v0.10.3

What's Changed

• chore(checks): Rename repo to trivy-checks by @simar7 in #109

Full Changelog: v0.10.2...v0.10.3

v0.10.2

What's Changed

• fix(azure): update remediation for AVD-AZU-0027 by @nikpivkin in #90
• feat: add DeploymentConfig support by @szubersk in #87
• fix(aws): fix AVD-AWS-0123 examples by @nikpivkin in #93
• ci: add workflow to verify docs by @nikpivkin in #91
• feat: AWS EKS CIS v 1.4 Compliance Spec by @AnaisUrlichs in #92
• feat(checks): check the package manager in AVD-DS-0017 by @nikpivkin in #97
• checks(aws): change the wording of AVD-AWS-0015 by @nikpivkin in #103
• chore(deps): bump the go_modules group group with 2 updates by @dependabot in #101
• chore(deps): bump github.com/docker/docker from 25.0.3+incompatible to 26.0.0+incompatible by @dependabot in #102
• checks: don't skip advanced checks by @nikpivkin in #107
• bug: update manual vs automate label in k8s-eks-1.4 cis benchmarks by @AnaisUrlichs in #106
• fix: cis checks validate (api-server, controller-manager, scheduler and etcd) args by @chen-keinan in #110

New Contributors

• @szubersk made their first contribution in #87
• @AnaisUrlichs made their first contribution in #92

Full Changelog: v0.10.0...v0.10.2

v0.10.1

What's Changed

• fix(azure): update remediation for AVD-AZU-0027 by @nikpivkin in #90
• feat: add DeploymentConfig support by @szubersk in #87
• fix(aws): fix AVD-AWS-0123 examples by @nikpivkin in #93
• ci: add workflow to verify docs by @nikpivkin in #91
• feat: AWS EKS CIS v 1.4 Compliance Spec by @AnaisUrlichs in #92
• feat(checks): check the package manager in AVD-DS-0017 by @nikpivkin in #97
• checks(aws): change the wording of AVD-AWS-0015 by @nikpivkin in #103
• chore(deps): bump the go_modules group group with 2 updates by @dependabot in #101
• chore(deps): bump github.com/docker/docker from 25.0.3+incompatible to 26.0.0+incompatible by @dependabot in #102
• checks: don't skip advanced checks by @nikpivkin in #107
• bug: update manual vs automate label in k8s-eks-1.4 cis benchmarks by @AnaisUrlichs in #106

New Contributors

• @szubersk made their first contribution in #87
• @AnaisUrlichs made their first contribution in #92

Full Changelog: v0.10.0...v0.10.1

v0.10.0

What's Changed

• chore(deps): bump github.com/open-policy-agent/opa from 0.60.0 to 0.61.0 by @dependabot in #75
• fix(checks): add missing ID field by @nikpivkin in #81
• fix: apply policy for gke provider only by @chen-keinan in #82
• refactor(deps): Add id and docGen cmds by @simar7 in #80
• fix(aws): don't check SSLSupportMethod in AVD-AWS-0013 by @nikpivkin in #85
• chore(tests): Add policy based tests by @simar7 in #70
• chore(deps): bump github.com/docker/docker from 25.0.2+incompatible to 25.0.3+incompatible by @dependabot in #76
• chore(deps): bump github.com/owenrumney/squealer from 1.2.1 to 1.2.2 by @dependabot in #84
• fix(kubernetes): fix the KSV001 check by @nikpivkin in #86
• chore(deps): bump github.com/testcontainers/testcontainers-go from 0.27.0 to 0.28.0 by @dependabot in #83

