v4.1.0

This release contains the following changes 🎉.
Help spread the word or leave a GitHub star if you like it 😉

🚀 Features

• Add trivy-k8s scan support (closes Add trivy k8s scan support #1411) @fbelter-iteratec (Add trivy-k8s scan support (closes #1411) #1694)
• Added a concurrency policy option for scheduledScan CRD @Ilyesbdlala (Added a concurrency policy option for scheduledScan CRD #1749)
• Added a crontab configuration option to scheduledScans @Ilyesbdlala (Added a crontab configuration option to scheduledScans #1722)
• Allow to configure env and volumes in hooks @Zero3141 (Allow to configure env and volumes in hooks #1881)
• Allowed Specifying Labels for Pods of Scans @Ilyesbdlala (Allowed Specifying Labels for Pods of Scans #1899)
• DefectDojo Hook: Allow setting minimum severity on Import (closes DefectDojo Hook: Allow setting minimum severity on Import #1700 ) @ManuelNeuer ( DefectDojo Hook: Allow setting minimum severity on Import (closes #1700 ) #1775)
• Enable client/server mode for trivy by default to cache the vulnerability DB (closes Trivy: Build rule download cron similar to nuclei #911) @o1oo11oo (Enable client/server mode for trivy by default to cache the vulnerability DB (closes #911) #1760)
• Hardcode debian version in screenshooter Dockerfile @Zero3141 (Hardcode debian version in screenshooter Dockerfile #1829)
• Remove deprecated userId attribute for DefectDojo Hook @Zero3141 (Remove deprecated userId attribute #1861)
• Update JuiceShop Helm chart to use modern Ingress resource @maze88 (Update Juice-Shop Helm chart to use modern Ingress resource #1882)

