github Checkmarx/kics v1.5.7

latest releases: v2.0.1, v2.0.1-integrations, v2.0.0...
2 years ago

🚀 New features and improvements

added 19 new queries (Terraform, Kubernetes)

feat(report): added Code Climate report (#5261)

🐛 Bug fixes

fix(query): extended scope of MissingAttribute rule in seccomp k8s rule (#5201) by @Churro
fix(query): fixed searchKey and resource kind in pod_or_container_without_resource_quota k8s rule (#5199) by @Churro
fix(query): fixed searchKey and resource kind in pod_or_container_without_limit_range k8s rule (#5198) by @Churro
fix(query): added support for aws_iam_policy_document.Principals to policy_without_principal tf rule (#5196) by @Churro
fix(query): fixed SNS Topic is Publicly Accessible (#5210)
fix(query): fixed Api Gateway Without Content Encoding (#5215)
fix(query): fixed Api Gateway Without Content Encoding on Terraform platform (#5227)
fix(query): fixed ALB Listening on HTTP for AWS CloudFormation (#5212)
fix(query): updated ecr_repositories_not_encrypted TF rule to match KMS type (#5195) by @Churro
fix(queries): fixed aws unique identifiers from common queries (#5236)
fix(query): remove viewer from list of improper privileges (#5211) by @jaevans
fix(query): added possibility of security group being declared as a variable (#5208)
fix(filesystem): fixed GetExcludedPaths (#5288)
fix(e2e): results json compare (index out of range) (#5209)
fix(yaml parser): added model.NewIgnore.Reset() at the beginning of the YAML parser (#5255)
docs(implementations): fix changed directory for kics assets queries (#5213) by @roock

📦 Dependency updates bumps

build(deps): bump github.com/aws/aws-sdk-go from 1.43.39 to 1.44.4 (#5200) (#5218) (#5224) (#5230) (#5244) (#5256) (#5269) (#5281)
build(deps): bump github.com/tidwall/gjson from 1.14.0 to 1.14.1 (#5217)
build(deps): bump github.com/emicklei/proto from 1.9.2 to 1.10.0 (#5216)
build(deps): bump github.com/hashicorp/hcl/v2 from 2.11.1 to 2.12.0 (#5238)
build(deps): bump github.com/moby/buildkit from 0.10.1 to 0.10.2 (#5270)
build(deps): bump github.com/tdewolff/minify/v2 from 2.11.1 to 2.11.2 (#5257)

ci(deps): bump checkmarx/kics-action from 1.4 to 1.5 (#5207)
ci(deps): bump github/codeql-action from 1 to 2 (#5243)

👻 Maintenance

update(analyzer): analyzer usage when types flag is passed (#5222)
update(query): updated Unpinned Package Version in Apk Add (#5181)
update(query): updated metadata of Add Instead Copy query (#5233)
update(docs): updated missing technologies supported in docs (#5223) (#5226)
update(docs): removed -q flag from integration examples (#5225)

New Contributors

Full Changelog: v1.5.6...v1.5.7

Don't miss a new kics release

NewReleases is sending notifications on new releases.