Skip to content

NEWS.md

Latest commit

 

History

History
261 lines (140 loc) · 8.8 KB

NEWS.md

File metadata and controls

261 lines (140 loc) · 8.8 KB
Raw

v0.5.39.1

Features

Changes

Fixes

  • Dump: sinistral dump now loads the Terraform provider before it runs, so it no longer fails with AttributeError: 'NoneType' object has no attribute 'initialize'

Other

v0.5.39

Features

Changes

  • Dependency Update: Upgraded c7n-left to 0.3.39 (c7n 0.9.53, tfparse 0.6.22, python-hcl2 8.1.4) and bumped boto3/botocore to 1.43.103 to stay in sync with c7n's pinned versions

Fixes

  • Terraform Scanning: each.value.<attr> inside a for_each resource now resolves when the collection contains a module output reference. Previously the attribute stayed an unresolved reference marker, so policies matching on it could not see the real value (tfparse#283)
  • Terraform Scanning: References from resources to data source attributes are now tracked (tfparse#277)

Other

  • GitHub Actions: Bumped GitHub Actions dependencies (#85)
  • Dependency Update: Refreshed transitive and development dependencies to current releases

v0.5.38

Features

Changes

  • Dependency Update: Upgraded c7n-left to 0.3.38 (c7n 0.9.52) and bumped boto3/botocore to 1.43.78 to stay in sync with c7n's pinned versions

Fixes

  • Terraform Scanning: Resources inside nested modules that build a for_each collection from file("${path.module}/...") are now discovered and evaluated. The path was previously resolved relative to the module directory rather than the project root, so the file read returned null, the for_each expanded to nothing, and such resources were silently skipped (tfparse#282)

Other

  • GitHub Actions: Bumped GitHub Actions dependencies (#82, #83)
  • Dependency Update: Refreshed transitive and development dependencies to current releases

v0.5.37

Features

Changes

  • Dependency Update: Upgraded c7n-left to 0.3.37 and bumped boto3/botocore to 1.43.3 to stay in sync with c7n's pinned versions

Fixes

  • Run Command: Removed duplicate CLI option registration in the run command that emitted repeated Click warnings

Other

  • Developer Tooling: Pinned the development interpreter to Python 3.12 via .python-version (matching .tool-versions) and filtered an upstream c7n deprecation warning from test output

v0.5.36

Changes

  • Dependency Update: Upgraded c7n to 0.9.50 and c7n-left to 0.3.36 (#75)
  • Dependency Update: Bumped boto3/botocore to 1.42.59 to stay in sync with c7n's pinned versions (#75)

Other

  • GitHub Actions: Bumped GitHub Actions dependencies (#76, #77)

v0.5.35

Changes

  • Dependency Update: Upgraded all dependencies to pull in CVE fixes (#73)

Other

  • Supply Chain Security: Hardened the build and release pipeline to reduce supply-chain risk in published artifacts (#73)

v0.5.34

Changes

  • Dependency Update: Updated to c7n 0.9.48 (#68)

Fixes

  • JMESPath Error: Fixed c7n-left usage to resolve JMESPath errors (#69)

Other

  • GitHub Actions: Bumped GitHub Actions dependencies and migrated to SHA pinning over tags for improved security (#65, #66, #67, #71)

v0.5.33

Changes

  • Dependency Update: Upgraded to c7n 0.9.47 (#64)

Other

  • Build System: Migrated from poetry to uv for dependency management (#62)
  • Requirements: Added requirements.txt file for Dependabot tracking (#63)

v0.5.32

Other

  • Updated codecov-cli version (#61)
  • Cleaned up justfile, removing unused targets (#60)

v0.5.30

Changes

  • Dependency Update: Updated c7n to 0.9.44 (#56)

Other

  • Updated tools and their versions (#57)

v0.5.0

Changes

  • Dependency Update: Updated c7n-left to 0.3.28 (#52)

Fixes

  • Debug Flag: Added global debug flag to suppress traceback unless -d/--debug is specified (#54)

Other

  • Cleaned up dependency version for c7n-left (#53)

v0.4.0

Features

  • CI Environment Support: Added support for grabbing CI information from the environment (#49)

Fixes

  • Metadata Handling: Added error handling for lack of metadata (#46)

Other

  • Updated c7n-left dependency versions (#47)
  • Moved global options to CLI only (#45)

v0.3.0

Fixes

  • Dependency Pinning: Explicit pin of upstream c7n-left version (#44)

Other

  • Updated to latest sigstore action (#48)

v0.2.7

Fixes

  • Project Name Parameter: Fixed project name parameter for run command (#38)

Other

  • Updated c7n-left and other dependencies (#33)

v0.2.6

Features

  • Auto-Authentication: Added auto-auth support with project or organization credentials (#32)
  • Credential Management: Added support for revoking project and organization credentials (#30)
  • Default Policy Collections: Added support for is_default flag on policy collections (#34)
  • Critical Severity: Added support for critical severity level (#40)

Fixes

  • Backend Output: Fixed issue where sinistral backend output doesn't override run CLI output selections (#37)
  • Case-Sensitive Severity: Fixed case-sensitive severity handling (#39)
  • Severity Regex: Fixed policy severity regex (#25)

Other

  • Added Python 3.11 support to CI (#25)

v0.2.4

Features

  • Project & Organization Auth: Added project and organization authentication flow (#28)
  • Local Policy Execution: Added support for local policy execution (#7)
  • Run Command: Added run command for policy execution (#2)

Changes

Fixes

  • Scan Upload: Fixed support for scan upload with array resource type policy (#27)
  • Policy Severity: Allowed lowercase policy severity (#20)

Other

  • Improved CLI command interface (#9)
  • Updated c7n-left dependencies (#21)
  • Added client generator from OpenAPI spec (#3)

Initial Release

Features

  • SSO Login: Added SSO login support (#1)
  • Basic Commands: Initial CLI commands for Sinistral platform interaction

Other

  • Initial repository setup