🚓 Security Scanner

• Upgraded amass from v3.23.2 to v4.2.0 @Ilyesbdlala, @secureCodeBoxBot ([SCB-Bot] Upgraded amass from v3.23.2 to v3.23.3 #1773, [SCB-Bot] Upgraded amass from v3.23.3 to v4.0.2 #1821, [SCB-Bot] Upgraded amass from v4.0.2 to v4.0.3 #1825)
• Upgraded doggo from v0.5.5 to v0.5.7 @secureCodeBoxBot ([SCB-Bot] Upgraded doggo from v0.5.5 to v0.5.6 #1824, [SCB-Bot] Upgraded doggo from v0.5.6 to v0.5.7 #1955)
• Upgraded ffuf from v2.0.0 to v2.1.0 @secureCodeBoxBot ([SCB-Bot] Upgraded ffuf from v2.0.0 to v2.1.0 #1968)
• Upgraded gitleaks from v8.16.3 to v8.18.0 @secureCodeBoxBot ([SCB-Bot] Upgraded gitleaks from v8.16.3 to v8.16.4 #1753, [SCB-Bot] Upgraded gitleaks from v8.16.4 to v8.17.0 #1768, [SCB-Bot] Upgraded gitleaks from v8.17.0 to v8.18.0 #1873)
• Upgraded nmap from 7.92-r2 to 7.93-r1 @Zero3141 (Upgrading nmap from 7.92-r2 to 7.93-r1 #1960)
• Upgraded nuclei from v2.9.6 to v2.9.14 @secureCodeBoxBot ([SCB-Bot] Upgraded nuclei from v2.9.10 to v2.9.11 #1865, [SCB-Bot] Upgraded nuclei from v2.9.11 to v2.9.12 #1872, [SCB-Bot] Upgraded nuclei from v2.9.12 to v2.9.13 #1880, [SCB-Bot] Upgraded nuclei from v2.9.13 to v2.9.14 #1898, [SCB-Bot] Upgraded nuclei from v2.9.6 to v2.9.7 #1778, [SCB-Bot] Upgraded nuclei from v2.9.7 to v2.9.8 #1788, [SCB-Bot] Upgraded nuclei from v2.9.8 to v2.9.9 #1823, [SCB-Bot] Upgraded nuclei from v2.9.9 to v2.9.10 #1843)
• Upgraded semgrep from 1.24.1 to 1.41.0 @secureCodeBoxBot ([SCB-Bot] Upgraded semgrep from 1.24.1 to 1.26.0 #1761, [SCB-Bot] Upgraded semgrep from 1.26.0 to 1.27.0 #1764, [SCB-Bot] Upgraded semgrep from 1.27.0 to 1.29.0 #1777, [SCB-Bot] Upgraded semgrep from 1.29.0 to 1.30.0 #1784, [SCB-Bot] Upgraded semgrep from 1.30.0 to 1.31.2 #1794, [SCB-Bot] Upgraded semgrep from 1.31.2 to 1.33.2 #1822, [SCB-Bot] Upgraded semgrep from 1.33.2 to 1.34.0 #1840, [SCB-Bot] Upgraded semgrep from 1.34.0 to 1.34.1 #1844, [SCB-Bot] Upgraded semgrep from 1.34.1 to 1.36.0 #1863, [SCB-Bot] Upgraded semgrep from 1.36.0 to 1.37.0 #1879, [SCB-Bot] Upgraded semgrep from 1.37.0 to 1.38.3 #1890, [SCB-Bot] Upgraded semgrep from 1.38.3 to 1.39.0 #1940, [SCB-Bot] Upgraded semgrep from 1.39.0 to 1.40.0 #1962)
• Upgraded ssh-audit from v2.9.0 to v3.0.0 @secureCodeBoxBot ([SCB-Bot] Upgraded ssh-audit from v2.9.0 to v3.0.0 #1939)
• Upgraded sslyze from 5.1.3 to 5.2.0 @secureCodeBoxBot ([SCB-Bot] Upgraded sslyze from 5.1.3 to 5.2.0 #1983)
• Upgraded trivy from 0.42.0 to 0.45.1 @secureCodeBoxBot ([SCB-Bot] Upgraded trivy from 0.42.0 to 0.42.1 #1757, [SCB-Bot] Upgraded trivy from 0.42.1 to 0.43.0 #1785, [SCB-Bot] Upgraded trivy from 0.43.0 to 0.43.1 #1793, [SCB-Bot] Upgraded trivy from 0.43.1 to 0.44.0 #1846, [SCB-Bot] Upgraded trivy from 0.44.0 to 0.44.1 #1859, [SCB-Bot] Upgraded trivy from 0.44.1 to 0.45.0 #1888, [SCB-Bot] Upgraded trivy from 0.45.0 to 0.45.1 #1966)
• Upgraded typo3scan from v1.1.2 to v1.1.3 @secureCodeBoxBot ([SCB-Bot] Upgraded typo3scan from v1.1.2 to v1.1.3 #1771)
• Upgraded wpscan from v3.8.22 to v3.8.24 @secureCodeBoxBot ([SCB-Bot] Upgraded wpscan from v3.8.22 to v3.8.24 #1762)
• Upgraded zap from 2.12.0 to 2.13.0 @secureCodeBoxBot ([SCB-Bot] Upgraded zap from 2.12.0 to 2.13.0 #1810)
• Upgraded zap-advanced from 2.12.0 to 2.13.0 @secureCodeBoxBot ([SCB-Bot] Upgraded zap-advanced from 2.12.0 to 2.13.0 #1809)

🐛 Bug Fixes

• Added sslyze parser check for successful ASN1 certificate parsing @Ilyesbdlala (Added sslyze parser check for successful ASN1 certificate parsing #1856)
• Fix typo in trivy-rbac RoleBinding name @o1oo11oo (Fix typo in trivy-rbac RoleBinding name #1765)
• Fixed Bug ErrImagePull in SSH-audit parser @Reet00 (Fixed Bug ErrImagePull in SSH-audit parser #1801)
• Implemented the failIfFoundUrlsLessThan and warnIfFoundUrlsLessthan settings in ZAP Advanced @Ilyesbdlala (Implemented the failIfFoundUrlsLessThan and warnIfFoundUrlsLessthan settings in ZAP Advanced #1791)

