v1.3.2
1d869c1 bump versions to v1.3.3
6e7a4dd fix - improved description for init command
8cb8e7c fix the 'repo already exist' bug and improve error logging for terrascan init
9b134e8 fix typos in docs
aba0c76 fixes #376
4eb3d33 fixes #405
ed57996 fixes typo
471b58e include docs for latest policy updates
92942a9 incorporate review changes
0868005 log level changes for load iac functions
7deaf8e made rule reference ids unique, solves bug#519
afb7ec5 new set of policies for EC2 instance
0fda427 policy for instance profile (launch config)
52625fd policy to check launch config has imdsv1
cc306bc policy to check monitoring for launch config
e2ff0a7 policy to check security group for lauch config
24bdc7a refactor init command for robust policy download checks
1fa832f removed irrelevant error
0afa877 removed local policy testing folder
31cff39 reverts to master version
df1bd8a terrascan init will download new policies
1d25c62 updated CHANGELOG.md
3869f87 updated go module files (#557)
6d348fe updated readme for v1.3.2
25ce756 updates changelog for 1.3.1
226f00e updates changelog for v1.3.2
cde0357 updates docs with 1.3.1 version
0c72906 updates with new version

Changelog

9088544 Merge pull request #509 from accurics/amirbenv-patch-1
62069cb Merge pull request #514 from accurics/pyup-update-mkdocs-material-6.2.5-to-6.2.6
78dd045 Merge pull request #515 from harkirat22/policy/k8s-improvement
ae9effc Merge pull request #516 from harkirat22/policy/aws-launch-config
47d55e0 Merge pull request #517 from gaurav-gogia/fix_405
fd73ed6 Merge pull request #518 from gaurav-gogia/fix_376
31bd625 Merge pull request #520 from harkirat22/harkirat22/bug-fix
dd0643a Merge pull request #522 from harkirat22/aws-instance-policies
7682371 Merge pull request #523 from gauravgahlot/docs-fixes
5641824 Merge pull request #524 from accurics/pyup-update-mkdocs-material-6.2.6-to-6.2.7
0b0e9ec Merge pull request #526 from harkirat22/fix_391
40a9ac6 Merge pull request #529 from dev-gaur/fix#521
4febd3b Merge pull request #531 from dev-gaur/init_hot_fix
fed8436 Merge pull request #533 from dev-gaur/release_v1.3.2
372796a Update CHANGELOG.md
270f7fd Update README.md
d6827b2 Update mkdocs-material from 6.2.5 to 6.2.6
9265b67 Update mkdocs-material from 6.2.6 to 6.2.7
b7f17a1 add support for pod container
fcec126 adding new rule to fix bug #391
029a082 bump terrascan version to v1.3.2
9b134e8 fix typos in docs
aba0c76 fixes #376
4eb3d33 fixes #405
7deaf8e made rule reference ids unique, solves bug#519
afb7ec5 new set of policies for EC2 instance
0fda427 policy for instance profile (launch config)
52625fd policy to check launch config has imdsv1
cc306bc policy to check monitoring for launch config
e2ff0a7 policy to check security group for lauch config
24bdc7a refactor init command for robust policy download checks
0afa877 removed local policy testing folder
df1bd8a terrascan init will download new policies
25ce756 updates changelog for 1.3.1
cde0357 updates docs with 1.3.1 version

Changelog

3bc7f14 1. initial changes for registry module support 2. fix issue of remote module containing local modules
390eed3 1. initial changes for registry module support 2. fix issue of remote module containing local modules
bfbd608 1. initial changes for registry module support 2. fix issue of remote module containing local modules
78fd1d2 1. initial changes for registry module support 2. fix issue of remote module containing local modules
5885f2c Bump github.com/hashicorp/go-getter from 1.5.1 to 1.5.2
181d5b3 Bump github.com/hashicorp/go-retryablehttp from 0.6.6 to 0.6.8
e153cde Merge branch 'master' into dependabot/go_modules/github.com/hashicorp/go-getter-1.5.2
13670d7 Merge branch 'remote-module-support' of https://github.com/patilpankaj212/terrascan into remote-module-support
3589f96 Merge branch 'remote-module-support' of https://github.com/patilpankaj212/terrascan into remote-module-support
8e3e41b Merge pull request #495 from accurics/dependabot/go_modules/github.com/hashicorp/go-getter-1.5.2
a8461cf Merge pull request #496 from accurics/dependabot/go_modules/github.com/hashicorp/go-retryablehttp-0.6.8
26c7ee4 Merge pull request #503 from accurics/readme_skip
51aaf1f Merge pull request #505 from patilpankaj212/remote-module-support
51b686e Merge pull request #507 from williepaul/fix-darwin-arm64-build
6a282a9 Merge pull request #508 from kanchwala-yusuf/v1.3.1
64e6608 Update README.md
e6691bb Update README.md
ee2a46d Update README.md
