v1.0.0

What's Changed

We've transitioned all of the checks from Go to Rego. Therefore we're releasing this early release of the trivy-checks bundle as a new Major version starting as v1.

This bundle will be the default checks bundle starting from the next release of Trivy (v0.56+) to allow for any improvements to be baked in prior to the use in Trivy. See the announcement here.

Commits in this change

• fix(checks): correctly check the protocol in the AVD-AWS-0102 rule by @nikpivkin in #161
• fix(docs): generate multiple examples from Rego by @nikpivkin in #169
• test(bundle): Verify bundle usage by @simar7 in #173
• test: exclude deprecated checks when detecting duplicates by @nikpivkin in #181
• ci: bump OPA to v0.65.0 by @nikpivkin in #186
• feat: add CIDR and squealer built-in Rego functions by @nikpivkin in #174
• chore(deps): bump github.com/open-policy-agent/opa from 0.65.0 to 0.67.0 by @dependabot in #206
• ci: pin Go version by @nikpivkin in #214
• refactor(checks): migrate of some AWS services to Rego by @nikpivkin in #197
• test: reorganize the structure of functional tests by @nikpivkin in #215
• Ignore casing in CIDR wildcards by @InverseIntegral in #210
• refactor(checks): migrate Nifcloud network, dns, sslcertificate to Rego by @nikpivkin in #184
• refactor(checks): migrate GitHub checks to Rego by @nikpivkin in #187
• refactor(checks): migrate Google dns, kms, bigquery to Rego by @nikpivkin in #194
• refactor(checks): migrate Azure appservice, authorization, container to Rego by @nikpivkin in #198
• refactor(checks): migrate Azure datafactory, datalake, keyvault to Rego by @nikpivkin in #201
• ci: add groups for dependabot by @nikpivkin in #213
• chore: init separate package for bundle scripts by @nikpivkin in #218
• refactor(checks): migrate AWS S3 to Rego by @nikpivkin in #204
• refactor(checks): migrate Oracle to Rego by @nikpivkin in #182
• chore(deps): bump trivy by @nikpivkin in #216
• ci: use OPA with custom built-in functions by @nikpivkin in #225
• refactor(checks): migrate Azure monitor, network, synapse, securitycenter to Rego by @nikpivkin in #202
• refactor(checks): migrate DigitalOcean spaces to Rego by @nikpivkin in #188
• refactor(checks): migrate Azure database, compute to Rego by @nikpivkin in #200
• test: initialise tests in each test file by @nikpivkin in #234
• test(bundle): use only canary Trivy by @nikpivkin in #236
• Fix typo in enforce_immutable_repository by @evankanderson in #232
• refactor(checks): migrate Openstack checks to Rego by @nikpivkin in #183
• refactor(checks): migrate Nifcloud computing, rdb, nas to Rego by @nikpivkin in #185
• refactor(checks): migrate Google sql and storage to Rego by @nikpivkin in #189
• refactor(checks): migrate Google IAM to Rego by @nikpivkin in #193
• refactor(checks): migrate Google GKE to Rego by @nikpivkin in #195
• refactor(checks): migrate Google Compute to Rego by @nikpivkin in #196
• refactor(checks): migrate AWS elasticache, elasticsearch, elb to Rego by @nikpivkin in #227
• refactor(checks): migrate AWS emr, kinesis, kms, lambda to Rego by @nikpivkin in #228
• refactor(checks): migrate AWS ecr, efs and eks to Rego by @nikpivkin in #229
• refactor(checks): migrate AWS workspaces, ssm and sqs to Rego by @nikpivkin in #230
• refactor(checks): migrate AWS redshift, sam and sns to Rego by @nikpivkin in #231
• refactor(checks): migrate AWS rds, neptune, mq, ecs to Rego by @nikpivkin in #239
• refactor(checks): migrate AWS IAM to Rego by @nikpivkin in #235
• chore: always pull trivy images by @nikpivkin in #238
• chore(deps): bump github.com/docker/docker from 26.1.3+incompatible to 26.1.5+incompatible in /scripts in the go_modules group across 1 directory by @dependabot in #223
• refactor(checks): migrate CloudStack to Rego by @nikpivkin in #222
• refactor: update Rego libs by @nikpivkin in #240
• refactor(checks): migrate AWS apigateway, cloudfront, cloudwatch to Rego by @nikpivkin in #241
• refactor(checks): migrate DigitalOcean compute to Rego by @nikpivkin in #243
• refactor(checks): migrate Azure storage to Rego by @nikpivkin in #244
• refactor(checks): migrate AWS ec2 to Rego by @nikpivkin in #226
• chore: remove unnecessary test files by @nikpivkin in #242
• chore(checks): deprecate some checks by @nikpivkin in #245
• checks: add default framework to some Rego checks by @nikpivkin in #247
• chore(deps): Bump trivy version by @simar7 in #246
• chore: mark Rego libs as libs by @nikpivkin in #250

New Contributors

• @InverseIntegral made their first contribution in #210
• @evankanderson made their first contribution in #232

Full Changelog: v0.13.0...v1.0.0