- Add whitelisting to avoid false positives for generic sensitive attributes
- Add parse caching to avoid hanging during scans
- Improve JUnit output for better Bitbucket integration
- Moved warnings about skipped checks to stderr to prevent malformed Junit etc. output
- Added support for dynamic blocks utilising
for_each
- Checks are now done for multiple egress/ingress blocks in security groups
- Added
--exclude-dir [directory]
flag to exclude directories from scans - Check access param of azure sg rules