1abfc7a Update README.md
b452f0a Update README.md
bf49487 Update README.md
4b7462e fix dependencies that were breaking the darwin/arm64 build
bc015ac fix static check failure
8cb68f1 fix static check failure
f784302 fix static check failure
4ccc1d0 go mod tidy
1fe039d refactor DownloadRemoteModule func and more tests
19128c9 refactor DownloadRemoteModule func and more tests
e64db7f refactor DownloadRemoteModule func and more tests
88073ee release v1.3.1
3b70d88 tests for remote module
48ae5d9 tests for remote module
32c1196 tests for remote module
7f02c6b tests for remote module

Changelog

2b8e2cd #394: recognize that empty values for username and password in master_auth block will disable basic auth
c33ebed -support color for default output -change color for 'file'
9d40d8e 1. added setup func to download policies 2. fix code smells
4fbe4ac 1. fix debug messages 2. fix typos in test name
3fd3d95 1. fix debug messages 2. fix typos in test name
c36691f 1. fix panic for list variables 2. test for list variables
33cd0e7 1. fix summary order 2. fix colored writer test
bf202e0 1. format summary 2. print empty quotes when resource name is absent
10ee6d5 1. modify existing tests of Run 2. add new tests for Run
e0c2e07 1. remove _ from test func 2. define variable for error string in test func
63d9867 1. support of rule skip comment for tf 2. human readable output modifications
0212180 1. support skip and scan rules in the server mode 2. refactor the existing config reader code 3. update unit tests 4. incorporate PR review comments
f0cbb79 1. support skip resource with comment. 2. skipped resource violations in output.
2ca27b9 1. toml config file based rule skipping 2. tests around rule scanning and skipping
c4b9aa7 1. update fix for exit code 2. remove default command code
6603436 APE-1319: Revamped Getting Started Section
a086a65 Add Docker image release tagging on release
6d79769 Add new policy for checking insecure_ssl on github_repository_webhook
185f8c6 Add policy AC-K8-NS-SE-M-0188 for CVE-2020-8554
3f759b9 Add v13 flag option for terraform iac
6da5e88 Add v13 flag option for terraform iac
1f296e6 Added Unit test coverage for Kustomize V3 Iac-provider
b1c5360 Added terraform v14 support
d356d5c Apply fix for self referential variables to non-parent modules
87cf969 Bump github.com/gorilla/mux from 1.7.4 to 1.8.0
4d74093 Bump github.com/hashicorp/go-version from 1.2.0 to 1.2.1
eb7e1dc Bump github.com/hashicorp/go-version from 1.2.0 to 1.2.1
03ea645 Bump github.com/iancoleman/strcase from 0.1.1 to 0.1.3
2330164 Bump github.com/mattn/go-isatty from 0.0.8 to 0.0.12
a264778 Bump github.com/mattn/go-isatty from 0.0.8 to 0.0.12
9664dcc Bump github.com/pelletier/go-toml from 1.8.0 to 1.8.1
7d0e3a0 Bump github.com/spf13/afero from 1.3.4 to 1.5.1
feb1a9e Bump github.com/zclconf/go-cty from 1.2.1 to 1.7.1
7a14d2d Bump go.uber.org/zap from 1.13.0 to 1.16.0
07092e5 Bump sigs.k8s.io/kustomize/api from 0.6.5 to 0.7.1
1801ce9 Bump sigs.k8s.io/kustomize/api from 0.7.1 to 0.7.2
385da16 Bump sigs.k8s.io/kustomize/api from 0.7.1 to 0.7.2
a4dc4ef Fire clientCertificateEnabled rule when client certificate is enabled
8a70f9e Fix infinite loop on variable resolution
21d311b Fix link to rego playground in policies documentation
7e1a1bb Fix typo in architecture documentation
2986401 Fix: potential bug added in PR #470
2536a09 Fix: potential bug added in PR #470
66c14cd Fixing policy description
12ce5c6 For human readable output display json output when '--config-only' is used
433415c IMDSv1 check policy
d6872fa IMDSv1 policy: update category, description
df73bc4 IMDSv1 policy: update category, description
5fc9818 Merge branch 'imdsv1-fix' of github.com:accurics/terrascan into imdsv1-fix
283d7d9 Merge branch 'master' into dependabot/go_modules/go.uber.org/zap-1.16.0
2df50b4 Merge branch 'master' into issue-422
23fe143 Merge branch 'master' of github.com:accurics/terrascan into argo-cd-hook
9058454 Merge pull request #386 from HorizonNet/issue-355
4d42c95 Merge pull request #387 from accurics/pyup-update-mkdocs-material-6.1.4-to-6.1.5
dbd5237 Merge pull request #393 from dinedal/fix_infinite_loop_on_variable_resolution
6a24967 Merge pull request #396 from acc-jon/issue394
d37fb58 Merge pull request #397 from therasec/bugfix/gcpcosimage
ab97a48 Merge pull request #399 from dev-gaur/issue_379
55a6c2c Merge pull request #401 from accurics/pyup-update-mkdocs-material-6.1.5-to-6.1.6
