v4.8.0 #2648

J12934 announced in Releases

J12934
Sep 6, 2024
Maintainer

Changes

This release contains the following changes 🎉. Help spread the word or leave a GitHub star if you like it 😉

⚠️ Upgrade Notes

This release contains a fix in the Custom Resource Definitions (CRDs), Helm does not update CRDs after the initial installation.
To upgrade the CRDs you can run the following script or grab the latest CRDs from the git repo at the v4.8.0 tag:

kubectl apply -f https://raw.githubusercontent.com/secureCodeBox/secureCodeBox/v4.8.0/operator/crds/cascading.securecodebox.io_cascadingrules.yaml	
kubectl apply -f https://raw.githubusercontent.com/secureCodeBox/secureCodeBox/v4.8.0/operator/crds/execution.securecodebox.io_clusterparsedefinitions.yaml	
kubectl apply -f https://raw.githubusercontent.com/secureCodeBox/secureCodeBox/v4.8.0/operator/crds/execution.securecodebox.io_clusterscancompletionhooks.yaml	
kubectl apply -f https://raw.githubusercontent.com/secureCodeBox/secureCodeBox/v4.8.0/operator/crds/execution.securecodebox.io_clusterscantypes.yaml	
kubectl apply -f https://raw.githubusercontent.com/secureCodeBox/secureCodeBox/v4.8.0/operator/crds/execution.securecodebox.io_parsedefinitions.yaml	
kubectl apply -f https://raw.githubusercontent.com/secureCodeBox/secureCodeBox/v4.8.0/operator/crds/execution.securecodebox.io_scancompletionhooks.yaml	
kubectl apply -f https://raw.githubusercontent.com/secureCodeBox/secureCodeBox/v4.8.0/operator/crds/execution.securecodebox.io_scans.yaml	
kubectl apply -f https://raw.githubusercontent.com/secureCodeBox/secureCodeBox/v4.8.0/operator/crds/execution.securecodebox.io_scantypes.yaml	
kubectl apply -f https://raw.githubusercontent.com/secureCodeBox/secureCodeBox/v4.8.0/operator/crds/execution.securecodebox.io_scheduledscans.yaml

🚀 Features

Add a optional ttlSecondsAfterFinished field to scans to cleanup finished scans Add a optional ttlSecondsAfterFinished field to scans to cleanup finished scans #2293 @Reet00 (Add a optional ttlSecondsAfterFinished field to scans to cleanup finished scans #2293 #2631)
Support setting env variables for Scans generated by the Kubernetes AutoDiscovery @J12934 (Support setting env variables for Scans generated by the Kubernetes AutoDiscovery #2628)
Add cascade CLI Command To Visualize Cascaded Scans Hierarchy @Freedisch (Add cascade CLI Command To Visualize Cascaded Scans Hierarchy #2608)
Add option to disable tls connection between the operator and the s3 endpoint @Michael-Kruggel (Add option to disable tls connection between the operator and the s3 endpoint #2637)

🚓 Security Scanner

Upgraded nuclei from v3.3.0 to v3.3.1 @secureCodeBoxBot ([SCB-Bot] Upgraded nuclei from v3.3.0 to v3.3.1 #2622)
Upgraded semgrep from 1.82.0 to 1.85.0 @secureCodeBoxBot ([SCB-Bot] Upgraded semgrep from 1.84.1 to 1.85.0 #2620, [SCB-Bot] Upgraded semgrep from 1.83.0 to 1.84.1 #2613, [SCB-Bot] Upgraded semgrep from 1.82.0 to 1.83.0 #2609)
Upgraded trivy from 0.54.0 to 0.54.1 @secureCodeBoxBot ([SCB-Bot] Upgraded trivy from 0.54.0 to 0.54.1 #2606)
Upgraded ZAP Automation Framework Version to 2.15.0 @J12934 (Update ZAP Automation Framework Version and Add it to SCB Bot #2626)

🐛 Bug Fixes

Add a custom entry script for ZAP Automation Framework to ensure that scans are compelting even when they have warning @J12934 (Add a custom entry script for ZAP Automation Framework to ensure that scans are compelting even when they have warning #2627)

📚 Documentation

Fix Minor Typo in Install Docs @J12934 (Fix Minor Typo in Install Docs #2642)
Add google summer of code blog post @Freedisch ([Documentation]: Add google summer of code blog post #2629)

📌 Dependencies

Minor dependency updates (11 pull requests). Click to expand.

Bump @types/node from 22.5.0 to 22.5.2 in the npm-version-updates group @dependabot (Bump @types/node from 22.5.0 to 22.5.2 in the npm-version-updates group #2641)
Bump the gradle-version-updates group in /hooks/persistence-defectdojo/hook with 2 updates @dependabot (Bump the gradle-version-updates group in /hooks/persistence-defectdojo/hook with 2 updates #2640)
Bump the gradle-version-updates group across 1 directory with 3 updates @dependabot (Bump the gradle-version-updates group across 1 directory with 3 updates #2633)
Bump oxsecurity/megalinter from 7 to 8 in /.github/workflows in the github-actions-version-updates group @dependabot (Bump oxsecurity/megalinter from 7 to 8 in /.github/workflows in the github-actions-version-updates group #2632)
Bump the npm-version-updates group with 2 updates @dependabot (Bump the npm-version-updates group with 2 updates #2634)
Bump micromatch from 4.0.5 to 4.0.8 in /auto-discovery/kubernetes/pull-secret-extractor/integration-test @dependabot (Bump micromatch from 4.0.5 to 4.0.8 in /auto-discovery/kubernetes/pull-secret-extractor/integration-test #2635)
Bump @types/node from 22.2.0 to 22.4.1 in the npm-version-updates group @dependabot (Bump @types/node from 22.2.0 to 22.4.1 in the npm-version-updates group #2623)
Bump the gradle-version-updates group in /hooks/persistence-defectdojo/hook with 3 updates @dependabot (Bump the gradle-version-updates group in /hooks/persistence-defectdojo/hook with 3 updates #2617)
Bump @types/node from 22.1.0 to 22.2.0 in the npm-version-updates group @dependabot (Bump @types/node from 22.1.0 to 22.2.0 in the npm-version-updates group #2616)
Bump the npm-version-updates group with 2 updates @dependabot (Bump the npm-version-updates group with 2 updates #2610)
Bump mikefarah/yq from 4.44.2 to 4.44.3 in /.github/workflows in the github-actions-version-updates group @dependabot (Bump mikefarah/yq from 4.44.2 to 4.44.3 in /.github/workflows in the github-actions-version-updates group #2611)

Distribution

Contributors

Thanks to all our contributors supporting this project 🤗
@Freedisch, @J12934, @Michael-Kruggel and @Reet00

This discussion was created from the release v4.8.0.

Replies: 0 comments

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment