2024_10

Features

• feat: add trivy secrets scanning for images and filesystems by @StefanFl in #200

Chores

• chore: merge to main for release 2024_10 by @StefanFl in #202

Dependencies

• chore(deps): update golang docker tag to v1.23.2 by @renovate in #198
• chore(deps): update dependency checkov to v3.2.257 by @renovate in #197
• chore(deps): upgrades of KICS, Gitleaks, Grype, Trivy and tfsec by @StefanFl in #201

Full Changelog: v2024_09...v2024_10

2024_09

Chores:

• chore: test without docker pull for trivy by @StefanFl in #194
• chore: remove docker pull before trivy image by @StefanFl in #195
• chore: merge to main for release 2024_09 by @StefanFl in #196

Dependencies

• chore(deps): update dependency checkov to v3.2.255 by @renovate in #187
• chore(deps): update dependency semgrep to v1.90.0 by @renovate in #188
• chore(deps): update golang docker tag to v1.23.1 by @renovate in #189
• chore(deps): update python docker tag to v3.12.6 by @renovate in #191
• chore(deps): update dependency bandit to v1.7.10 by @renovate in #192
• chore(deps): updates of GitLeaks, Grype and Trivy by @StefanFl in #193

Full Changelog: v2024_08...v2024_09

2024_08

Chores:

• chore: merge to main for release 2024_08 by @StefanFl in #186

Dependencies

• chore(deps): update dependency checkov to v3.2.234 by @renovate in #180
• chore(deps): update dependency semgrep to v1.85.0 by @renovate in #181
• chore(deps): update dependency pyyaml to v6.0.2 by @renovate in #182
• chore(deps): update golang docker tag to v1.23.0 by @renovate in #183
• chore(deps): update python docker tag to v3.12.5 by @renovate in #184
• chore(deps): upgrades of Grype, Trivy and KICS by @StefanFl in #185

Full Changelog: v2024_07...v2024_08

2024_07

Chore

• chore: merge to main for release 2024_07 by @StefanFl in #179

Dependencies

• chore(deps): update dependency checkov to v3.2.194 by @renovate in #172
• chore(deps): update dependency bandit to v1.7.9 by @renovate in #174
• chore(deps): update docker/build-push-action action to v6 by @renovate in #175
• chore(deps): update dependency semgrep to v1.80.0 by @renovate in #176
• chore(deps): update golang docker tag to v1.22.5 - autoclosed by @renovate in #177
• chore: updates of gitleaks, grype, kics, trivy and tfsec by @StefanFl in #178

Full Changelog: v2024_06...v2024_07

2024_06

Chores

• chore: merge for release 2024_06 by @StefanFl in #173

Dependencies

• chore(deps): update dependency requests to v2.32.3 by @renovate in #169
• chore(deps): update python docker tag to v3.12.4 by @renovate in #170
• chore(deps): update dependency cryptolyzer to v0.12.5 by @renovate in #168
• chore(deps): update softwaresecurityproject/zap-stable docker tag to v2.15.0 by @renovate in #167
• chore(deps): update golang docker tag to v1.22.4 by @renovate in #166
• chore(deps): update dependency checkov to v3.2.129 by @renovate in #165
• chore(deps): update dependency semgrep to v1.75.0 by @renovate in #164
• chore (deps): update of Gitleaks, Grype, KICS, Trivy and TFSec by @StefanFl in #171

Full Changelog: v2024_04...v2024_06

2024_04

Fixes

• fix: add missing so_branch_name input by @dervoeti in #150
• fix: add output_path for KICS by @StefanFl in #151
• fix: set KICS output-path to workspace by @StefanFl in #162

Chores

• chore: merge to main for release 2024_04 by @StefanFl in #163

Dependencies

• chore(deps): update dependency checkov to v3.2.63 by @renovate in #148
• chore(deps): update dependency semgrep to v1.68.0 by @renovate in #149
• chore(deps): update golang docker tag to v1.22.2 by @renovate in #152
• chore(deps): update dependency bandit to v1.7.8 by @renovate in #153
• chore(deps): update dependency cryptolyzer to v0.12.3 by @renovate in #154
• chore(deps): update python docker tag to v3.12.3 by @renovate in #155
• chore(deps): update KICS, Grype and Trivy by @StefanFl in #156
• chore(deps): revert KICS back to 1.7.12 by @StefanFl in #157
• chore(deps): revert KICS back to 1.7.12 by @StefanFl in #158
• chore(deps): update dependency semgrep to v1.69.0 by @renovate in #160
• chore(deps): update dependency checkov to v3.2.74 by @renovate in #159
• chore(deps): update KICS, Grype and Trivy by @StefanFl in #161