9b32df3 Merge pull request #402 from lucas-giaco/master
a463ede Merge pull request #409 from HorizonNet/issue-403
4614d5d Merge pull request #410 from HorizonNet/issue-398
8d6e722 Merge pull request #417 from harkirat22/master
929e377 Merge pull request #419 from accurics/imdsv1-fix
559c45d Merge pull request #420 from accurics/fix-jon-testorder
51d6b44 Merge pull request #423 from HorizonNet/issue-421
f96af13 Merge pull request #424 from HorizonNet/issue-422
2498741 Merge pull request #425 from accurics/pyup-update-mkdocs-material-6.1.6-to-6.1.7
9c5476c Merge pull request #427 from acc-jon/windows-colors
90e4ea7 Merge pull request #428 from gauravgogia-accurics/master
287b370 Merge pull request #430 from accurics/ape-1319
7cc4f16 Merge pull request #431 from patilpankaj212/human_readable_output
32ff137 Merge pull request #434 from kanchwala-yusuf/feature/skip-rules
ce61b02 Merge pull request #435 from accurics/docs/fix-link
c57bb06 Merge pull request #436 from patilpankaj212/scan-refactor
b8a6849 Merge pull request #441 from patilpankaj212/scan-and-skip-rules
960c77b Merge pull request #443 from chenrui333/go-1.15
02e77b8 Merge pull request #444 from chenrui333/add-dependabot-support
432ec9f Merge pull request #445 from accurics/pyup-update-mkdocs-material-6.1.7-to-6.2.3
4557d22 Merge pull request #447 from accurics/dependabot/go_modules/github.com/gorilla/mux-1.8.0
9ac1b32 Merge pull request #448 from accurics/dependabot/go_modules/sigs.k8s.io/kustomize/api-0.7.1
6fab349 Merge pull request #449 from accurics/dependabot/go_modules/github.com/zclconf/go-cty-1.7.1
0f79088 Merge pull request #452 from accurics/docs/pipeline
5a19951 Merge pull request #454 from accurics/argo-cd-hook
20a4bdb Merge pull request #455 from patilpankaj212/annotations-based-skipping
45a7885 Merge pull request #456 from accurics/amirbenv-patch-1
5385258 Merge pull request #457 from harkirat22/master
c39a76d Merge pull request #458 from patilpankaj212/fix-exit-code-on-error
76bf739 Merge pull request #460 from harkirat22/master
f9b176c Merge pull request #462 from ScaleSec/deprecated_gcs_bucket
3368850 Merge pull request #463 from accurics/amirbenv-patch-1
5c565e6 Merge pull request #464 from accurics/pyup-update-mkdocs-material-6.2.3-to-6.2.4
2272168 Merge pull request #465 from accurics/k8s-generateName
e5f74e4 Merge pull request #466 from patilpankaj212/skip-comment-and-scan-summary-additions
49bf32d Merge pull request #470 from dev-gaur/tf14besides12
792166e Merge pull request #473 from harkirat22/harkirat22/362
7c974f6 Merge pull request #474 from harkirat22/harkirat22/359
12f226a Merge pull request #475 from harkirat22/harkirat22/352
c313c32 Merge pull request #476 from harkirat22/harkirat22/432
12b58f2 Merge pull request #479 from patilpankaj212/bugFix
29bbd42 Merge pull request #480 from williepaul/policy-update-2021-01-14
9b65423 Merge pull request #481 from accurics/dependabot/go_modules/github.com/pelletier/go-toml-1.8.1
0cbd6d0 Merge pull request #482 from accurics/dependabot/go_modules/github.com/hashicorp/go-version-1.2.1
9002ce6 Merge pull request #484 from accurics/dependabot/go_modules/github.com/iancoleman/strcase-0.1.3
c713b5c Merge pull request #485 from accurics/dependabot/go_modules/github.com/spf13/afero-1.5.1
5b63ac8 Merge pull request #486 from accurics/dependabot/go_modules/go.uber.org/zap-1.16.0
ddb6f64 Merge pull request #487 from accurics/v1.3-docs
4ef6ce1 Merge pull request #488 from accurics/pyup-update-mkdocs-material-6.2.4-to-6.2.5
a3cee2d Merge pull request #489 from harkirat22/harkirat22/331
4a05a56 Merge pull request #490 from harkirat22/harkirat22/382
643a76a Merge pull request #492 from accurics/dependabot/go_modules/github.com/mattn/go-isatty-0.0.12
b445fd0 Merge pull request #494 from accurics/dependabot/go_modules/sigs.k8s.io/kustomize/api-0.7.2
6251a4a Merge pull request #497 from dev-gaur/fix_potential_bug_470
d301c3a Merge pull request #499 from dev-gaur/tf_v13_flag
f75dd1a Merge pull request #502 from kanchwala-yusuf/release-1.3.0
f4c70ae Merge remote-tracking branch 'origin/master' into lucas-giaco/master
8b644b5 Return varRef instead of val
e336ad6 Update CHANGELOG.md
01e26c4 Update CHANGELOG.md
34979da Update CHANGELOG.md
9ae9128 Update README.md
bad6027 Update README.md
5f48ba9 Update README.md
bcb5790 Update README.md
bc4a4f3 Update README.md
ae1763f Update README.md
916ecf8 Update go.mod
f506ca4 Update go.sum
7bf5afa Update mkdocs-material from 6.1.4 to 6.1.5