🧪 Test

• Remove skipped test against securecodebox.io @Zero3141 (Remove skipped test against securecodebox.io #1875)
• Fixed the kind image used in zap-advanced tests @Ilyesbdlala (Fixed the kind image used in zap-advanced tests #1792)
• Fixes the tests of Trivy and adds a check for empty scanResults @Ilyesbdlala (Fixes the tests of Trivy and adds a check for empty scanResults #1787)

📚 Documentation

• Add Heiko Kiesel to contributors @Zero3141 (Add Heiko Kiesel to contributors #1795)
• Add logo to helm docs and README @Zero3141 (Add logo to helm docs and README #1866)
• Add recurring documentation issue @Zero3141 (Add recurring documentation issue #1956)
• Capitalize "Kubernetes" in scanner documentations @Zero3141 (Capitalize "Kubernetes" in scanner documentations #1831)
• Clarify documentation that scans and hooks/scanners must be deleted before the operator @Zero3141 (Clarify documentation that scans and hooks/scanners must be deleted before the operator #1900)
• Clean up docs dir as prerequiste for monorepo @Weltraumschaf (Clean up docs dir as prerequiste for monorepo #1892)
• Fix documentation findings @Zero3141 (Fix documentation findings #1878)
• Fix screenshooter documentation @Zero3141 (Fix screenshooter documentation #1827)
• Fixed markdown typo for heading in ZAP documentation @sofi0071 (fixed markdown typo for heading in ZAP documentation #1819)
• Improve issue templates @Zero3141 (Improve issue templates #1874)
• Improve Kubeaudit documentation @Zero3141 (Improve Kubeaudit documentation #1867)
• Improve ncrack documentation @Zero3141 (Improve ncrack documentation #1836)
• Improve Nikto examples @Zero3141 (Improve Nikto examples #1868)
• Improve SSH examples @Zero3141 (Improve SSH examples #1869)
• Improve SSLyze examples @Zero3141 (Improve SSLyze examples #1870)
• Improve wpscan documentation @Zero3141 (Improve wpscan documentation #1871)
• Link ffuf GitHub repo in README @Zero3141 (Link ffuf GitHub repo in README #1876)
• Move documentation to main repository @Zero3141 (Move documentation to main repository #1893)
• Publish SBOM blogpost part two @o1oo11oo (Publish SBOM blogpost part two #1954)
• Replace sponsor image paths to documentation path @Zero3141 (#942 Replace sponsor image paths to documentation path #1950)
• Update filename and image of second SBOM blogpost @o1oo11oo (Update filename and image of second SBOM blogpost #1935)
• Warn about rate limits in trivy-k8s docs @o1oo11oo (Warn about rate limits in trivy-k8s docs #1855)