Full Changelog: v0.9.0...v0.10.0

v0.9.0

What's Changed

• feat(aws): improve wildcard checking in policies by @nikpivkin in #61
• fix: Makefile: rules/ moved to checks/ by @candrews in #59
• fix: remove test-rego from Makefile by @candrews in #58
• chore(deps): bump github.com/aquasecurity/defsec from 0.93.2-0.20240112041815-f53aebc35cb9 to 0.94.1 by @dependabot in #63
• chore(deps): bump github.com/docker/docker from 24.0.7+incompatible to 25.0.0+incompatible by @dependabot in #64
• fix: add system authenticate bind protection policy by @chen-keinan in #65
• chore: add a command to run OPA with custom functions by @nikpivkin in #69
• fix(checks): handle file: and multi: in AVD-DS-005 by @candrews in #60
• fix(checks): handle file: and multi: in AVD-DS-0011 by @candrews in #56
• fix(checks): check the Seccomp of the controllers by @nikpivkin in #71
• fix: change system authenticate bind severity to low by @chen-keinan in #74
• feat(checks): Add check to detect Leaky Vessels exploit by @simar7 in #72
• chore: restore the OPA installation by @nikpivkin in #73
• chore(deps): bump github.com/docker/docker from 25.0.0+incompatible to 25.0.2+incompatible by @dependabot in #68

New Contributors

• @candrews made their first contribution in #59
• @chen-keinan made their first contribution in #65

Full Changelog: v0.8.0...v0.9.0

v0.8.0

What's Changed

• refactor(deps): Restructure into checks/ by @simar7 in #41
• feat(gke): improve AVD-GCP-0056 rule by @nikpivkin in #42
• fix: csi is an allowed volume type by @joebowbeer in #44
• Configmap with sensitive data lacks iban and passport patterns. by @mjshastha in #49
• chore(deps): bump actions/setup-go from 4 to 5 by @dependabot in #50
• chore(checks): Bump AVD-KSV-0014 to HIGH by @simar7 in #51
• fix: update paths to checks by @nikpivkin in #52
• feat(aws): improve AVD-AWS-0057 rule by @nikpivkin in #46
• feat(digitalocean): improve AVD-AWS-0012 rule by @nikpivkin in #45
• fix: fail for irrelevant resources by @itaysk in #53
• chore(deps): bump github.com/testcontainers/testcontainers-go from 0.26.0 to 0.27.0 by @dependabot in #48
• fix(checks): Use correct input for AVD-KSV-01010 by @simar7 in #54

New Contributors

• @joebowbeer made their first contribution in #44
• @mjshastha made their first contribution in #49
• @itaysk made their first contribution in #53

Full Changelog: v0.7.0...v0.8.0

v0.7.0

What's Changed

• fix(google): do not check flow logs on proxy-only subnets by @nikpivkin in #34
• feat(aws): improve AVD-AWS-0013 rule by @nikpivkin in #35
• fix(google): update AVD-GCP-0012 rule by @nikpivkin in #36
• remove package replacements by @nikpivkin in #40
• refactor(deps): Replace trivy-iac/pkg with defsec/pkg by @simar7 in #39

Full Changelog: v0.5.0...v0.7.0

v0.6.0

What's Changed

• chore(deps): bump github.com/docker/docker from 24.0.6+incompatible to 24.0.7+incompatible by @dependabot in #31
• chore(deps): bump github.com/testcontainers/testcontainers-go from 0.25.0 to 0.26.0 by @dependabot in #32
• chore(docs): Update docs by @simar7 in #33

Full Changelog: v0.4.0...v0.6.0

v0.5.0

What's Changed

• chore(deps): bump github.com/docker/docker from 24.0.6+incompatible to 24.0.7+incompatible by @dependabot in #31
• chore(deps): bump github.com/testcontainers/testcontainers-go from 0.25.0 to 0.26.0 by @dependabot in #32
• chore(docs): Update docs by @simar7 in #33

Full Changelog: v0.4.0...v0.5.0

v0.4.0

What's Changed

• refactor: remove rego and embed packages by @nikpivkin in #25
• check public access on RDS cluster instances by @nikpivkin in #27
• chore(rules): dedupe AVD-AWS-0180 by @simar7 in #26
• fix(rule): restate the AVD-AWS-0078 rule by @nikpivkin in #29

Full Changelog: v0.3.0...v0.4.0