766bae8 Update mkdocs-material from 6.1.5 to 6.1.6
8d82c92 Update mkdocs-material from 6.1.5 to 6.1.6
dd2d7fd Update mkdocs-material from 6.1.6 to 6.1.7
b6ce97a Update mkdocs-material from 6.1.7 to 6.2.3
9c71078 Update mkdocs-material from 6.2.3 to 6.2.4
cea7d75 Update mkdocs-material from 6.2.4 to 6.2.5
1fd99c3 Update mkdocs-material from 6.2.4 to 6.2.5
9ff312a Update policy example in the documentation
be9c502 Using constants
bae80a8 Using constants
cecc7bf add ScanSummary to ViolationStore
ff73e3a add annotations in test file
60ce034 add annotations in test file
62236df add cases for human readable
fe0c724 add check for privileged containers (rule 106)
3bafe49 add comment for SkipRules in ResourceConfig struct
df42ce9 add link to CLI options
31ee512 add support for extracting rules to skip from terraform resource config comments
b6db0ae add test in run_test for scan and skip rules using config file
c727767 add warning message for terraform v12 users
a359304 added unit tests for breaking changes case
a05d83d adding an else condition to relate management lock with resource group
39067c7 adding an else condition to relate the flow log with vpc
ab0ebc6 adding rule to check if waf is enabled at cloud front distribution
e0e6bd7 adding specific steps to argocd integration
51888c4 adding unit tests for extracting rule ids to skip from terraform resource config comments
380e60a adding unit tests for testing no rule ids present
a194b49 adds gitlab and github ci integration docs
a1e3947 adds link to k8s policy docs
12f6439 adds logo
4bd932b annotations based skipping
919aece annotations based skipping
443129b bump go to 1.15
6e7b687 changed the description to include the vulnerable versions
1f0e811 deps: add dependabot support
5a6d70e display error to user if config only used with human
66bdd4f docs updates for policies
b1c8f99 exit with status 1 in case of an scan error
78b6822 fix code smells
451e72c fix code smells
c02bd36 fix incorrect loop exit
c79dce5 fix output format
305a8e2 fix sonar duplication issue
fe2dca0 fix tests breaks due to resource config change
276ed9e fix too many arguments for Run func
d583cd3 fix writer tests
91fa2ed fixes dead link to old getting started page
f87e2b7 fixes docs
0953440 fixes gcp cos node image policy
a95164e fixes links
3fff7b9 fixes typo
a4857a3 fixing existing terraform unit tests
72653b4 fixing existing writer unit tests
e3016dc fixing typos
932a1a6 hopefully remove test failures due to non-deterministic comparisons
b2a7d06 hopefully remove test failures due to non-deterministic comparisons
8080e17 human readable output for terrascan
bbc6e5a including a check for verifying in line policy is mentioned or not, thus solves the false positive issue #359
0ea7356 incorporate review comments
49562fe incorporated the review comments
26120dc initial changes for rule id based scan and skip
e90045c introduce constructor func for ScanOptions
3942de8 local make cicd results
be19375 makes case agnostic
e5cec3e merge with origin
580847e modify tests for k8s iac-provider
08f94ec move function to extract rules IDs to utils package
9103637 other scan summary details
e8d1068 policy for CVE-2020-8555
293a98e policy update 2021-01-14 37 rule(s) added 0 rule(s) deleted
6530dc8 rebase and fix failing test
8b2528e recognize metadata.generateName
bc056a5 refactor scan command
eefda2c rego update
d2cb1a8 remove lines added for testing
eeab9fe remove rules that have been replaced by the newer format
71645d2 rename ScanCommand to ScanOptions
209fb65 run refactor and tests
9f68c60 service check wasn't required
e6af151 set console mode on windows so colors render
dcd02a1 snake case for human readable
91790db solves issue #331
f3cf216 solves issue #331
8fbe227 solves issue #382, and improved policy to relate disk with the instance
fdf8dae solves issue #382, and improved policy to relate disk with the instance
66bb640 terrascan argo-cd instructions
d7a2543 test for resource skipping
846a792 test for resource skipping
cb11130 tests for writers
cf4e248 tweak argo cd instructions
73a1169 update regex and unit tests
88481ce update version to v1.3.0
96dfc94 update version to v1.3.0
117c40c update writer tests
349d5c9 updates changelog
0ddc688 updates changelog
1b56749 updates changelog for next release
321cf34 updates policy docs
303d716 updates policy docs
522abb9 updates relevant to v1.3.0 and latest features
2101022 updates version flag on help
a56806c using hash placeholder instead of latest.
