knqyf263
51cefc4221
test(flag): enhance TestCustomFlagGroups to include environment variable support
...
- Added a test case to verify the behavior of the `TRIVY_FOO` environment variable in the `TestCustomFlagGroups` function.
- Ensured that the flag system correctly retrieves values from both environment variables and custom flags.
- Improved test coverage for the flag handling functionality.
2025-04-14 13:08:21 +04:00
knqyf263
84eb62340e
refactor(extension): add custom flag groups for commands
...
- Introduced a new extension system to support custom CLI flag groups for various commands.
- Updated command definitions to utilize the new `CustomFlagGroups` method, enhancing modularity and flexibility.
- Added tests to validate the behavior of custom flag groups and ensure proper integration with existing command structures.
- Improved overall flag handling by allowing extensions to define their own flag groups, facilitating future enhancements.
2025-04-11 15:21:09 +04:00
Teppei Fukuda
346a6b794d
ci: improve PR title validation workflow ( #8720 )
2025-04-11 09:43:02 +00:00
Teppei Fukuda
4a38d0121b
refactor(flag): improve flag system architecture and extensibility ( #8718 )
...
Co-authored-by: DmitriyLewen <91113035+DmitriyLewen@users.noreply.github.com >
2025-04-11 08:47:43 +00:00
Steven Masley
e25de25262
fix(terraform): evaluateStep to correctly set EvalContext for multiple instances of blocks ( #8555 )
...
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io >
Co-authored-by: nikpivkin <nikita.pivkin@smartforce.io >
2025-04-10 05:21:19 +00:00
DmitriyLewen
4b84dabd15
refactor: migrate from github.com/aquasecurity/jfather to github.com/go-json-experiment/json ( #8591 )
2025-04-09 12:22:57 +00:00
Nikita Pivkin
9792611b36
feat(misconf): support auto_provisioning_defaults in google_container_cluster ( #8705 )
...
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io >
2025-04-08 21:13:46 +00:00
DmitriyLewen
13608eac24
ci: use github.event.pull_request.user.login for release PR check workflow ( #8702 )
2025-04-08 11:49:52 +00:00
Teppei Fukuda
a0dc3b688e
refactor: add hook interface for extended functionality ( #8585 )
2025-04-08 11:49:16 +00:00
Nikita Pivkin
9dcd06fda7
fix(misconf): add missing variable as unknown ( #8683 )
...
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io >
2025-04-08 06:33:33 +00:00
simar7
12cf218032
docs: Update maintainer docs ( #8674 )
2025-04-08 06:33:04 +00:00
Seth Gibelyou
86138329cb
ci(vuln): reduce github action script injection attack risk ( #8610 )
...
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io >
2025-04-08 05:09:40 +00:00
Yugandhar
a032ad696a
fix(secret): ignore .dist-info directories during secret scanning ( #8646 )
...
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io >
2025-04-07 11:31:37 +00:00
Tamir Kiviti
36f8d0fd67
fix(server): fix redis key when trying to delete blob ( #8649 )
2025-04-07 11:18:35 +00:00
dependabot[bot]
f1329c7ea1
chore(deps): bump the testcontainers group with 2 updates ( #8650 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-07 07:55:40 +00:00
DmitriyLewen
c5e03f7d8f
test: use aquasecurity repository for test images ( #8677 )
2025-04-07 06:32:53 +00:00
dependabot[bot]
a8a7ddb127
chore(deps): bump the aws group across 1 directory with 5 updates ( #8652 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-07 06:18:33 +00:00
afdesk
bff0e9b034
fix(k8s): skip passed misconfigs for the summary report ( #8684 )
...
Co-authored-by: Simar <simar@linux.com >
2025-04-05 06:48:10 +00:00
afdesk
cc4771158b
fix(k8s): correct compare artifact versions ( #8682 )
2025-04-04 19:13:55 +00:00
Maria Ines Parnisari
b9b27fce42
chore: update Docker lib ( #8681 )
2025-04-04 17:55:17 +00:00
Nikita Pivkin
bfa99d26fa
refactor(misconf): remove unused terraform attribute methods ( #8657 )
...
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io >
2025-04-03 00:25:13 +00:00
Nikita Pivkin
890a360244
feat(misconf): add option to pass Rego scanner to IaC scanner ( #8369 )
...
