v1.4.0

IMPROVEMENTS:

• Unified policies metadata and new console output #208

BUG FIXES:

• Policy recommendations not present in SCC finding summary #206

v1.3.4

IMPROVEMENTS:

• Upgraded all direct and transitive dependencies

v1.3.3

FEATURES:

• Krew based installation #105

NEW POLICIES:

• GKE intranode visibility #196
• Control plane user basic authentication #197
• Control plane user certificate authentication #197
• Customer-Managed Encryption Keys for persistent disks #197
• Enable Security Posture dashboard #197
• Enable Workload vulnerability scanning #197

IMPROVEMENTS:

• Upgraded direct and indirect dependencies #195
• Adjusted all policies to GKE CIS version 1.4 benchmark #197
• Added Regal for linting Rego #194

BUG FIXES:

• Policy node_pool_use_cos should not fail on windows node pools #198

v1.3.2

IMPROVEMENTS:

• Upgraded direct and indirect dependencies #192
• New layout of generated policy documentation #191

BUG FIXES:

• Added anchors to cluster asset regex for security #190

v1.3.1

IMPROVEMENTS:

• Upgraded Go to 1.20
• Upgraded all direct and indirect dependencies

BUG FIXES:

• Upgraded CIRCL indirect dependency to v1.3.3 to fix security issues with error-handling
  on rand readers (CVE-2023-1732)

v1.3.0

FEATURES:

• GKE Scalability checks based on metrics from kube-state-metrics #179
• Introduced external URI and recommendations to the policy model and outputs #131,
  #141

IMPROVEMENTS:

• Introduced modularized inputs concept #127
• Added PromQL integration with a Cloud Monitoring and self hosted Prometheus for metrics ingestion #132,
  #178
• Security Command Center output performance improvements #151
• Logs from logger can be stored in a files and in JSON format #155
• Adding -json flag to output results to stdout in JSON format #147

BUG FIXES:

• Fixed variable types in Terraform code #150

v1.2.2

IMPROVEMENTS:

• Add support for JSON output to stdout #129

v1.2.1

IMPROVEMENTS:

• Improved efficiency of K8S resources fetching #107
• Updated policy docs generator #109

BUG FIXES:

• Tool should not fail on a discovered cluster that does not exist #113
• Failed cluster discovery was not returning an error #104

v1.2.0

FEATURES:

• Security Command Center output #100

IMPROVEMENTS:

• Cluster discovery triggered from CLI #92
• New console output, cluster evaluations are now policy oriented #90
• Tool can generate markdown documentation from policies #86

BUG FIXES:

• Cluster discovery skipped zonal clusters due to name pattern mismatch#91

v1.1.0

FEATURES:

• Introduced check commands and multiple packages handling #89
• Use of K8S resources data in REGO policies #61
• Policy filtering logic with policy names and groups #69