9eaf1a2 writer test

Changelog

a56270e Add check for visibility for github_repository
53657d0 Add instructions for booting terrascan demo
85a0666 Add line about kubernetes YAML/JSON support
c228665 Add new policy for checking insecure_ssl on github_organization_webhook
780408e Add policy set for GitHub provider
8b5f811 Add step-by-step instructions for interacting with the demo env
5b612ed Bring Go to 1.15 in Github Actions
414035d Bring Go to 1.15 in Github Actions
d6eb16e Fix typo
9792a28 Fixed messed up merge
cd2c0c5 Fixes header
e783b6b Fixes typo
35c1c54 Merge branch 'colorize' of github.com:acc-jon/terrascan into colorize
f799685 Merge branch 'master' into issue-325
2fe16cc Merge branch 'master' into issue-325
e1df4c1 Merge branch 'master' of https://github.com/accurics/terrascan
1f89abd Merge pull request #1 from accurics/master
afc78b5 Merge pull request #319 from kklin/demo-badge
570cc9b Merge pull request #333 from HorizonNet/issue-326
424c823 Merge pull request #334 from HorizonNet/issue-325
c061f02 Merge pull request #335 from accurics/readme-update-k8s
0b22a65 Merge pull request #336 from accurics/auto-pickup-supportedtypes
f380b89 Merge pull request #337 from accurics/docs/github-policies
dcd76dd Merge pull request #340 from accurics/pyup-update-mkdocs-material-5.5.12-to-5.5.14
9aad2cf Merge pull request #343 from kmonticolo/fix_typo
25a7c45 Merge pull request #344 from accurics/bugfix/fix-providers-unit-test
f1c80fe Merge pull request #345 from accurics/feature/downloader-support
45a6ee9 Merge pull request #346 from accurics/pyup-update-mkdocs-material-5.5.14-to-6.0.1
556d333 Merge pull request #347 from acc-jon/colorize
49f66ed Merge pull request #348 from accurics/pyup-update-mkdocs-material-6.0.1-to-6.0.2
347bee3 Merge pull request #350 from HorizonNet/issue-339
2c964d5 Merge pull request #351 from accurics/feature/support-resolve-variable-references
a8084f6 Merge pull request #354 from acc-jon/master
4a5d34d Merge pull request #356 from accurics/pyup-update-mkdocs-material-6.0.2-to-6.1.0
222bd31 Merge pull request #357 from accurics/feature/aws-serverless-regos
fd2bf7c Merge pull request #360 from accurics/bugfix/add-git-binary
935e3b0 Merge pull request #361 from accurics/bugfix/fix-http-request
d7bc4aa Merge pull request #366 from accurics/bugfix/large-file
7a8e07f Merge pull request #368 from acc-jon/master
fb7b01c Merge pull request #370 from accurics/pyup-update-mkdocs-material-6.1.0-to-6.1.2
411a4aa Merge pull request #371 from accurics/pyup-update-mkdocs-material-6.1.2-to-6.1.3
e3bb0bd Merge pull request #372 from acc-jon/master
d375f0e Merge pull request #373 from acc-jon/issue365
ba331e0 Merge pull request #374 from accurics/pyup-update-mkdocs-material-6.1.3-to-6.1.4
73d29aa Merge pull request #377 from williepaul/add-helm-support
5c96b2f Merge pull request #378 from dev-gaur/add_kustomize_support
19f5527 Merge pull request #381 from williepaul/fix-helm-subchart-rendering
6512163 Merge pull request #383 from gliptak/patch-1
6b484b1 Merge pull request #384 from gliptak/patch-2
62a3549 Merge pull request #385 from williepaul/disable-cgo-in-dockerfile
ee0bd01 Merge pull request #388 from therasec/docs/1.2.0
25d5b56 Merge pull request #389 from kklin/rm-demo
2d1374b Merge pull request #390 from kanchwala-yusuf/update-version/1.2.0
64a974a Remove demo badge
f536982 Remove demo badge
f4d9bd5 Renamed GitHub repository policy ID
51c3eb8 Update demo docs to use new Blimp demo version
84bb503 Update mkdocs-material from 5.5.12 to 5.5.14
e3f1b02 Update mkdocs-material from 5.5.14 to 6.0.1
0c7aa1e Update mkdocs-material from 6.0.1 to 6.0.2
2e6f213 Update mkdocs-material from 6.0.2 to 6.1.0
700b668 Update mkdocs-material from 6.1.0 to 6.1.2
ad98ac2 Update mkdocs-material from 6.1.2 to 6.1.3
164964a Update mkdocs-material from 6.1.3 to 6.1.4
c2a3b43 add JSON termcolor tests
bf715f3 add JSON termcolor tests
0481625 add ability to download remote repository in CLI
fc46888 add comments, debug log messages and code clean up
c4457da add config only option to remote repo scanning API in http server
11be46b add cty map to golang map converter
c3c2fc6 add downloader support
c57aa66 add function to return list of supported Iac Types
a15af41 add function to return list of supported policy types
