tfsec

What's Changed

• Bumped hashicorp/go-getter due Critical Vulnerability by @jdesouza in https://github.com/aquasecurity/tfsec/pull/2144

New Contributors

• @jdesouza made their first contribution in https://github.com/aquasecurity/tfsec/pull/2144

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.28.5...v1.28.6

What's Changed

• Create auto-close-issues.yml by @simar7 in https://github.com/aquasecurity/tfsec/pull/2104
• chore(deps): bump github.com/go-git/go-git/v5 from 5.5.2 to 5.11.0 by @dependabot in https://github.com/aquasecurity/tfsec/pull/2131
• chore(deps): bump google.golang.org/grpc from 1.52.0 to 1.56.3 by @dependabot in https://github.com/aquasecurity/tfsec/pull/2132
• chore(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 by @dependabot in https://github.com/aquasecurity/tfsec/pull/2133
• chore(deps): bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 by @dependabot in https://github.com/aquasecurity/tfsec/pull/2134

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.28.4...v1.28.5

What's Changed

• chore(ci): Update docs generation runner by @simar7 in https://github.com/aquasecurity/tfsec/pull/2101

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.28.3...v1.28.4

What's Changed

• Print the transition message as standard error by @yu-iskw in https://github.com/aquasecurity/tfsec/pull/2099
• chore(ci): Fix CI issues by @simar7 in https://github.com/aquasecurity/tfsec/pull/2100

New Contributors

• @yu-iskw made their first contribution in https://github.com/aquasecurity/tfsec/pull/2099

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.28.2...v1.28.3

What's Changed

• chore(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1930
• Set github stale bot message "days" to its config by @nitrocode in https://github.com/aquasecurity/tfsec/pull/1963
• Fix table in usage.md by @Eforen in https://github.com/aquasecurity/tfsec/pull/1922
• chore(deps): bump github.com/spf13/cobra from 1.6.0 to 1.6.1 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1933
• Update snapshot-release.yml by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1971
• chore(deps): bump crazy-max/ghaction-import-gpg from 5.1.0 to 5.2.0 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1928
• chore(deps): bump goreleaser/goreleaser-action from 3 to 4 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1964
• chore(deps): bump github.com/liamg/memoryfs from 1.4.3 to 1.5.0 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1944
• chore(deps): bump github.com/aquasecurity/defsec from 0.82.2 to 0.82.6 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1951
• Update snapshot-release.yml by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1973
• chore(deps): bump golangci/golangci-lint-action from 3.2.0 to 3.3.1 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1947
• chore(deps): bump actions/stale from 6 to 7 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1968
• docs: Add Trivy migration guide by @simar7 in https://github.com/aquasecurity/tfsec/pull/1961
• chore(deps): bump golangci/golangci-lint-action from 3.3.1 to 3.4.0 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1981
• chore(deps): bump github.com/liamg/memoryfs from 1.5.0 to 1.6.0 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1984
• Update golangci-lint.yml by @giorod3 in https://github.com/aquasecurity/tfsec/pull/2009
• bump go to version 1.19 by @simar7 in https://github.com/aquasecurity/tfsec/pull/2013
• chore(deps): bump github.com/aquasecurity/defsec from 0.82.6 to 0.84.1 by @dependabot in https://github.com/aquasecurity/tfsec/pull/2008
• chore(deps): bump alpine from 3.16.0 to 3.17.2 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1998
• fix typo of drop-invalid-headers doc by @tk3fftk in https://github.com/aquasecurity/tfsec/pull/1976
• chore(deps): bump github/issue-labeler from 2.5 to 3.0 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1989
• fix: sha256 command by @aiell0 in https://github.com/aquasecurity/tfsec/pull/1987
• feat(config): use spf13/viper to read config from env vars by @nitrocode in https://github.com/aquasecurity/tfsec/pull/1990
• docs: Trivy callout and migration guide added by @AnaisUrlichs in https://github.com/aquasecurity/tfsec/pull/2021
• feat: Add a transition message by @simar7 in https://github.com/aquasecurity/tfsec/pull/2067
• docs: README tfsec to trivy migration callout by @AnaisUrlichs in https://github.com/aquasecurity/tfsec/pull/2020
• chore(deps): bump github.com/cloudflare/circl from 1.1.0 to 1.3.3 by @dependabot in https://github.com/aquasecurity/tfsec/pull/2055

New Contributors

• @nitrocode made their first contribution in https://github.com/aquasecurity/tfsec/pull/1963
• @Eforen made their first contribution in https://github.com/aquasecurity/tfsec/pull/1922
• @giorod3 made their first contribution in https://github.com/aquasecurity/tfsec/pull/2009
• @aiell0 made their first contribution in https://github.com/aquasecurity/tfsec/pull/1987
• @AnaisUrlichs made their first contribution in https://github.com/aquasecurity/tfsec/pull/2021

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.28.1...v1.28.2

What's Changed

• chore(deps): bump github.com/liamg/memoryfs from 1.4.2 to 1.4.3 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1893
• chore(deps): bump actions/stale from 5 to 6 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1910
• chore(deps): bump github.com/AlecAivazis/survey/v2 from 2.3.5 to 2.3.6 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1891
• chore: Update defsec to v0.82.2 by @liamg in https://github.com/aquasecurity/tfsec/pull/1932

