github Checkmarx/kics v1.7.13

latest releases: v2.0.1, v2.0.1-integrations, v2.0.0...
2 months ago

🚀 New features and improvements

feat(scanner): parallel scanning by @liorj-orca in #6833
feat(nifcloud): add terraform nifcloud queries by @tunakyonn in #6897
feat(tencentcloud): add cbs disk without encrypted for tencentcloud by @hellertang in #6904
feat(query): added CWE infos to common and dockerfile queries #6373 by @Jeeppler in #6839
feat(engine): ignore terraform cache folders by @dim-ops in #6240
feat(cli): lead with similarity id question in #6840
feat(results): update cyclonedx reports to support v1.5 in #6841
feat(engine): improve similarity id in #6851
feat(engine): add a timeout to decode results in #6846
feat(tests): add new test workflows in #6861
feat(cwe): add cwe into sarif report and KICS CLI results in #6845
feat(query): cloudformation DynamoDB Table Not Encrypted in #6619
feat(cli): control the information in #6854
feat(query): docker compose Shared Volumes Between Containers in #6714
feat(query): cloudformation ECS Cluster with Container Insights Disabled in #6673
feat(query): crossplane ECS Cluster with Container Insights Disabled in #6675
feat(query): pulumi ECS Cluster with Container Insights Disabled in #6678
feat(cwe): adding CWE results into all reports in #6876
feat(query): cloud formation api gateway access logging disabled in #6863

🐛 Bug fixes

fix(query): lambda_iam_invokefunction_misconfigured by @Tohar-orca in #6822
fix(test): sort paths related to the e2e in #6848
fix(engine): improve ansible detection in #6880
fix(query): unnecessary private information in #6716
fix(query): terraform descriptionURLs Changed in #6486
fix(query): fixed false positive when no pid namespace is defined in #6860
fix(query): docker compose deprecated network not set in #6715
fix(query): improve query Key Vault Not Recoverable in #6862
fix(query): terraform DynamoDB Table Point In Time Recovery Disabled in #6617
fix(query): pulumi DynamoDB Table Point In Time Recovery Disabled in #6624
fix(query): deprecated Memcached disabled query in #6642
fix(query): checkFollowedBy query refactor in #6545
fix(query): iam_access_analyzer_not_enabled skipping files in #6873
fix(query): cloudformation cloudFront_without_waf in #6641
fix(query): countLines, IgnoreLines and fileCommands in #6611
fix(flag): validating if output path is valid in #6877
fix(tests): uncommon testing in #6898
fix(dependencies): replace directive order update in #6903
fix(query): openapi Maximum Length Undefined in #6717
fix(analyzer): gitignore only being used to exclude files from the project itself in #6896

📦 Dependency updates bumps

build(deps): bump helm.sh/helm/v3 from 3.13.1 to 3.14.1 in #6884
update(buildkit): buildkit upgrade to v0.12.5 in #6912
build(deps): bump helm.sh/helm/v3 from 3.14.1 to 3.14.2 in #6900

👻 Maintenance

docs(guides): remove ZWSPs & align column separators by @katrinleinweber in #6852
update(docs): docs website upgrade in #6879
feat(docs): add community section in #6838
update(action): tj-actions/verify-changed-files version upgrade in #6842
docs(community): add Bedrock Streaming to users list in #6843
update(docs): update info how to scan zip files in #6855
update(readme): all rights reserved year updated in #6872
docs(queries): update queries catalog in #6856
docs(community): add Keptn Lifecycle Toolkit in #6894
update(repo): repo code cleaning removing unnecessary files in #6895
update(docs): results documentation update in #6885
update(docs): running kics documentation update in #6886
update(docs): add documentation for parallel flag in #6907
update(metadata): description texts are updated in #6908
update(docs): tencent cloud logo added in #6909

New Contributors

@katrinleinweber made their first contribution in #6852
@JulioSCX made their first contribution in #6860
@Jeeppler made their first contribution in #6839
@EduardoSemanas made their first contribution in #6898
@hellertang made their first contribution in #6904

Don't miss a new kics release

NewReleases is sending notifications on new releases.