What's Changed
- fix(actions): standardize kicsbot automation branch names under feature/kicsbot-* by @cx-lior-poterman in #8129
- fix(queries): Rename query "Not Using JSON In CMD And ENTRYPOINT Arguments" to "Not Using proper exec form In CMD And ENTRYPOINT Arguments" by @cx-laura-rodrigues in #8131
- fix(query): various fixes for passwords and secrets queries by @cx-andre-pereira in #8117
- fix(vulnerabilities): update package versions to fix vulnerabilities by @cx-artur-ribeiro in #8137
- fix(parse): rename resource name to fix "failed to parse file content" error by @cx-artur-ribeiro in #7962
- docs(queries): clarify riskScore type in query metadata by @cx-artur-ribeiro in #8138
- fix(detector): fix data race in dockerfile line detection for multiple dockerfiles projects by @cx-artur-ribeiro in #8121
- fix(query): improve "last user is root" dockerfile query coverage by @cx-andre-pereira in #8123
- fix(queries): correct mismatched expected/actual values across 22 queries by @cx-artur-ribeiro in #8120
- test(action): test kics-github-action changes by @cx-artur-ribeiro in #8139
- docs(contributing): fix wrong E2E fixture path and typos across docs by @toyeshhm in #8127
- fix(ids): remove duplicated query ids from password and secrets aws queries by @cx-artur-ribeiro in #8142
- ci(release): AST-186869 allow release-docker-image to build a given tag by @cx-lior-poterman in #8146
- ci(release): AST-186869 unblock release-docker-image under StepSecurity policy by @cx-lior-poterman in #8147
- ci(release): AST-186869 fix Docker Hub token expiry and automate release publish by @cx-lior-poterman in #8148
- test(query): minor adjustments to passwords and secrets start-of-file sample comments by @AndrePereira123 in #8145
- ci(release): AST-186869 push prebuilt OCI archives with a fresh login by @cx-lior-poterman in #8149
- ci(release): AST-186869 clean build cache after each image build by @cx-lior-poterman in #8150
- fix(version): update version prefix comparison with latest version by @cx-artur-ribeiro in #8155
- test(pwd): add password and secrets timeout test coverage by @cx-artur-ribeiro in #8156
- fix(queries): fixed fp on terraform/aws network acl with unrestricted access to rdp/ssh queries by @cx-ricardo-jesus in #8151
- fix(query): fixed FP on Security Operations Empty Object Definition for OpenAPI by @cx-ricardo-jesus in #8159
- fix(query): fixed FP on Response Code Missing query for OpenAPI by @cx-ricardo-jesus in #8160
- fix(vulnerabilities): update dockerfile images by @cx-artur-ribeiro in #8165
- fix(query): add missing case on Response Code Missing query for OpenAPI by @cx-artur-ribeiro in #8168
- ci(release): use a GitHub App token for release automation pushes by @cx-lior-poterman in #8164
- docs(release): preparing for release 2.2.1 by @cx-kics-release[bot] in #8174
- fix(action): remove ms-teams-deploy-card from github actions by @cx-artur-ribeiro in #8175
- docs(queries): update queries catalog by @cx-kics-release[bot] in #8176
New Contributors
- @toyeshhm made their first contribution in #8127
- @AndrePereira123 made their first contribution in #8145
- @cx-kics-release[bot] made their first contribution in #8174
Full Changelog: v2.2.0...v2.2.1