tfsec

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.24.3...v1.24.4

What's Changed

• fix: Fix docs generation by @liamg in https://github.com/aquasecurity/tfsec/pull/1788
• fix: Fix mkdocs insiders version by @liamg in https://github.com/aquasecurity/tfsec/pull/1789

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.24.1...v1.24.3

What's Changed

• fix: Fix module handling via update to defsec v0.65.0 by @liamg in https://github.com/aquasecurity/tfsec/pull/1787

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.24.0...v1.24.1

What's Changed

• feat: Add markdown and html output formats by @liamg in https://github.com/aquasecurity/tfsec/pull/1782

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.23.3...v1.24.0

Fixing the docker build - putting tfsec in the correct location for execution

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.23.2...v1.23.3

What's Changed

• chore(deps): bump github.com/stretchr/testify from 1.7.1 to 1.7.2 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1770
• feat: Install git on the CI Docker by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1772
• feat: download config from remote location with config-file-url by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1774
• fix: add git to Docker file so it can download modules by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1777
• feat: add support for using custom check file from remote location by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1776
• chore(deps): Bump the defsec version by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1778
• fix: docker build by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1781

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.22.1...v1.23.2

What's Changed

• fix: infer no-code when concise by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1764
• chore(deps): Update defsec to v0.62.0 by @liamg in https://github.com/aquasecurity/tfsec/pull/1768

Changes in defsec v0.62.0

• feat(Dockerfile): Add support for 'Containerfile' detection as required by trivy/fanal by @liamg in https://github.com/aquasecurity/defsec/pull/660
• chore(deps): bump github.com/open-policy-agent/opa from 0.40.0 to 0.41.0 by @dependabot in https://github.com/aquasecurity/defsec/pull/659
• chore(deps): bump gopkg.in/yaml.v3 from 3.0.0 to 3.0.1 by @dependabot in https://github.com/aquasecurity/defsec/pull/658
• fix: Fix GKE cluster node config when non-default node-pool is used by @liamg in https://github.com/aquasecurity/defsec/pull/662
• fix: Fix no-auto-mount-service-token recommended action by @kajogo777 in https://github.com/aquasecurity/defsec/pull/654
• fix: Fix unresolved string slice behaviour by @liamg in https://github.com/aquasecurity/defsec/pull/664

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.22.0...v1.22.1

What's Changed

• chore(deps): bump github.com/hashicorp/go-version from 1.4.0 to 1.5.0 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1750
• fix: remove broken git submodule reference by @smelchior in https://github.com/aquasecurity/tfsec/pull/1751
• chore(deps): bump goreleaser/goreleaser-action from 2 to 3 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1748
• chore(deps): bump alpine from 3.15 to 3.16.0 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1747
• chore(deps): bump github.com/aquasecurity/defsec from 0.57.8 to 0.59.0 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1749
• chore(deps): Update defsec to v0.60.0 by @liamg in https://github.com/aquasecurity/tfsec/pull/1758
• fix: Update defsec to fix unknown value error in reference by @liamg in https://github.com/aquasecurity/tfsec/pull/1759
• chore(deps): bump crazy-max/ghaction-import-gpg from 4.4.0 to 5.0.0 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1755
• feat: add glob support to exclude paths by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1760
• feat: add no code option by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1762
• fix(modules): Fix edge case causing infinite loop when resolving nested modules by @liamg in https://github.com/aquasecurity/tfsec/pull/1761
• chore(deps): bump defsec by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1763

