cybr-cli

What's Changed

• Migrated CI to CyberArk's Identity Security Platform
• Added support for "Change Password in Vault Only" via cybr accounts change --scope vault

What's Changed

• Added support for PodFqdn when authenticating with CyberArk Identity (#209)
  • Thanks to Dennis Mastin for contributing feedback that led to this fix!

Full Changelog: https://github.com/infamousjoeg/cybr-cli/compare/v1.0.0-release...v1.0.1-release

What's Changed

• Added support for CyberArk Identity authentication via Shared Services (ISPSS) (#189)
• Added support for MFA logon through OTP or Polling via CyberArk Identity (#189)
• Added support for Privilege Cloud tenants on Shared Services (ISPSS) (#189)
• Added support for AWS CLI-based role assumption when authenticating to conjur using authn-iam (#190)
• Added ability to unlock accounts that are set for exclusive usage (#198)
• Added ability to provide next password for cybr accounts change command (#207)
  • Thanks to @Mordanthanus for submitting this feature request!

Full Changelog: https://github.com/infamousjoeg/cybr-cli/compare/v0.1.14-beta...v1.0.0-release

What's Changed

• Fixes #161 adds stdin support for policy load by @infamousjoeg in #181
  • cat policy.yaml | cybr conjur append-policy -b root -f -
  • cybr conjur append-policy -b root -f <$(cat policy.yaml)
• Fixes #182 env vars, authn-iam, and authn all working by @infamousjoeg in #184
• Add --password/-p to cybr conjur logon by @infamousjoeg in #186
  • yes | cybr conjur logon -b https://conjur.example.com -a demo -l admin -p $CONJUR_PASSWORD

Full Changelog: https://github.com/infamousjoeg/cybr-cli/compare/v0.1.13-beta...v0.1.14-beta

What's Changed

• Fixes #173 adds --platform-name to platforms list by @infamousjoeg in https://github.com/infamousjoeg/cybr-cli/pull/174
• Fixes #175 add check for .conjurrc before env authn by @infamousjoeg in https://github.com/infamousjoeg/cybr-cli/pull/176
• Update GitHub Action Workflows by @infamousjoeg in https://github.com/infamousjoeg/cybr-cli/pull/177
• Bump v0.1.13-beta by @infamousjoeg in https://github.com/infamousjoeg/cybr-cli/pull/179
• v0.1.13-beta Release by @infamousjoeg in https://github.com/infamousjoeg/cybr-cli/pull/180

Full Changelog: https://github.com/infamousjoeg/cybr-cli/compare/v0.1.12-beta...v0.1.13-beta

What's Changed

• Added support for authn-iam authentication for Conjur commands
• Added support for Conjur Cloud
• #160 Update cybr user unsuspend to v2 API endpoint
• #164 Fix cybr safes add-member error
• #165 Use a builder-image to reduce the size of the cybr-cli container
• #167 Update cybr users to v2 API endpoints

Full Changelog: https://github.com/infamousjoeg/cybr-cli/compare/v0.1.11-beta...v0.1.12-beta

What's Changed

• Add "cybr conjur whoami" to see identity currently logged in as by @infamousjoeg in https://github.com/infamousjoeg/cybr-cli/issues/149
• Add ARM to GitHub Binary Release Workflow by @infamousjoeg in https://github.com/infamousjoeg/cybr-cli/issues/155
• Add support to query platforms in PAS by @infamousjoeg in https://github.com/infamousjoeg/cybr-cli/issues/91
• v0.1.11-beta Release by @infamousjoeg in https://github.com/infamousjoeg/cybr-cli/pull/158

Full Changelog: https://github.com/infamousjoeg/cybr-cli/compare/v0.1.10-beta...v0.1.11-beta

What's Changed

• Fix #143 Add User/Group filtering to cybr safes list by @infamousjoeg in https://github.com/infamousjoeg/cybr-cli/pull/146
• Fix #144 Fix code scanning alert - Disabled TLS Certificate Check by @infamousjoeg in https://github.com/infamousjoeg/cybr-cli/pull/145

Full Changelog: https://github.com/infamousjoeg/cybr-cli/compare/v0.1.9-beta...v0.1.10-beta

What's Changed

• Fix #87 Add role-based safe permissions when adding safe member by @infamousjoeg in https://github.com/infamousjoeg/cybr-cli/pull/141

Full Changelog: https://github.com/infamousjoeg/cybr-cli/compare/v0.1.8-beta...v0.1.9-beta

What's Changed

• Fix #133 - Self-signed flag truncates left side characters in Base URL in certain scenarios by @infamousjoeg in https://github.com/infamousjoeg/cybr-cli/pull/134

