aquasecurity/tfsec v1.22.0

on GitHub

What's Changed

• chore(deps): bump github.com/hashicorp/go-version from 1.4.0 to 1.5.0 by @dependabot in #1750
• fix: remove broken git submodule reference by @smelchior in #1751
• chore(deps): bump goreleaser/goreleaser-action from 2 to 3 by @dependabot in #1748
• chore(deps): bump alpine from 3.15 to 3.16.0 by @dependabot in #1747
• chore(deps): bump github.com/aquasecurity/defsec from 0.57.8 to 0.59.0 by @dependabot in #1749
• chore(deps): Update defsec to v0.60.0 by @liamg in #1758
• fix: Update defsec to fix unknown value error in reference by @liamg in #1759
• chore(deps): bump crazy-max/ghaction-import-gpg from 4.4.0 to 5.0.0 by @dependabot in #1755
• feat: add glob support to exclude paths by @owenrumney in #1760
• feat: add no code option by @owenrumney in #1762
• fix(modules): Fix edge case causing infinite loop when resolving nested modules by @liamg in #1761
• chore(deps): bump defsec by @owenrumney in #1763

Defsec Updates

• feat: split out DAX cluster and DynamoDB Table (https://github.com/aquasecurity/defsec#/defsec#653) (Owen Rumney)
• feat: support managed encryption for sqs (https://github.com/aquasecurity/defsec#/defsec#651) (Owen Rumney)
• feat: support for AWS EMR security configuration (https://github.com/aquasecurity/defsec#/defsec#643) (brandon-maxar)
• fix(terraform): Properly support relative paths in remote modules (https://github.com/aquasecurity/defsec#/defsec#649) (Liam Galvin)
• fix(terraform): Fix module loading from the local .terraform cache (https://github.com/aquasecurity/defsec#/defsec#648) (Liam Galvin)
• fix(terraform): Prevent panics when block keys are unresolvable (https://github.com/aquasecurity/defsec#/defsec#646) (Liam Galvin)
• fix(terraform): Fix resolution of provider-added values e.g. arn/id (https://github.com/aquasecurity/defsec#/defsec#645) (Liam Galvin)
• fix(google): Fix false positive for Google Compute Firewall Rules (https://github.com/aquasecurity/defsec#/defsec#641) (Liam Galvin)
• fix(google): Fix false positive in SQL instance backups for replicas (https://github.com/aquasecurity/defsec#/defsec#640) (Liam Galvin)
• test: add tests for azure network tf adapters (https://github.com/aquasecurity/defsec#/defsec#634) (vanesasejdiu)
• test: add tests for azure storage tf adapters (https://github.com/aquasecurity/defsec#/defsec#632) (vanesasejdiu)
• test: add tests for google storage tf adapters (https://github.com/aquasecurity/defsec#/defsec#630) (vanesasejdiu)
• fix: Single public IPs should ba acceptable as prefixes (https://github.com/aquasecurity/defsec#/defsec#629) (Owen Rumney)
• fix: support source/target tags for GCP firewall (https://github.com/aquasecurity/defsec#/defsec#628) (Owen Rumney)
• docs: Add example for >2.97.0 of the AzureRM provider for container logging (https://github.com/aquasecurity/defsec#/defsec#627) (Owen Rumney)
• chore(deps): bump github.com/hashicorp/go-getter from 1.5.11 to 1.6.1 (https://github.com/aquasecurity/defsec#/defsec#620) (dependabot[bot])
• test: add tests for google sql tf adapters (https://github.com/aquasecurity/defsec#/defsec#619) (vanesasejdiu)
• test: add tests for google gke tf adapters (https://github.com/aquasecurity/defsec#/defsec#617) (vanesasejdiu)
• test: add tests for google compute tf adapters (https://github.com/aquasecurity/defsec#/defsec#615) (vanesasejdiu)
• perf: Improve code highlighting by caching syntax highlighted inputs (https://github.com/aquasecurity/defsec#/defsec#610) (Liam Galvin)
• feat: Truncate source code with an optional limit (https://github.com/aquasecurity/defsec#/defsec#608) (Liam Galvin)
• fix: Fix relative paths in JUnit output (https://github.com/aquasecurity/defsec#/defsec#605) (Liam Galvin)
• fix: make highlight omit empty (https://github.com/aquasecurity/defsec#/defsec#602) (Owen Rumney)
• fix: remove Highlighted from code explicitly (https://github.com/aquasecurity/defsec#/defsec#600) (Owen Rumney)
• fix: Fix ansi double escapes (https://github.com/aquasecurity/defsec#/defsec#599) (Liam Galvin)
• test: add tests for aws vpc tf adapters (https://github.com/aquasecurity/defsec#/defsec#597) (vanesasejdiu)
• test: add tests for digital-ocean compute tf adapters (https://github.com/aquasecurity/defsec#/defsec#595) (vanesasejdiu)

New Contributors

• @smelchior made their first contribution in #1751

Full Changelog: v1.21.2...v1.22.0