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.28.0...v1.28.1

What's Changed

• Add missing docs from recent additions to defsec by @reedloden in https://github.com/aquasecurity/tfsec/pull/1884
• fix wrong code block by @dawez in https://github.com/aquasecurity/tfsec/pull/1883
• feat: support exclude expiry in config by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1897
• feat: support optional provider and service name in custom checks by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1899
• fix: Ensure rego input is properly filled for nested slices by @liamg in https://github.com/aquasecurity/defsec/pull/952
• fix: Readd policy wildcards rule to default framework by @liamg in https://github.com/aquasecurity/defsec/pull/954
• feat: add OnlyContains helper function by @owenrumney in https://github.com/aquasecurity/defsec/pull/953

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.27.6...v1.28.0

What's Changed

• docs: Add module ignore documentation by @liamg in https://github.com/aquasecurity/tfsec/pull/1875
• build: Speed up caching and tidy actions build by @liamg in https://github.com/aquasecurity/tfsec/pull/1876
• fix: Use mktemp instead of /tmp to securely manage temporary directories by @reedloden in https://github.com/aquasecurity/tfsec/pull/1870
• chore: Update defsec to v0.73.0 by @liamg in https://github.com/aquasecurity/tfsec/pull/1877

New Contributors

• @reedloden made their first contribution in https://github.com/aquasecurity/tfsec/pull/1870

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.27.5...v1.27.6

What's Changed

• fix: Resolve S3 regressions by @liamg in https://github.com/aquasecurity/tfsec/pull/1867

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.27.4...v1.27.5

What's Changed

• fix: panic in sqs adapter by @liamg in https://github.com/aquasecurity/tfsec/pull/1866

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.27.3...v1.27.4

What's Changed

• fix: Fix s3 public access block linking by @liamg in https://github.com/aquasecurity/tfsec/pull/1865

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.27.2...v1.27.3

What's Changed

• misc: automate the installation of tfsec on linux by @dawez in https://github.com/aquasecurity/tfsec/pull/1847
• chore(deps): bump crazy-max/ghaction-import-gpg from 5.0.0 to 5.1.0 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1837
• chore(deps): Update defsec to fix IAM ignores by @liamg in https://github.com/aquasecurity/tfsec/pull/1853
• fix: Fix build script by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1856
• chore(deps): update defsec to v0.71.11 by @liamg in https://github.com/aquasecurity/tfsec/pull/1858
• chore(deps): update defsec to v0.72.0 by @liamg in https://github.com/aquasecurity/tfsec/pull/1861

New Contributors

• @dawez made their first contribution in https://github.com/aquasecurity/tfsec/pull/1847

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.27.1...v1.27.2

What's Changed

• chore: bump defsec by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1843

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.27.0...v1.27.1

What's Changed

• chore(deps): bump github.com/aquasecurity/defsec from 0.68.8 to 0.68.9 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1827
• fix tiny typo by @tk3fftk in https://github.com/aquasecurity/tfsec/pull/1833
• chore(deps): bump github.com/aquasecurity/defsec from 0.68.9 to 0.68.10 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1831
• fix: output statistics in lovely, markdown or json format (#1790) by @amandahla in https://github.com/aquasecurity/tfsec/pull/1840
• feat: Add exclude-ignores flag and --config-file attribute by @alexandrupopafc in https://github.com/aquasecurity/tfsec/pull/1839

New Contributors

• @tk3fftk made their first contribution in https://github.com/aquasecurity/tfsec/pull/1833
• @amandahla made their first contribution in https://github.com/aquasecurity/tfsec/pull/1840
• @alexandrupopafc made their first contribution in https://github.com/aquasecurity/tfsec/pull/1839

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.26.3...v1.27.0

What's Changed

• GitHub Action link correction by @mencarellic in https://github.com/aquasecurity/tfsec/pull/1801
• chore(deps): bump github.com/stretchr/testify from 1.7.2 to 1.8.0 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1817
• chore(deps): bump github.com/hashicorp/go-version from 1.5.0 to 1.6.0 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1816
• chore(deps): bump github.com/spf13/cobra from 1.4.0 to 1.5.0 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1808
• chore(deps): bump github.com/owenrumney/go-sarif/v2 from 2.1.1 to 2.1.2 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1806
• fix: Fix bad use of AsNumber by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1824

New Contributors

• @mencarellic made their first contribution in https://github.com/aquasecurity/tfsec/pull/1801

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.26.2...v1.26.3

What's Changed

• fix: fix public block linking by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1821

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.26.1...v1.26.2

What's Changed

• fix: prefer tfsec-bin AUR package by @greut in https://github.com/aquasecurity/tfsec/pull/1798
• fix: Treat numbers in string attributes as numbers if required by @owenrumney in https://github.com/aquasecurity/tfsec/pull/1820

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.26.0...v1.26.1

What's Changed

• feat: Improve markdown/html output by @liamg in https://github.com/aquasecurity/tfsec/pull/1795
• chore: Update defsec to v0.68.2 by @liamg in https://github.com/aquasecurity/tfsec/pull/1796

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.25.1...v1.26.0

What's Changed

• fix: Non-CGO builds by @liamg in https://github.com/aquasecurity/tfsec/pull/1794

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.25.0...v1.25.1

What's Changed

• chore(deps): bump github.com/AlecAivazis/survey/v2 from 2.3.4 to 2.3.5 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1785
• chore(deps): bump actions/setup-python from 3 to 4 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1784
• chore(deps): bump docker/setup-qemu-action from 1 to 2 by @dependabot in https://github.com/aquasecurity/tfsec/pull/1783
• feat: Added sys info and extra debug logging via newer defsec by @liamg in https://github.com/aquasecurity/tfsec/pull/1793
• fix: Fix incorrect module/project directory being used when symlinks are encountered within a module (via defsec)

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.24.4...v1.25.0