tfsec

What's Changed

• fix: archive not being picked up on github by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1574

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.6.1...v1.6.2

What's Changed

• fix: regression on archived repository fix by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1573

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.6.0...v1.6.1

What's Changed

• feat: update the defsec with new GitHub check from @reedloden in https://github.com/aquasecurity/tfsec/pull/1570

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.5.0...v1.6.0

What's Changed

• docs: fixed checks pages is 404 by @int-tt in https://github.com/aquasecurity/tfsec/pull/1561
• chore(deps): bump actions/setup-python from 2 to 3 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1559
• chore(deps): bump golangci/golangci-lint-action from 2 to 3.1.0 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1560
• fix: Update defsec to v0.13.1 to fix azurerm config block parsing by @liamg in https://github.com/aquasecurity/tfsec/pull/1563
• fix: Fix regression with --exclude-path by @liamg in https://github.com/aquasecurity/tfsec/pull/1564
• docs: Update the config docs to include includes by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1562
• fix: update to latest defsec to load files deterministically by @liamg in https://github.com/aquasecurity/tfsec/pull/1565
• feat: add support for v4 aws provider by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1566
• fix: restore concise output functionality by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1567
• fix: goreleaser fix by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1568

New Contributors

• @int-tt made their first contribution in https://github.com/aquasecurity/tfsec/pull/1561

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.4.2...v1.5.0

What's Changed

• add index pages for providers and services by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1553
• fix: support symlinks in the parser by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1555

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.4.1...v1.4.2

What's Changed

• fix: Panic on google iam resource scanning by @liamg in https://github.com/aquasecurity/tfsec/pull/1551

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.4.0...v1.4.1

What's Changed

• chore: bump to latest defsec by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1548
• feat: Add OpenStack Networking checks by @liamg

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.3.0...v1.4.0

What's Changed

• chore: don't stale accepted issue labels by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1540
• feat: Add min required version for config by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1541
• chore: remove vendor folder by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1542
• fix: remove vendor flag from releaser by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1543

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.2.1...v1.3.0

What's Changed

• fix: Really force all directories recursively when --force-all-dirs is used by @liamg in https://github.com/aquasecurity/tfsec/pull/1539

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.2.0...v1.2.1

What's Changed

• chore: Switch to defsec/trivy-config-parsers for parsing and adaptation by @liamg in https://github.com/aquasecurity/tfsec/pull/1525
• feat: Allow ignore rules at more granular level within IAM policies by @liamg in https://github.com/aquasecurity/tfsec/pull/1537
• chore: Update defsec to v0.11.0 by @liamg in https://github.com/aquasecurity/tfsec/pull/1538

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.1.5...v1.2.0

What's Changed

• fix: handle special case child blocks by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1529
• feat: Add json support for tfvars files by @tlgkk in https://github.com/aquasecurity/tfsec/pull/1531

New Contributors

• @tlgkk made their first contribution in https://github.com/aquasecurity/tfsec/pull/1531

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.1.4...v1.1.5

What's Changed

• feat: support include passed for custom checks by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1523
• feat: respect public access block settings for acl by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1524

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.1.3...v1.1.4

What's Changed

• chore(deps): bump github/issue-labeler from 2.0 to 2.4.1 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1513
• chore: Add ignore for go-cty updates by dependabot by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1520
• fix: tfsec output links for custom checks by @gabrielleecredera in https://github.com/aquasecurity/tfsec/pull/1519
• chore: update defsec version by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1522

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.1.2...v1.1.3

What's Changed

• feat: add tfsec-checkgen test-check command to test custom check against tf test code by @gabrielleecredera in https://github.com/aquasecurity/tfsec/pull/1436
• fix: fix defsec version by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1517

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.1.1...v1.1.2

What's Changed

• fix: support parent blocks by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1511

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.1.0...v1.1.1

What's Changed

• feat: add basic tfsec-checkgen generate cmd by @gabrielleecredera in https://github.com/aquasecurity/tfsec/pull/1468
• feat: separate s3 encryption into 2 checks by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1503
• fix: Fix regression of missing parameterised ignore rules by @liamg in https://github.com/aquasecurity/tfsec/pull/1504
• fix: Match inlined comment and README.md image description by @bobsaintcool in https://github.com/aquasecurity/tfsec/pull/1500
• feat: add subMatchOne attribute to custom checks checking for one match only by @gabrielleecredera in https://github.com/aquasecurity/tfsec/pull/1438
• fix: remove false positive for google_secret_manager_secret_iam_member.secret_id by @liamg in https://github.com/aquasecurity/tfsec/pull/1505
• fix: string slices can now be correctly passed by variable by @liamg in https://github.com/aquasecurity/tfsec/pull/1507
• fix: Make results deterministic by expanding for_each and count in hierarchical order by @liamg in https://github.com/aquasecurity/tfsec/pull/1506
• fix: Azure KeyVault Secrets: use RFC3339 to parse expiry time by @liamg in https://github.com/aquasecurity/tfsec/pull/1508

New Contributors

• @bobsaintcool made their first contribution in https://github.com/aquasecurity/tfsec/pull/1500

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.0.11...v1.0.12

What's Changed

• fix: Always prefer matching a referenced block within the same module by @liamg in https://github.com/aquasecurity/tfsec/pull/1489

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.0.10...v1.0.11

What's Changed

• fix: updated rules.md with missing rule by @danielsteman in https://github.com/aquasecurity/tfsec/pull/1486
• feat: add renamed rules to migration by @liamg in https://github.com/aquasecurity/tfsec/pull/1487
• fix: force goreleaser to use vendored dependencies by @liamg in https://github.com/aquasecurity/tfsec/pull/1488

New Contributors

• @danielsteman made their first contribution in https://github.com/aquasecurity/tfsec/pull/1486

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.0.9...v1.0.10

What's Changed

• docs: document preConditions in custom checks by @gabrielleecredera in https://github.com/aquasecurity/tfsec/pull/1473
• chore: Automate issue labelling and tweak templates by @liamg in https://github.com/aquasecurity/tfsec/pull/1475
• feat: add question template by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1480
• fix: Handle go-cty value derive panics by @liamg in https://github.com/aquasecurity/tfsec/pull/1485

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.0.8...v1.0.9

What's Changed

• fix: Add metadata to google keyring by @liamg in https://github.com/aquasecurity/tfsec/pull/1466
• fix: Add missing metadata for all providers/services by @liamg in https://github.com/aquasecurity/tfsec/pull/1474

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.0.7...v1.0.8