Changes

This release contains the following changes 🎉. Help spread the word or leave a GitHub star if you like it 😉

⚠️ Upgrade Notes

This update adds new fields to the Custom Resource Definitions (CRDs), Helm does not update CRDs after the initial installation.
To upgrade the CRDs you can run the following script or grab the latest CRDs from the git repo at the v3.15.0 tag:

kubectl apply -f https://raw.githubusercontent.com/secureCodeBox/secureCodeBox/v3.15.0/operator/crds/cascading.securecodebox.io_cascadingrules.yaml
kubectl apply -f https://raw.githubusercontent.com/secureCodeBox/secureCodeBox/v3.15.0/operator/crds/execution.securecodebox.io_parsedefinitions.yaml
kubectl apply -f https://raw.githubusercontent.com/secureCodeBox/secureCodeBox/v3.15.0/operator/crds/execution.securecodebox.io_scancompletionhooks.yaml
kubectl apply -f https://raw.githubusercontent.com/secureCodeBox/secureCodeBox/v3.15.0/operator/crds/execution.securecodebox.io_scans.yaml
kubectl apply -f https://raw.githubusercontent.com/secureCodeBox/secureCodeBox/v3.15.0/operator/crds/execution.securecodebox.io_scantypes.yaml
kubectl apply -f https://raw.githubusercontent.com/secureCodeBox/secureCodeBox/v3.15.0/operator/crds/execution.securecodebox.io_scheduledscans.yaml

🚀 Features

• Add Resources to Scan, ParseDefinition & ScanCompletionHook CRDs @J12934 (Add Resources to Scan, ParseDefinition & ScanCompletionHook CRDs #1342)
• Added podSecurityContext to all scanTypes @rseedorff (Add securityContext for PodSecurity Configuration to all scanTypes #1330, Added podSecurityContext to all scanTypes (closes #1330) #1339)
• ZAP Advanced: Add support for additional report types @malexmave (ZAP Advanced: Add support for additional report types #1320)

🚓 Security Scanner

• Updating amass config due to recent config changes @rseedorff (Updating amass config due to recent config changes #1337)
• ZAP Advanced: Add support for additional report types @malexmave (ZAP Advanced: Add support for additional report types #1320)
• Upgraded semgrep from 0.110.0 to 0.112.1 @secureCodeBoxBot ([SCB-Bot] Upgraded semgrep from 0.110.0 to 0.111.1 #1318, [SCB-Bot] Upgraded semgrep from 0.111.1 to 0.112.1 #1348)
• Upgraded gitleaks from v8.6.1 to v8.12.0 @secureCodeBoxBot ([SCB-Bot] Upgraded gitleaks from v8.6.1 to v8.10.2 #1300, [SCB-Bot] Upgraded gitleaks from v8.10.2 to v8.11.2 #1321, [SCB-Bot] Upgraded gitleaks from v8.11.2 to v8.12.0 #1341)
• Upgraded trivy from 0.30.4 to 0.31.3 @secureCodeBoxBot ([SCB-Bot] Upgraded trivy from 0.30.4 to 0.31.3 #1326)
• Upgraded nuclei from v2.7.5 to v2.7.7 @secureCodeBoxBot ([SCB-Bot] Upgraded nuclei from v2.7.5 to v2.7.7 #1322)

⚓️ Hooks

• Added a configuration to disable the automatic dashboard import @rseedorff (Dashboard Importer Job in Elastic-Hook must be configurable #1332, Added a configuration to disable the automatic dashboard import (closes #1332) #1338)

📚 Documentation

• ADR-0012: Initial Proposal for Cluster Wide Custom Resources (e.g. ClusterScanType) @J12934 (ADR-0012: Initial Proposal for Cluster Wide Custom Resources (e.g. ClusterScanType) #1270)
• Update Juice Shop URL in documentation example scans @malexmave (Update Juice Shop URL in documentation example scans #1333)

🔧 Maintenance

• Fix create-new-scanner Make target @malexmave (Fix create-new-scanner Make target #1354)
• Improved Megalint Config and applied auto fixes @Ilyesbdlala (Improved Megalint Config and applied auto fixes #1302)
• Added a configuration to disable the automatic dashboard import (closes Dashboard Importer Job in Elastic-Hook must be configurable #1332) @rseedorff (Added a configuration to disable the automatic dashboard import (closes #1332) #1338)
• Updating amass config due to recent config changes @rseedorff (Updating amass config due to recent config changes #1337)
• Run Helm docs generation only on main branch @Ilyesbdlala (Run Helm docs generation only on main branch #1291)
• Add Megalinter output to Gitignore file @malexmave (Add Megalinter output to Gitignore file #1334)
• Added missing podSecurityContext to scanner template @rseedorff (Added missing podSecurityContext to scanner template #1358)

📌 Dependencies

• Upgrade ws from 8.8.0 to 8.8.1 @snyk-bot ([Snyk] Upgrade ws from 8.8.0 to 8.8.1 #1324)
• Upgrade @kubernetes/client-node from 0.16.3 to 0.17.0 @snyk-bot ([Snyk] Upgrade @kubernetes/client-node from 0.16.3 to 0.17.0 #1325, [Snyk] Upgrade @kubernetes/client-node from 0.16.3 to 0.17.0 #1301)
• Upgrade ws from 8.8.0 to 8.8.1 @snyk-bot ([Snyk] Upgrade ws from 8.8.0 to 8.8.1 #1298)
• Upgrade jsonpointer from 5.0.0 to 5.0.1 @snyk-bot ([Snyk] Upgrade jsonpointer from 5.0.0 to 5.0.1 #1296)

Distribution

Contributors

Thanks to all our contributors supporting this project 🤗
@Ilyesbdlala, @J12934, @Weltraumschaf, @malexmave and @rseedorff