🔧 Maintenance

• Add note about resource limits for persistence-defectdojo hook @Ilyesbdlala (Add note about resource limits for persistence-defectdojo hook #1889)
• Added warning about amass enum not exiting correctly @Ilyesbdlala ( Added warning about amass enum not exiting correctly  #1895)
• Changed SCB-Bot to check all PRs for exisiting upgrade PRs @Ilyesbdlala ( Changed SCB-Bot to check all PRs for exisiting upgrade PRs #1832)
• Explicitly install the tools kubectl/helm/kind in the CI @Ilyesbdlala (Explicitly install the tools kubectl/helm/kind in the CI #1842)
• Fix failing build of DefectDojo persistance hook @Weltraumschaf (Fix failing build of DefectDojo persistance hook #1820)
• Improve issue templates @Zero3141 (Improve issue templates #1874)
• Move dependabot configuration file to correct location @Zero3141 (Move dependabot configuration file to correct location #1937)
• Refresh Helm Docs Update CI @Zero3141 (Refresh Helm Docs Update CI #1862)
• Remove GitHub Actions warnings @Zero3141 (Remove GitHub Actions warnings #1951)
• Remove skipped test against securecodebox.io @Zero3141 (Remove skipped test against securecodebox.io #1875)
• Remove unused language versions (fixes Language versions in Release Build workflow are unused #1945) @o1oo11oo (Remove unused language versions (fixes #1945) #1946)
• Removed Jest/npm/node Versions from Makefiles @Ilyesbdlala (Removed Jest/npm/node Versions from Makefiles  #1789)
• Rename leftover lurcher to lurker @o1oo11oo (Rename leftover lurcher to lurker #1897)
• Rename leftover lurcher to lurker @o1oo11oo (Rename leftover lurcher to lurker #1897)
• Updated Elastic Stack from 7.9.2 to 7.17.3 @Ilyesbdlala (Updated Elastic Stack from 7.9.2 to 7.17.3 #1816)
• Updated megalinter and gpg import actions to avoid the use of save-state and set-output @Ilyesbdlala (Updated megalinter and gpg import actions to avoid the use of save-state and set-output  #1802)
• Updated the templates/rbac of the operator @Ilyesbdlala (Updated the templates/rbac of the operator #1811)
• Upgrade node to latest LTS in templates @o1oo11oo (Upgrade node to latest LTS in templates #1896)
• Upgrade node version to current LTS @o1oo11oo (Upgrade node version to current LTS #1853)
• Upgrade CI base images to latest LTS version i.e 22.04 @Ilyesbdlala ( Upgraded CI base images to latest LTS version i.e 22.04 #1841)
• Used pinned versions instead of latest for all ci images @Ilyesbdlala (Used pinned versions instead of latest for all ci images #1948)

📌 Dependencies

• Upgrade node version to current LTS @o1oo11oo (Upgrade node version to current LTS #1853)
• Upgrade node to latest LTS in templates @o1oo11oo (Upgrade node to latest LTS in templates #1896)
• Upgrade to latest version of DefectDojo Client lib @Weltraumschaf (Use latest version of DefectDojo Client lib #1857)
• Upgrade eslint from 8.47.0 to 8.49.0 in /documentation @dependabot (Bump eslint from 8.47.0 to 8.49.0 in /documentation #1941)
• Upgrade eslint-plugin-prettier from 3.4.1 to 5.0.0 in /documentation @dependabot (Bump eslint-plugin-prettier from 3.4.1 to 5.0.0 in /documentation #1942)
• Upgrade gopkg.in/yaml.v3 from 3.0.0-20220512140231-539c8e751b99 to 3.0.0 @dependabot (Bump gopkg.in/yaml.v3 from 3.0.0-20220512140231-539c8e751b99 to 3.0.0 in /operator #1885, Bump gopkg.in/yaml.v3 from 3.0.0-20210107192922-496545a6307b to 3.0.0 in /lurker #1883, Bump gopkg.in/yaml.v3 from 3.0.0-20210107192922-496545a6307b to 3.0.0 in /auto-discovery/kubernetes #1884)
• Upgrade certifi from 2022.12.7 to 2023.7.22 in /auto-discovery/kubernetes/pull-secret-extractor @dependabot (Bump certifi from 2022.12.7 to 2023.7.22 in /auto-discovery/kubernetes/pull-secret-extractor #1834)
• Upgrade word-wrap from 1.2.3 to 1.2.4 @dependabot (Bump word-wrap from 1.2.3 to 1.2.4 #1817)
• Upgrade semver from 6.3.0 to 6.3.1 @Zero3141 & @dependabot (Bump semver from 6.3.0 to 6.3.1 #1808, Bump semver from 6.3.0 to 6.3.1 in /scanners #1796, Bump semver from 6.3.0 to 6.3.1 in /hooks/persistence-azure-monitor/hook #1807)
• Upgrade ts-jest from 29.0.5 to 29.1.0 @rseedorff ([Snyk] Upgrade ts-jest from 29.0.5 to 29.1.0 #1782)

Distribution

Contributors

Thanks to all our contributors supporting this project 🤗
@Ilyesbdlala, @J12934, @ManuelNeuer, @Reet00, @Weltraumschaf, @Zero3141, @fbelter-iteratec, @maze88, @o1oo11oo, @rseedorff, @secureCodeBoxBot, @snyk-bot, @sofi0071, Frank Belter and Vanessa Hermann