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io >
Co-authored-by: simar7 <1254783+simar7@users.noreply.github.com >
Co-authored-by: Simar <simar@linux.com >
2025-04-02 22:20:23 +00:00
Drew Hudson-Viles
ad1c37984e
chore: typo fix to replace rego with repo on the RepoFlagGroup options error output ( #8643 )
2025-03-31 05:19:38 +00:00
simar7
dd28d4e238
docs: Add info about helm charts release ( #8640 )
2025-03-29 04:53:46 +00:00
Aqua Security automated builds
1d42969518
ci(helm): bump Trivy version to 0.61.0 for Trivy Helm Chart 0.13.0 ( #8638 )
...
Co-authored-by: GitHub Actions <actions@github.com >
2025-03-28 07:47:51 +00:00
Aqua Security automated builds
7f41822d4f
release: v0.61.0 [main] ( #8507 )
v0.61.0
2025-03-28 06:30:43 +00:00
simar7
5b7704d1d0
fix(misconf): Improve logging for unsupported checks ( #8634 )
2025-03-28 05:20:57 +00:00
afdesk
1bf0117f77
feat(k8s): add support for controllers ( #8614 )
2025-03-27 20:58:14 +00:00
DmitriyLewen
346f5b3553
fix(debian): don't include empty licenses for dpkgs ( #8623 )
2025-03-27 20:50:59 +00:00
simar7
ad58cf4457
fix(misconf): Check values wholly prior to evalution ( #8604 )
2025-03-27 07:19:31 +00:00
simar7
c76764ef5d
chore(deps): Bump trivy-checks ( #8619 )
2025-03-27 07:11:45 +00:00
DmitriyLewen
dbb6f28871
fix(k8s): show report for --report all ( #8613 )
2025-03-27 06:01:50 +00:00
dependabot[bot]
548a340075
chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 ( #8597 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-27 02:03:24 +00:00
Teppei Fukuda
c80310d769
refactor: rename scanner to service ( #8584 )
2025-03-23 23:47:03 +00:00
Nikita Pivkin
de7eb13938
fix(misconf): do not skip loading documents from subdirectories ( #8526 )
...
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io >
2025-03-22 06:01:04 +00:00
Nikita Pivkin
f07030daf2
refactor(misconf): get a block or attribute without calling HasChild ( #8586 )
...
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io >
2025-03-22 02:48:34 +00:00
Nikita Pivkin
ba77dbe5f9
fix(misconf): identify the chart file exactly by name ( #8590 )
...
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io >
2025-03-22 01:07:41 +00:00
Nikita Pivkin
7bafdcaaf9
test: use table-driven tests in Helm scanner tests ( #8592 )
...
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io >
Co-authored-by: Simar <simar@linux.com >
2025-03-22 00:49:36 +00:00
simar7
68b164ddf4
refactor(misconf): Simplify misconfig checks bundle parsing ( #8533 )
2025-03-21 22:38:26 +00:00
dependabot[bot]
8e1019d82c
chore(deps): bump the common group across 1 directory with 10 updates ( #8566 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-20 13:58:42 +00:00
Nikita Pivkin
400a79c2c6
fix(misconf): do not use cty.NilVal for non-nil values ( #8567 )
...
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io >
2025-03-19 19:19:39 +00:00
Teppei Fukuda
fe400ea55f
docs(cli): improve flag value display format ( #8560 )
...
Signed-off-by: knqyf263 <knqyf263@gmail.com >
2025-03-18 09:30:53 +00:00
Nikita Pivkin
1f05b4545d
fix(misconf): set default values for AWS::EKS::Cluster.ResourcesVpcConfig ( #8548 )
...
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io >
2025-03-17 20:13:42 +00:00
Itay Shakury
6973da6f5e
docs: remove slack ( #8565 )
2025-03-17 12:43:59 +00:00
DmitriyLewen
8b88238f07
fix: use --file-patterns flag for all post analyzers ( #7365 )
2025-03-17 10:12:10 +00:00
Konstantin Gukov
e8c32dedaa
docs(python): Mention pip-compile ( #8484 )
...
Co-authored-by: Teppei Fukuda <knqyf263@gmail.com >
2025-03-17 02:45:01 +00:00
Nikita Pivkin
9913465a53
feat(misconf): adapt aws_opensearch_domain ( #8550 )
...
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io >
2025-03-15 05:49:04 +00:00
Nikita Pivkin
0d9865f48f
feat(misconf): adapt AWS::EC2::VPC ( #8534 )
...
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io >
2025-03-14 04:52:05 +00:00
Teppei Fukuda
9bedd989a9
docs: fix a broken link ( #8546 )
2025-03-13 12:07:11 +00:00
DmitriyLewen
c22830766e
fix(fs): check postAnalyzers for StaticPaths ( #8543 )
2025-03-13 11:36:24 +00:00