Full Changelog: https://github.com/infamousjoeg/cybr-cli/compare/v0.1.7-beta...v0.1.8-beta

What's Changed

• v0.1.7-beta Release by @infamousjoeg in https://github.com/infamousjoeg/cybr-cli/pull/131

Full Changelog: https://github.com/infamousjoeg/cybr-cli/compare/v0.1.6-beta...v0.1.7-beta

What's Changed

• fixes #127 create conjurrc and netrc (#128) by @infamousjoeg in https://github.com/infamousjoeg/cybr-cli/pull/129

Full Changelog: https://github.com/infamousjoeg/cybr-cli/compare/v0.1.5-beta...v0.1.6-beta

What's Changed

• Fixed a bug where if CONJUR_APPLIANCE_URL was missing /authn when running cybr conjur logon-non-interactive, it would not be appended by @infamousjoeg in https://github.com/infamousjoeg/cybr-cli/pull/124
• v0.1.5-beta Release by @infamousjoeg in https://github.com/infamousjoeg/cybr-cli/pull/125

Full Changelog: https://github.com/infamousjoeg/cybr-cli/compare/v0.1.4-beta...v0.1.5-beta

Security Updates only

What's Changed

• fix: Dockerfile to reduce vulnerabilities (#120) by @infamousjoeg in https://github.com/infamousjoeg/cybr-cli/pull/122

Full Changelog: https://github.com/infamousjoeg/cybr-cli/compare/v0.1.3-beta...v0.1.4-beta

Added:

• authn-ldap support for Conjur
• Added six (6) CEM commands (Credit: @quincycheng):
  • cybr cem login
  • cybr cem get-accounts
  • cybr cem get-remediations
  • cybr cem get-recommendations
  • cybr cem get-entity-detail
  • cybr cem get-entities

Fixed:

• cybr safes list would return null

Changed:

• No changes

Added:

• cybr logon --concurrent allows concurrent REST API sessions (#89)
• cybr completion allows for auto tab completion (#83)
• cybr account move allows ability to move an account from current safe to a new safe (#93)
• cybr logon --password allows the ability to logon non-interactively. This allows ability to logon with cybr ccp get-account (#92)
• Support for Apple M1 ARM architecture

Fixed

• cybr conjur logon bug fixed when running on windows (#99)
• cybr conjur logon now allows more than 2 certificates in retrieved certificate chain (#97)

Changed

• cybr conjur list removed default limit (#102)

Added:

• cybr users add allows the ability to add a Cyberark PAS users
• cybr ccp get-account allows the ability to retrieve an account using Cyberark Central Credential Provider.
• cybr ccp get-account allows flags --client-cert & --client-key to support client certificate authentication
• cybr conjur commands no longer requires ~/.conjurrc & ~/.netrc files. Instead the following environment variables can be used: CONJUR_APPLIANCE_URL, CONJUR_ACCOUNT, CONJUR_AUTHN_LOGIN, CONJUR_AUTHN_API_KEY and CONJUR_CERT_FILE

Fixed

• cybr safe add-member --search-in bug fix that allows the --search-in flag to be correctly propogated.

Internal/Developer

• Refactor all structs outside of the api package. This will allow easier extensibility and readability.
• Added automated github action tests.
• Docker container release to ghcr.io

Check these helpful videos for v0.1.0-beta by @AndrewCopeland:

• cybr-cli v0.1.0-beta Release Review
• cybr-cli v0.1.0-beta Usage Review

Added :

• cybr logon --non-interactive allows the ability to logon to PAS API using the environment variable PAS_PASSWORD
• cybr logon --authn-type radius gives the ability to authenticate to PAS using radius
• cybr accounts verify mark an account for verification
• cybr accounts change mark an account for change
• cybr accounts reconcile mark an account for reconcilation
• cybr accounts get-password retrieve a password for an account
• cybr users list list and search PAS users
• cybr users delete delete a PAS user
• cybr users unsuspend unsuspend a user from failed logon attempts
• cybr conjur logoff will logoff conjur by deleting the ~/.conjurrc and ~/.netrc files
• cybr --verbose flag can be used to get info about the HTTP requests being sent to the PAS api
• Auto generation of CLI docs

Fixed:

• cybr conjur logon works with windows
• cybr conjur logon works with self-signed and non-self-signed certificates

• Added aliases to commands that could be interpreted as singular or plural
• Added safe members sub-commands to safes command
• Added conjur command and frequently used sub-commands
• Added automated application identity bash script to dev/ directory as example
• Updated README to reflect "Swiss Army Knife" CLI instead of PAS REST only

For a video walkthrough of the release notes, please watch: cybr-cli v0.0.4-alpha Release Notes on YouTube

• Expanded the following commands in the CLI and client library package:
  • accounts
  • applications
  • safes