tfsec

What's Changed

• fix: Fix Windows build by @liamg in https://github.com/aquasecurity/tfsec/pull/1655

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.16.0...v1.16.1

What's Changed

• feat: Add fs.FS based scanning functionality and module handling by @liamg in https://github.com/aquasecurity/tfsec/pull/1649
• fix(defsec): Update defsec to v0.31.0 to fix multiple missing metadata issues by @liamg in https://github.com/aquasecurity/tfsec/pull/1652

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.15.4...v1.16.0

What's Changed

• fix: correct image path by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1646

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.15.3...v1.15.4

What's Changed

• fix(docker): Fix missing GitHub registry image by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1645

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.15.2...v1.15.3

What's Changed

• chore(defsec): fix permissions for downloaded modules by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1637

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.15.1...v1.15.2

What's Changed

• feat: add module download count for remote modules by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1631
• chore(deps): bump github.com/AlecAivazis/survey/v2 from 2.3.3 to 2.3.4 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1632
• docs: Add Thoughtworks info to README by @liamg in https://github.com/aquasecurity/tfsec/pull/1634
• fix: lighten the permissions for results files by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1636
• docs: adding link to vim plugin by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1635

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.15.0...v1.15.1

⚠️ tfsec will now download remote modules by default, meaning you do not need to terraform init before scanning remote modules. You can avoid downloading remote modules by using the --no-module-downloads flag.

What's Changed

• feat: Download remote modules by default (unless --no-module-downloads is specified) by @liamg in https://github.com/aquasecurity/tfsec/pull/1628

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.14.0...v1.15.0

What's Changed

• chore: don't create the tfsec/tfsec images any more by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1621
• feat: Update defsec to add new check for SSM exfiltration by @liamg in https://github.com/aquasecurity/tfsec/pull/1622
• docs: fix the generator for the documentaion by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1623
• fix: min version checking by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1627

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.13.2...v1.14.0

What's Changed

• fix: fix custom check validator by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1620

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.13.1...v1.13.2

What's Changed

• chore(deps): bump crazy-max/ghaction-import-gpg from 4.2.0 to 4.3.0 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1614
• chore(deps): bump github.com/AlecAivazis/survey/v2 from 2.3.2 to 2.3.3 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1615
• docs: Add rego docs and rework readme by @liamg in https://github.com/aquasecurity/tfsec/pull/1617

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.13.0...v1.13.1

What's Changed

• feat: Add support for TF_VAR_ env vars by @liamg in https://github.com/aquasecurity/tfsec/pull/1613

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.12.0...v1.13.0

What's Changed

• feat: Add --print-rego-input to print input provided to rego policies by @liamg in https://github.com/aquasecurity/tfsec/pull/1611

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.11.0...v1.12.0

What's Changed

• feat: enable the 'custom' namespace for custom rego policies by @liamg in https://github.com/aquasecurity/tfsec/pull/1608

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.10.0...v1.11.0

What's Changed

• feat: Add rego support by @liamg in https://github.com/aquasecurity/tfsec/pull/1605
• fix: Fix race condition in legacy ignore rule matching by @liamg in https://github.com/aquasecurity/tfsec/pull/1606

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.9.3...v1.10.0

What's Changed

• fix: Load embedded files correctly on Windows by @liamg in https://github.com/aquasecurity/tfsec/pull/1603

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.9.2...v1.9.3

What's Changed

• fix: Run all filter functions via defsec by @liamg in https://github.com/aquasecurity/tfsec/pull/1602

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.9.1...v1.9.2

What's Changed

• chore: fix for #1595 and #1597: bump defsec version by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1599

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.9.0...v1.9.1

What's Changed

• feat: Add option to show ignored checks by @liamg in https://github.com/aquasecurity/tfsec/pull/1596
• chore: relocate scanner to defsec by @liamg in https://github.com/aquasecurity/tfsec/pull/1587
• chore(deps): bump github.com/spf13/cobra from 1.3.0 to 1.4.0 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1590

The --include-ignored flag now correctly includes all ignored checks without affecting the result of the scan. The new --no-ignores flag stops ignore rules having any effect, causing all previously ignored results to fail.

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.8.0...v1.9.0

What's Changed

• feat: split aws performance insight checks by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1584
• fix: update defsec to fix NPE by @liamg in https://github.com/aquasecurity/tfsec/pull/1585

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.7.1...v1.7.3

What's Changed

fix: Update configuration for gpg signing by @liamg in https://github.com/aquasecurity/tfsec/pull/1582
feat: Add --minimum-severity flag
docs: Add usage note for minimum severity
feat: Add minimum_severity option to config file

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.7.1...v1.7.2