fe1044b add git binary to terrascan docker image, required by downloader
637d286 add method to clean up cached/installed repositories
d834e2e add method to download remote repo with type specified
d88a767 add method to generate random string
8492103 add policy path for tests
d8b9d7c add remote scanning support in http server
8b274be add support for colored output
24272d0 add support for colored output
5fd0685 add support for downloading remote modules in terraform v12 Iac scanning
c79f2a8 add support for resolving variable references for file scan
659e15b add support for resolving variable references in a module
538704c add support for resolving variables initialized/overriden in module calls
160743f add support to download remote repo in CLI
392c486 add support to get list of iac types with default versions
10bd8c9 add support to resolve cross module references
1bfce05 add support to resolve lookup references
0b0103e add support to resolve references in a slice
3d19a3f add supported to resolve multiple references in the same expression
e057bfe add unit test for GenRandomString() method
e72bf36 add unit test for downloader methods
530d679 add unit test for remote module installer clean up
58d4745 add unit tests for GetURLSubDir
25d8b94 add unit tests for module-download file
7c9fa06 add unit tests for policy package
ece2ab1 added kustomize support
442e39a added vendor/ in .gitignore
b92d331 address #365 by properly handling submodule path
6d5d3be adds analytics
bde73b6 adds clarification on default behavior
c0b5705 adds documentation for '-t all' flag
b2ea41d adds helm docs
e1a0422 adds initial helm support - supports loading of helm v3 charts via the iac dir command (iac file is invalid) - adds default iac versions for all iac types - adds unit tests - adds ability to properly specify default iac version for a given iac type
57ac4a2 adds kustomize to docs
733831c adds new policies
e910754 adds policy docs
7ed87c5 adds policy to check kms on lambdas
e07d60d adds rego checking lambda is config to launch on a vpc
5530d27 adds rego for insecure cors config
14fb90e adds rule for cloudwatch logs encryption
8dc98c2 adds section for github policies
ae5d650 allow config file for global policy config
82ea9ac allow multiple cloud types, default to all
4b8d917 automatically pick supported Iac versions for help display
1a2f072 change file name
7e73f26 changes
34870a6 changing repo for testing
a332115 changing repo url from ssh to http
1a35277 clean up flag handling
2a0e3ac clean up flag handling
250d464 commenting a log message for now
220795f fix a bug when rendering subcharts - in some cases, subcharts could not be rendered properly - change how we render values such that default capabilities are set, preventing rendering errors - set lintmode to true to allow ignoring of certain rendering errors from within the rendering engine - add resource count checking to load-dir unit tests - update error messages to make sure we are including the error data
d5bde39 fix gofmt errors
eb26ba5 fix imports
ec68170 fix indentation
9c460f4 fix indentation
f1f5231 fix lint, style issues
24c4948 fix logging init. clean up tests. use globlal toml config file for policy config
8d4bad1 fix send request method, previously hardcoded
772901b fix sonarcloud issues - avoids some repeated strings by using logger.With() - move rendering code into a separate function - remove a duplicate test - add more comments
83473ea fix sonarcloud issues - try #2 with cognitive complexity by moving for loop outside of the render func - update error level of some log messages
577d5ca fix style
bbc2f90 fix style issue
94cd15a fix style, tests for policy type "all"
695801c fix supported providers unit test, sort the wanted result
b038fab fix test args
43c4970 fix typo
6889c14 fix typo
613d2e5 fix unit tests
daecab4 fix unit tests - make sure empty directories are created by adding a placeholder file
545692f fixes dockerfile build issues - disables CGO to prevent any dependencies from failing the build - the GOARCH variable was named incorrectly and not being picked up during the docker build - locked both the alpine and golang versions for the docker build
ed26230 fixes policy name
