secureCodeBox/secureCodeBox v2.6.0

on GitHub

Changes

This release contains the following changes 🎉. Help spread the word or leave a GitHub star if you like it 😉

🚓 Security Scanner

• Added a New WebFrontend Scanner: AngularJS CSTI Scanner (closes #216) @paulschmelzer (#248)
• Refactored the Python Code for the Git-Repo-Scanner @paulschmelzer (#358)
• Expanded SSLyze CascadingRules for HTTPS @luckolen (#356)

⚓️ Hooks

• Add new Persistence-Provider Hook to Import Scan Results into OWASP DefectDojo @J12934 (#300)
• Reimporting SCB Findings from OWASP DefectDojo after persisting them @J12934 (#330)

🐛 Bug Fixes

• Fixed HelmChart Hook Templates @rseedorff (#367)
• Fixed File Mount Options For Hook CRD @fuhrmeistery (#337)

🧪 Test

• Implemented End-2-End test for the gitleaks scanner (closes #273) @twwd (#336)

📚 Documentation

• Release And Bugfixing Strategy @fuhrmeistery (#353)
• Added missing metadata to ⛑ HelmCharts @rseedorff (#354)
• Added first ASCII CLI example video as SVG @rseedorff (#344)

🔧 Maintenance

• Remove auto-generated Java Classes for unused fields of Scan CRD #thisIsNoJavaRepo @J12934 (#341)
• Improving and bugfixing the github issue templates @rseedorff (#333)

📌 Dependencies

• Update to JuiceShop v12.7.0 @J12934 (#366)
• Updated GitLeaks to v7.3.0 @rseedorff (#312)
• Update to JuiceShop v12.6.1 @J12934 (#359)
• Bump y18n from 4.0.0 to 4.0.1 in /hooks @dependabot (#352)
• Bump y18n from 4.0.0 to 4.0.1 in /hooks/persistence-elastic @dependabot (#351)
• Bump y18n from 4.0.0 to 4.0.1 in /hooks/update-field @dependabot (#350)
• Bump y18n from 4.0.0 to 4.0.1 @dependabot (#349)
• Bump y18n from 4.0.0 to 4.0.1 in /hooks/declarative-subsequent-scans @dependabot (#347)
• Bump y18n from 4.0.0 to 4.0.1 in /hooks/generic-webhook @dependabot (#346)
• Bump y18n from 4.0.0 to 4.0.1 in /scanners @dependabot (#348)
• [Snyk] Upgrade ws from 7.4.3 to 7.4.4 @snyk-bot (#345)
• [Snyk] Upgrade ws from 7.4.3 to 7.4.4 @snyk-bot (#342)
• [Snyk] Upgrade @kubernetes/client-node from 0.13.2 to 0.14.0 @snyk-bot (#329)
• [Snyk] Upgrade @kubernetes/client-node from 0.13.2 to 0.14.0 @rseedorff (#326)
• [Snyk] Upgrade @kubernetes/client-node from 0.13.2 to 0.14.0 @rseedorff (#324)
• Update SCB Scanner dependencies @rseedorff (#315)

Distribution

Contributers

Thx to all our contributers supporting this project 🤗
@J12934, @dependabot, @dependabot[bot], @fuhrmeistery, @luckolen, @luckolen-secura, @rseedorff, @snyk-bot, @twwd and @paulschmelzer