New Contributors

• @dervoeti made their first contribution in #150

Full Changelog: v2024_02...v2024_04

2024_02

Chores

• chore: set Open Container Initiative (OCI) labels by @StefanFl in #141
• chore: merge to main for release 2024_02 by @StefanFl in #147

Dependencies

• chore(deps): update dependency checkov to v3.2.19 by @renovate in #137
• chore(deps): update dependency semgrep to v1.60.1 by @renovate in #138
• chore(deps): update golang docker tag to v1.22.0 by @renovate in #139
• chore(deps): update dependency cryptolyzer to v0.12.2 by @renovate in #140
• chore(deps): update dependency bandit to v1.7.7 by @renovate in #142
• chore(deps): update python docker tag to v3.12.2 by @renovate in #143
• chore(deps): update Gitleaks, Grype, Trivy and TFSec by @StefanFl in #144
• chore(deps): update dependency checkov to v3.2.20 by @renovate in #145
• chore(deps): update dependency semgrep to v1.61.0 by @renovate in #146

Full Changelog: v2024_01...v2024_02

2024_01

Breaking changes

The GitHub action and GitLab template for ZAP have been renamed , see https://maibornwolff.github.io/SecObserve/getting_started/upgrading/.

Fixes

• fix: revert ZAP back to 2.13.0 by @StefanFl in #126

Chores

• chore: zap rebranding (remove OWASP) by @StefanFl in #128
• chore: merge to main for release 2024_01 by @StefanFl in #136

Dependencies

• chore(deps): update dependency semgrep to v1.54.2 by @renovate in #125
• chore(deps): update dependency checkov to v3.1.42 by @renovate in #124
• chore(deps): update owasp/zap2docker-stable docker tag to v2.14.0 by @renovate in #127
• chore(deps): upgrade to Python 3.12 by @StefanFl in #131
• chore(deps): update dependency checkov to v3.1.50 by @renovate in #130
• chore(deps): update dependency semgrep to v1.55.0 by @renovate in #129
• chore (deps): upgrade grype to 0.73.5 by @StefanFl in #132
• chore(deps): update dependency checkov to v3.1.53 by @renovate in #133
• chore(deps): update dependency semgrep to v1.55.1 by @renovate in #134
• chore(deps): update Trivy to 0.48.2 by @StefanFl in #135

Full Changelog: v2023_12...v_2024_01

2023_12

Features

• feat: entrypoint for importer by @StefanFl in #114
• feat: print response in case of HTTP error by @StefanFl in #120

Chores

• chore: merge to main for release 2023_12 by @StefanFl in #123

Dependencies

• chore(deps): update dependency checkov to v3.1.20 by @renovate in #112
• chore(deps): update dependency semgrep to v1.51.0 by @renovate in #113
• chore(deps): update dependency checkov to v3.1.40 by @renovate in #115
• chore(deps): update golang docker tag to v1.21.5 by @renovate in #116
• chore(deps): update dependency semgrep to v1.54.0 by @renovate in #117
• chore(deps): update dependency bandit to v1.7.6 by @renovate in #118
• chore(deps): update dependency cryptolyzer to v0.12.1 by @renovate in #119
• chore(deps): various dependency upgrades by @StefanFl in #121
• chore(deps): update dependency semgrep to v1.54.1 by @renovate in #122

Full Changelog: v2023_11...v2023_12

2023_11

Features

• feat: IaC SAST with trivy config by @StefanFl in #104
• feat: set variable from environment by @StefanFl in #107

Fixes:

• fix: forgot trivy_config in scan_vulnerabilities.py by @StefanFl in #105

Chores

• chore: merge to main for release 2023_11 by @StefanFl in #111

Dependencies

• chore(deps): update golang docker tag to v1.21.3 by @renovate in #94
• chore(deps): update dependency checkov to v2.5.10 by @renovate in #95
• chore(deps): update dependency semgrep to v1.44.0 by @renovate in #96
• chore(deps): update owasp/zap2docker-stable docker tag to v2.14.0 by @renovate in #97
• chore(deps): update dependency cryptolyzer to v0.10.3 by @renovate in #98
• chore(deps): dependency updates in Dockerfile by @StefanFl in #99
• chore(deps): update dependency cryptolyzer to v0.11.2 by @renovate in #106
• chore(deps): update dependency semgrep to v1.50.0 by @renovate in #101
• chore(deps): update dependency checkov to v3 by @renovate in #102
• chore(deps): update golang docker tag to v1.21.4 by @renovate in #103
• chore(deps): update dependency cryptolyzer to v0.12.0 by @renovate in #108
• chore(deps): update of gitleaks, grype and kics by @StefanFl in #109
• chore(deps): revert kics to 1.7.10 by @StefanFl in #110

Full Changelog: v2023_10...v2023_11