48b6ea8 fixes review comments - adds .yml to the valid list of chart yamls - default to 1 instead of 0 for source line in the helm_chart resource - TODO: add values.yml support for rancher
a8fce5a fixes severity
95401c4 fixes severity
d23b460 fixes typo
b0f28f1 fixes typo and removes severity from reference id
62ce1c1 fixing error messages for unit tests
fdc888a fixing exisiting unit tests
368fd23 fixing unit tests
dcd6cb7 import 'sort' package
f5fed60 improve isRef method, reorder switch cases for str ref resolution
b5778ea improve regex pattern, getLocalName method and string replace method for local references
308c69b improve regex pattern, getLocalName method and string replace method for lookup references
d27c892 improve regex pattern, getLocalName method and string replace method for module references
876587a improve regex pattern, getLocalName method and string replace method for variable references
4bf99eb improve variable regex pattern, improve gwtVarName method
25f258c last minute fixes
5960227 load global config from toml config file
5789f8f making staticcheck happy
8ac4d82 missing access logs
09d81f8 optimized yaml utility function
0e3d31a organizing reference resolution into multiple files
4f99d24 pick automatically pick up list of supported types in cli help
557294c properly handle nested submodules (#365)
765a2ef refactor and add unit test for remote scan repo API handler
794df55 refactor downloader package, add downloader interface
d1806c3 refactor module download
5183da8 refactor styling to support styles file
2eed6bc refactor styling to support styles file
2f6b772 refactoring downloader package
9385d11 remove Chart.yml from valid helm chart names - Chart.yml is used by rancher, but we would likely support rancher in a separate iac type, so removing from helm
54b4891 remove redundant methods from cli/run.go
ff4b428 removes comment
c89ee87 removes large file
54ab58d removes severity from reference ids
03ac868 removing code smells
bac379d reverting back the unit test cases changes
04be644 reverts to using latest
aea0e0b rewording
20f32e0 rewording
3508fe5 sort supportedPolicyTypes output
fff04ae trying to resolve sonar cloud code duplication issue
8a523ad update debug log messages
53db1a0 update go mod files
388a93b update module files
77be67d update module files
b10a8e1 update version to v1.2.0
cfc49ca updates changelog
37d0f15 updates description
a5cc45f updates error message severity and suppresses a normalization error - errors were output when helm template rendering created a blank file, which is still valid yaml - the "invalid kind" message is suppressed in this case, since rendering an empty template may be intentional - error log levels and also error messages were updated per review comments
af0af4d updates latest k8s policies
acf5e18 updates version and kustomize support
1f643b1 updating regex and logs
45d2b18 updating scannign section with additional examples

Changelog

e498942 Adds exit code when issues are found
c7b4797 Fix headers
0a73752 Manage relative module path
5a30d06 Merge branch 'master' into kubernetes-support
4f0bd92 Merge branch 'master' into kubernetes-support
c44a663 Merge pull request #291 from accurics/bugfix/xml-output
b4caa81 Merge pull request #292 from accurics/pyup-update-mkdocs-material-5.5.6-to-5.5.7
1ae533b Merge pull request #295 from erichs/doc-fixes - Fixes typos in documentation
3f21021 Merge pull request #296 from accurics/bugfix/docker
37760a9 Merge pull request #297 from accurics/update-policies-082020
ca75f86 Merge pull request #298 from accurics/Upa-acc-patch-1
d170c17 Merge pull request #299 from accurics/feature/exitstatus
053660a Merge pull request #300 from accurics/pyup-update-mkdocs-material-5.5.7-to-5.5.8
17ffd93 Merge pull request #301 from accurics/bugfix/capitalization
118129a Merge pull request #306 from zmarouf/patch-1
b698de5 Merge pull request #307 from accurics/pyup-update-mkdocs-material-5.5.8-to-5.5.12
f98373b Merge pull request #308 from guilhem/relative_module
618475a Merge pull request #309 from accurics/add-config-only-output
d182f1c Merge pull request #313 from accurics/kubernetes-support
97b7612 Merge pull request #314 from accurics/jon-badges
2953c19 Merge pull request #315 from chenrui333/add-homebrew-installation
6eb0a6b Merge pull request #316 from accurics/bugfix/template-rendering-issue
