2024_04

Fixes

• fix: add missing so_branch_name input by @dervoeti in #150
• fix: add output_path for KICS by @StefanFl in #151
• fix: set KICS output-path to workspace by @StefanFl in #162

Chores

• chore: merge to main for release 2024_04 by @StefanFl in #163

Dependencies

• chore(deps): update dependency checkov to v3.2.63 by @renovate in #148
• chore(deps): update dependency semgrep to v1.68.0 by @renovate in #149
• chore(deps): update golang docker tag to v1.22.2 by @renovate in #152
• chore(deps): update dependency bandit to v1.7.8 by @renovate in #153
• chore(deps): update dependency cryptolyzer to v0.12.3 by @renovate in #154
• chore(deps): update python docker tag to v3.12.3 by @renovate in #155
• chore(deps): update KICS, Grype and Trivy by @StefanFl in #156
• chore(deps): revert KICS back to 1.7.12 by @StefanFl in #157
• chore(deps): revert KICS back to 1.7.12 by @StefanFl in #158
• chore(deps): update dependency semgrep to v1.69.0 by @renovate in #160
• chore(deps): update dependency checkov to v3.2.74 by @renovate in #159
• chore(deps): update KICS, Grype and Trivy by @StefanFl in #161

New Contributors

• @dervoeti made their first contribution in #150

Full Changelog: v2024_02...v2024_04

2024_02

Chores

• chore: set Open Container Initiative (OCI) labels by @StefanFl in #141
• chore: merge to main for release 2024_02 by @StefanFl in #147

Dependencies

• chore(deps): update dependency checkov to v3.2.19 by @renovate in #137
• chore(deps): update dependency semgrep to v1.60.1 by @renovate in #138
• chore(deps): update golang docker tag to v1.22.0 by @renovate in #139
• chore(deps): update dependency cryptolyzer to v0.12.2 by @renovate in #140
• chore(deps): update dependency bandit to v1.7.7 by @renovate in #142
• chore(deps): update python docker tag to v3.12.2 by @renovate in #143
• chore(deps): update Gitleaks, Grype, Trivy and TFSec by @StefanFl in #144
• chore(deps): update dependency checkov to v3.2.20 by @renovate in #145
• chore(deps): update dependency semgrep to v1.61.0 by @renovate in #146

Full Changelog: v2024_01...v2024_02

2024_01

Breaking changes

The GitHub action and GitLab template for ZAP have been renamed , see https://maibornwolff.github.io/SecObserve/getting_started/upgrading/.

Fixes

• fix: revert ZAP back to 2.13.0 by @StefanFl in #126

Chores

• chore: zap rebranding (remove OWASP) by @StefanFl in #128
• chore: merge to main for release 2024_01 by @StefanFl in #136

Dependencies

• chore(deps): update dependency semgrep to v1.54.2 by @renovate in #125
• chore(deps): update dependency checkov to v3.1.42 by @renovate in #124
• chore(deps): update owasp/zap2docker-stable docker tag to v2.14.0 by @renovate in #127
• chore(deps): upgrade to Python 3.12 by @StefanFl in #131
• chore(deps): update dependency checkov to v3.1.50 by @renovate in #130
• chore(deps): update dependency semgrep to v1.55.0 by @renovate in #129
• chore (deps): upgrade grype to 0.73.5 by @StefanFl in #132
• chore(deps): update dependency checkov to v3.1.53 by @renovate in #133
• chore(deps): update dependency semgrep to v1.55.1 by @renovate in #134
• chore(deps): update Trivy to 0.48.2 by @StefanFl in #135

Full Changelog: v2023_12...v_2024_01

2023_12

Features

• feat: entrypoint for importer by @StefanFl in #114
• feat: print response in case of HTTP error by @StefanFl in #120

Chores

• chore: merge to main for release 2023_12 by @StefanFl in #123

Dependencies

• chore(deps): update dependency checkov to v3.1.20 by @renovate in #112
• chore(deps): update dependency semgrep to v1.51.0 by @renovate in #113
• chore(deps): update dependency checkov to v3.1.40 by @renovate in #115
• chore(deps): update golang docker tag to v1.21.5 by @renovate in #116
• chore(deps): update dependency semgrep to v1.54.0 by @renovate in #117
• chore(deps): update dependency bandit to v1.7.6 by @renovate in #118
• chore(deps): update dependency cryptolyzer to v0.12.1 by @renovate in #119
• chore(deps): various dependency upgrades by @StefanFl in #121
• chore(deps): update dependency semgrep to v1.54.1 by @renovate in #122

Full Changelog: v2023_11...v2023_12

2023_11

Features

• feat: IaC SAST with trivy config by @StefanFl in #104
• feat: set variable from environment by @StefanFl in #107

Fixes:

• fix: forgot trivy_config in scan_vulnerabilities.py by @StefanFl in #105

Chores

• chore: merge to main for release 2023_11 by @StefanFl in #111

Dependencies

• chore(deps): update golang docker tag to v1.21.3 by @renovate in #94
• chore(deps): update dependency checkov to v2.5.10 by @renovate in #95
• chore(deps): update dependency semgrep to v1.44.0 by @renovate in #96
• chore(deps): update owasp/zap2docker-stable docker tag to v2.14.0 by @renovate in #97
• chore(deps): update dependency cryptolyzer to v0.10.3 by @renovate in #98
• chore(deps): dependency updates in Dockerfile by @StefanFl in #99
• chore(deps): update dependency cryptolyzer to v0.11.2 by @renovate in #106
• chore(deps): update dependency semgrep to v1.50.0 by @renovate in #101
• chore(deps): update dependency checkov to v3 by @renovate in #102
• chore(deps): update golang docker tag to v1.21.4 by @renovate in #103
• chore(deps): update dependency cryptolyzer to v0.12.0 by @renovate in #108
• chore(deps): update of gitleaks, grype and kics by @StefanFl in #109
• chore(deps): revert kics to 1.7.10 by @StefanFl in #110

Full Changelog: v2023_10...v2023_11

2023_10

Fixes

• fix: kics utils by @StefanFl in #88
• fix: asset paths for KICS by @StefanFl in #91

Chores

• chore: merge to main for release 2023_10 by @StefanFl in #93

Dependencies

• chore(deps): update docker/build-push-action action to v5 by @renovate in #79
• chore(deps): update docker/login-action action to v3 by @renovate in #80
• chore(deps): update docker/setup-buildx-action action to v3 by @renovate in #81
• chore(deps): update docker/setup-qemu-action action to v3 by @renovate in #82
• chore(deps): update dependency cryptolyzer to v0.10.0 by @renovate in #84
• chore(deps): update dependency checkov to v2.5.3 by @renovate in #83
• chore(deps): update dependency semgrep to v1.43.0 by @renovate in #85
• chore(deps): kics, grype, trivy, tfsec by @StefanFl in #87
• chore(deps): update dependency checkov to v2.5.6 by @renovate in #89
• chore(deps): update golang docker tag to v1.21.2 by @renovate in #90
• chore(deps): update dependency cryptolyzer to v0.10.2 by @renovate in #92

Full Changelog: v2023_09...v2023_10

2023_09

First official release