Defsec Updates

• feat: split out DAX cluster and DynamoDB Table (https://github.com/aquasecurity/defsec#/defsec#653) (Owen Rumney)
• feat: support managed encryption for sqs (https://github.com/aquasecurity/defsec#/defsec#651) (Owen Rumney)
• feat: support for AWS EMR security configuration (https://github.com/aquasecurity/defsec#/defsec#643) (brandon-maxar)
• fix(terraform): Properly support relative paths in remote modules (https://github.com/aquasecurity/defsec#/defsec#649) (Liam Galvin)
• fix(terraform): Fix module loading from the local .terraform cache (https://github.com/aquasecurity/defsec#/defsec#648) (Liam Galvin)
• fix(terraform): Prevent panics when block keys are unresolvable (https://github.com/aquasecurity/defsec#/defsec#646) (Liam Galvin)
• fix(terraform): Fix resolution of provider-added values e.g. arn/id (https://github.com/aquasecurity/defsec#/defsec#645) (Liam Galvin)
• fix(google): Fix false positive for Google Compute Firewall Rules (https://github.com/aquasecurity/defsec#/defsec#641) (Liam Galvin)
• fix(google): Fix false positive in SQL instance backups for replicas (https://github.com/aquasecurity/defsec#/defsec#640) (Liam Galvin)
• test: add tests for azure network tf adapters (https://github.com/aquasecurity/defsec#/defsec#634) (vanesasejdiu)
• test: add tests for azure storage tf adapters (https://github.com/aquasecurity/defsec#/defsec#632) (vanesasejdiu)
• test: add tests for google storage tf adapters (https://github.com/aquasecurity/defsec#/defsec#630) (vanesasejdiu)
• fix: Single public IPs should ba acceptable as prefixes (https://github.com/aquasecurity/defsec#/defsec#629) (Owen Rumney)
• fix: support source/target tags for GCP firewall (https://github.com/aquasecurity/defsec#/defsec#628) (Owen Rumney)
• docs: Add example for >2.97.0 of the AzureRM provider for container logging (https://github.com/aquasecurity/defsec#/defsec#627) (Owen Rumney)
• chore(deps): bump github.com/hashicorp/go-getter from 1.5.11 to 1.6.1 (https://github.com/aquasecurity/defsec#/defsec#620) (dependabot[bot])
• test: add tests for google sql tf adapters (https://github.com/aquasecurity/defsec#/defsec#619) (vanesasejdiu)
• test: add tests for google gke tf adapters (https://github.com/aquasecurity/defsec#/defsec#617) (vanesasejdiu)
• test: add tests for google compute tf adapters (https://github.com/aquasecurity/defsec#/defsec#615) (vanesasejdiu)
• perf: Improve code highlighting by caching syntax highlighted inputs (https://github.com/aquasecurity/defsec#/defsec#610) (Liam Galvin)
• feat: Truncate source code with an optional limit (https://github.com/aquasecurity/defsec#/defsec#608) (Liam Galvin)
• fix: Fix relative paths in JUnit output (https://github.com/aquasecurity/defsec#/defsec#605) (Liam Galvin)
• fix: make highlight omit empty (https://github.com/aquasecurity/defsec#/defsec#602) (Owen Rumney)
• fix: remove Highlighted from code explicitly (https://github.com/aquasecurity/defsec#/defsec#600) (Owen Rumney)
• fix: Fix ansi double escapes (https://github.com/aquasecurity/defsec#/defsec#599) (Liam Galvin)
• test: add tests for aws vpc tf adapters (https://github.com/aquasecurity/defsec#/defsec#597) (vanesasejdiu)
• test: add tests for digital-ocean compute tf adapters (https://github.com/aquasecurity/defsec#/defsec#595) (vanesasejdiu)

New Contributors

• @smelchior made their first contribution in https://github.com/aquasecurity/tfsec/pull/1751

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.21.2...v1.22.0

What's Changed

• chore(deps): bump github.com/liamg/clinch from 1.5.6 to 1.6.1 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1737
• chore(deps): bump github/issue-labeler from 2.4.1 to 2.5 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1735
• chore(deps): bump golangci/golangci-lint-action from 3.1.0 to 3.2.0 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1734
• docs: Fix incorrect namespace usage in rego docs by @liamg in https://github.com/aquasecurity/tfsec/pull/1743

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.21.1...v1.21.2

What's Changed

• fix: Fix JUnit paths by @liamg in https://github.com/aquasecurity/tfsec/pull/1740

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.21.0...v1.21.1

What's Changed

• feat: Improved syntax highlighting via chroma in defsec by @liamg in https://github.com/aquasecurity/tfsec/pull/1724
• feat: Add customisable code themes by @liamg in https://github.com/aquasecurity/tfsec/pull/1725

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.20.2...v1.21.0

What's Changed

• chore(deps): bump docker/login-action from 1 to 2 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1720
• fix(ignores): handle parameter based ignores in a foreach by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1723

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.20.1...v1.20.2

What's Changed

• chore: Update defsec to v0.54.0 by @liamg in https://github.com/aquasecurity/tfsec/pull/1715
• fix(parsing): Symlink resolution fix by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1722