f6c1acb Merge pull request #317 from accurics/bugfix/output-logs-to-stderr
3402ba9 Merge pull request #318 from accurics/change-docker-default
67e42be Merge pull request #321 from accurics/bugfix/fix-checkIpForward-rule
cbe6c35 Merge pull request #322 from accurics/revert-321-bugfix/fix-checkIpForward-rule
1a90445 Merge pull request #323 from accurics/fix-check-ip-forward
4c30787 Merge pull request #327 from accurics/docs/k8s
ab92377 Merge pull request #328 from accurics/update-k8s-initial-policies
63b757e Rename KubeDashboardDisabled.rego to kubeDashboardDisabled.rego
f107f76 Revert "fixed a bug in checkIpForward"
7d1f18a Typo fixes
434dba7 Typo fixes
246797c Update README.md
6beb097 Update about.md
298b6e6 Update about.md
eb9cc0c Update mkdocs-diagrams from 0.0.2 to 1.0.0
b11d8ae Update mkdocs-diagrams to 1.0.0
c1a13ea Update mkdocs-material from 5.5.6 to 5.5.7
04fe83b Update mkdocs-material from 5.5.7 to 5.5.8
63727a1 Update mkdocs-material from 5.5.7 to 5.5.8
602a557 Update mkdocs-material from 5.5.8 to 5.5.12
ffe2a49 Update readme
605edca Updating changelog with v1.1.0 enhancements and bugfixes
65636ce Updating changelog with v1.1.0 enhancements and bugfixes
ae346e8 add changes missing from the last commit - error message updates - added config-only unit test - removed unnecessary checks in the api server
89ad5b1 add support to print resource config as an output
52babb8 adds docs for k8s policies
6ee0af2 adds exit code explanation to docs
9ccf599 adds go get instructions
791123d bumps version references to 1.1.0
1edf439 changing header name from CLI Output formats to CLI Output types
de8e375 chore(docs): add homebrew installation
9cb321b chore(docs): fix indent of tar extraction
d5418b5 clean up go.mod/go.sum
75253ce documents policy changes
5b3ae20 fix template rendering bug - templates were only being rendered once per file, rather than once per rule - thus, the first render for each file would win, and violations could trigger (or be missed) if using a shared template
f8267da fix typo
5b3a2b2 fix typo in readme, clean formatting
2719aac fix xml output
e573629 fixed a bug in checkIpForward "not api.config.can_ip_forward == true" should be "api.config.can_ip_forward == true" by default, can_ip_forward is false, so no need to check for existence of the key before checking if can_ip_forward is true
688b7d1 fixed checkIpForward rule (gcp)
ecd531b fixed location of the readOnlyRootFilesystem param
2372876 fixed merge issue - silenced a noisy log and downgraded the severity of another
a94f375 fixed review comments - error message updates - added config-only unit test - removed unnecessary checks in the api server - changed resource representation to match terraforms resource naming
3dcd3c7 fixes a core dump when template_args are not set in the rule
8bd290e fixes format errors on docs
85e88e4 fixes formatting error
7d8ad0a fixes github ref for pushing latest docker image
af127cb fixes github ref for pushing latest docker image
c468b39 fixes if statement
7742b15 fixes if statement
915ec5b fixes if statement
0ac6c04 fixes if statement
2fbe793 fixes issue template as we no longer use python
42853a7 initial kubernetes support (continued) - add Jon’s change for a relative directory resolve bug - go.mod tidy - don’t call os.exit() from run() when running unit tests - simplify k8s normalization—no manual json parsing - fix default AWS IaC type (was set to was instead of terraform) - fixed JSON loading bug - increased unit test coverage
04ceabe initial kubernetes support - adds support for kubernetes violation detection in yaml using repo - adds default iac versions/types per policy/cloud provider - policies and more unit tests to follow in the next checkin
3f3e7b5 initial policy set for k8s
e97fa89 move server command out of ENTRYPOINT and into CMD - sets the base command as default - per @acc-jon
142dccc removes dup comment
4198bdc send logs to stderr instead of stdout
f2a9f32 update documentation with description of different output formats supported in terrascan
44544f0 update readme
ee580c0 updated download instructions post install
b4565c9 updated k8s policy set and documentation
9ff59b2 updated policies to the latest set
d978c3a updates with new help output which includes k8s relates instructions