What's Changed
⚠️ Upgrade Notes
This release contains a minor addition (suspend field) to the Custom Resource Definitions (CRDs), Helm does not update CRDs after the initial installation. If you are planning on using the suspend field make sure that your CRDs are up to date.
To upgrade the CRDs you can run the following script or grab the latest CRDs from the git repo at the v5.6.0 tag:
kubectl apply -f https://raw.githubusercontent.com/secureCodeBox/secureCodeBox/v5.6.0/operator/crds/execution.securecodebox.io_scans.yaml
kubectl apply -f https://raw.githubusercontent.com/secureCodeBox/secureCodeBox/v5.6.0/operator/crds/execution.securecodebox.io_scheduledscans.yaml🚀 Features
- Add suspend functionality to Scan and ScheduledScan resources by @J12934 in #3504
- Allow extra volumes and volume mounts for CSI secrets and other volumes by @mazmar in #3485
🚓 Security Scanner
- Upgraded nuclei from v3.6.2 to v3.7.0 @secureCodeBoxBot (#3486)
- Upgraded semgrep from 1.147.0 to 1.151.0 @secureCodeBoxBot (#3465, #3477, #3498)
- Upgraded trivy from 0.68.2 to 0.69.1 @secureCodeBoxBot (#3501)
- Upgraded trivy-sbom from 0.68.2 to 0.69.1 @secureCodeBoxBot (#3502)
🐛 Bug Fixes
📌 Dependencies
Minor dependency updates (28 pull requests). Click to expand.
- Update golang Docker tag to v1.25.6 by @renovate[bot] in #3468
- Update dependency helm/helm to v4.0.5 by @renovate[bot] in #3464
- Bump qs from 6.13.0 to 6.14.1 in /documentation in the npm-security-updates group across 1 directory by @dependabot[bot] in #3463
- Bump @types/node from 25.0.7 to 25.0.9 in /documentation in the npm-version-updates group by @dependabot[bot] in #3470
- Bump undici from 6.21.3 to 6.23.0 in /hooks/persistence-elastic/hook by @dependabot[bot] in #3462
- Bump @types/node from 25.0.7 to 25.0.9 in /hook-sdk/nodejs in the npm-version-updates group across 1 directory by @dependabot[bot] in #3471
- Bump the go-version-updates group across 3 directories with 2 updates by @dependabot[bot] in #3473
- Bump the github-actions-version-updates group across 1 directory with 2 updates by @dependabot[bot] in #3472
- Bump the gradle-version-updates group in /hooks/persistence-defectdojo/hook with 2 updates by @dependabot[bot] in #3469
- Bump lodash from 4.17.21 to 4.17.23 in /documentation in the npm-security-updates group across 1 directory by @dependabot[bot] in #3476
- Update dependency helm/helm to v4.1.0 by @renovate[bot] in #3475
- Bump the github-actions-version-updates group across 1 directory with 4 updates by @dependabot[bot] in #3483
- Bump the go-version-updates group across 3 directories with 1 update by @dependabot[bot] in #3484
- Update dependency go-task/task to v3.48.0 by @renovate[bot] in #3479
- Bump lodash-es from 4.17.21 to 4.17.23 in /hooks/cascading-scans/hook by @dependabot[bot] in #3474
- Bump @types/node from 25.0.9 to 25.0.10 in /parser-sdk/nodejs in the npm-version-updates group across 1 directory by @dependabot[bot] in #3482
- Bump the npm-version-updates group in /documentation with 5 updates by @dependabot[bot] in #3481
- chore(deps): update golang docker tag to v1.25.7 by @renovate[bot] in #3497
- Bump @isaacs/brace-expansion from 5.0.0 to 5.0.1 in /documentation in the npm-security-updates group across 1 directory by @dependabot[bot] in #3496
- Bump the go-version-updates group across 3 directories with 2 updates by @dependabot[bot] in #3495
- Bump the github-actions-version-updates group across 1 directory with 4 updates by @dependabot[bot] in #3494
- Bump webpack from 5.96.1 to 5.105.0 in /documentation in the npm-security-updates group across 1 directory by @dependabot[bot] in #3503
- Bump @types/node from 25.0.10 to 25.2.0 in /hook-sdk/nodejs in the npm-version-updates group across 1 directory by @dependabot[bot] in #3493
- Bump github/codeql-action from 4.32.1 to 4.32.2 in /.github/workflows in the github-actions-version-updates group across 1 directory by @dependabot[bot] in #3508
- Bump the npm-version-updates group across 1 directory with 3 updates by @dependabot[bot] in #3507
- Bump gradle-wrapper from 8.13 to 9.3.0 in /hooks/persistence-defectdojo/hook in the gradle-version-updates group by @dependabot[bot] in #3480
Other Changes
New Contributors
Full Changelog: v5.5.0...v5.6.0