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.20.0...v1.20.1

What's Changed

• fix: document all format options by @allcloud-jonathan in https://github.com/aquasecurity/tfsec/pull/1709
• docs: fix branch names in sarif github action by @gmarmstrong in https://github.com/aquasecurity/tfsec/pull/1701
• feat: Add syntax highlighting and clean up output by @liamg in https://github.com/aquasecurity/tfsec/pull/1714

New Contributors

• @allcloud-jonathan made their first contribution in https://github.com/aquasecurity/tfsec/pull/1709
• @gmarmstrong made their first contribution in https://github.com/aquasecurity/tfsec/pull/1701

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.19.1...v1.20.0

What's Changed

• fix: Always load embedded rego libraries by @liamg in https://github.com/aquasecurity/tfsec/pull/1700
• fix: foreach key by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1703

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.19.0...v1.19.1

What's Changed

• feat(flag): Add var-file flag in to duplicate tfvar-file by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1683
• docs: Add link to Rego documentation by @atombrella in https://github.com/aquasecurity/tfsec/pull/1686
• feat(defsec): Add support for applying rego rules to IAM policies by @liamg in https://github.com/aquasecurity/tfsec/pull/1676
• chore(deps): bump actions/stale from 4 to 5 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1673
• chore(deps): bump actions/setup-go from 2 to 3 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1672
• feat: Use new defsec options and improve path handling by @liamg in https://github.com/aquasecurity/tfsec/pull/1696
• chore(deps): bump crazy-max/ghaction-import-gpg from 4.3.0 to 4.4.0 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1697
• chore(deps): bump defsec version by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1699
• test: add tests for aws redshift tf adapters by @vanesasejdiu in https://github.com/aquasecurity/defsec/pull/527
• fix(rule): GCP dnssec not applicable for private zones by @owenrumney in https://github.com/aquasecurity/defsec/pull/539
• test: add tests for aws lambda tf adapters by @vanesasejdiu in https://github.com/aquasecurity/defsec/pull/529

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.18.0...v1.19.0

What's Changed

• fix: remove duplication of checksum by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1665
• feat(rego): Add --rego-only flag to run rego policies exclusively by @liamg in https://github.com/aquasecurity/tfsec/pull/1667
• fix(rego): Fix code highlighting for rego detections by @liamg in https://github.com/aquasecurity/tfsec/pull/1668

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.17.0...v1.18.0

What's Changed

Changes to tfsec

• chore(defsec): Update defsec to v0.34.0 by @liamg in https://github.com/aquasecurity/tfsec/pull/1666

Changes to defsec

• build(actions): Add cache action to speed up builds by @liamg in https://github.com/aquasecurity/defsec/pull/487
• fix(cloudformation): Fix margin removal for empty lines by @liamg in https://github.com/aquasecurity/defsec/pull/490
• fix(azurerm): Fix false positive on key vault secret expiration by @liamg in https://github.com/aquasecurity/defsec/pull/494
• fix(check): Fix false positive for azure network security rules by @liamg in https://github.com/aquasecurity/defsec/pull/498
• fix(avd): Fix avd docs generation by @liamg in https://github.com/aquasecurity/defsec/pull/499
• test(avd): Add test to ensure all avd docs are generated by @liamg in https://github.com/aquasecurity/defsec/pull/500
• fix(google): Fix GKE legacy endpoint use detection by @liamg in https://github.com/aquasecurity/defsec/pull/497
• feat(cf): Add support for AES256 enryption for s3 bucket in cloudformation by @liamg in https://github.com/aquasecurity/defsec/pull/496
• fix(check): Fix false positive for api gateway cache encryption by @liamg in https://github.com/aquasecurity/defsec/pull/495
• feat(azurerm): Add support for container logging via changes in latest azurerm terraform provider by @liamg in https://github.com/aquasecurity/defsec/pull/492
• feat(check): Add separate check for SNS encryption with CMK by @liamg in https://github.com/aquasecurity/defsec/pull/493
• feat(check): Add separate check for SQS CMK use by @liamg in https://github.com/aquasecurity/defsec/pull/491

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.16.3...v1.17.0

What's Changed

• fix: Fixes for multiple issues identified by adding flag tests by @liamg in https://github.com/aquasecurity/tfsec/pull/1662
• fix(config): Fix minimum_severity in yaml config files by @liamg in https://github.com/aquasecurity/tfsec/pull/1664

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.16.2...v1.16.3

What's Changed

• fix: Paths/modules on Windows by @liamg in https://github.com/aquasecurity/tfsec/pull/1656

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.16.1...v1.16.2