Thanks to visit codestin.com
Credit goes to github.com

Skip to content

release/5.10 #806

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 392 commits into from
Oct 1, 2020
Merged

release/5.10 #806

merged 392 commits into from
Oct 1, 2020

Conversation

@x4v13r64
Copy link
Collaborator

@x4v13r64 x4v13r64 commented Jul 2, 2020 •
edited
Loading

Changes:

  • Core
    • Moved unit tests from nose to pytest & improved unit test coverage
    • Migrated formatting from the 2.7+ versions to more native 3.x styles
    • Bug fixes and improved error handling
  • AWS
    • Created a ruleset for AWS CIS version 1.2 (https://www.cisecurity.org/benchmark/amazon_web_services/)
      • Can be run with the --ruleset cis-1.2.0.json parameter
      • This included the addition of 23 new rules, most of which where added to the default ruleset
    • Added support for
      • CloudWatch Metric Filters
      • DynamoDB
      • VPC Peering Connections & Flow Logs (Subnet & VPC)
    • Improved the report and processing for AWS resources
  • Azure
    • Improved support for App Services web apps, including 5 new rules
    • Improved NSG implementation, decreasing the report size by multiple orders of magnitude
    • Added Azure Tags and Resource Groups to all resources
  • GCP
    • Added support for GKE, including 19 new rules
    • Improved reporting for Compute Engine instances, networks, subnetworks and firewall rules
    • Implemented exponential backoff to handle API quotas

Breaking change: support for Python 3.5 has been removed.

Release pre-requisites:

  • Test and update AWS minimal policy
  • Update AWS IPs

ramimac and others added 25 commits June 21, 2020 16:31
@ramimac
fix paths instance, subnets
4059b58
@tkeech1
Added unit tests for get_report_name and authenticate
b46666f
@tkeech1
Updated based on latest in develop branch
4b7c1d1
@x4v13r64
Merge remote-tracking branch 'origin/feature/pyupgrade' into release/…
87fa46b 
…5.10
@x4v13r64
Update version
5c581e9
@ramimac
conditional SG inclusion
abe3294
@JJmako
Removed IAM test class (now we use Boto3)
b5064fb
@JJmako
Added console tests
5a5d52d
@JJmako
Added fs tests
c294321
@x4v13r64
Get owner ID from raw resource
4918020
@x4v13r64
Merge branch 'release/5.10' into feature/511-ARN-standard-key
c9c9882 
# Conflicts:
#	ScoutSuite/providers/aws/resources/ec2/ami.py
@x4v13r64
Merge pull request #733 from nccgroup/feature/511-ARN-standard-key
cef988d 
Feature/AWS Standard ARN Keys
@x4v13r64
Merge pull request #774 from nccgroup/feature/ec2-instance-profile
04f0a44 
EC2: add instance-profile-arn listing to EC2 Instances
@x4v13r64
Tweak partial
6da5365
@x4v13r64
Merge branch 'release/5.10' into enhancement/azure-support-tags-res_g…
c854336 
…roups

# Conflicts:
#	ScoutSuite/providers/aws/resources/ec2/ami.py
@x4v13r64
Merge branch 'release/5.10' into enhancement/azure-support-tags-res_g…
26c2c5f 
…roups

# Conflicts:
#	ScoutSuite/output/data/html/partials/aws/services.rds.regions.id.vpcs.id.instances.html
@x4v13r64
Fix partial
dc0ebcc
@x4v13r64
Merge pull request #789 from nccgroup/enhancement/azure-support-tags-…
77f7a37 
…res_groups

Azure Support Tags and Resource Groups
@x4v13r64
Remove duplicate reference
1d24588
@x4v13r64
Merge branch 'release/5.10' of github.com:nccgroup/ScoutSuite into re…
3390222 
…lease/5.10

� Conflicts:
�	ScoutSuite/output/data/html/partials/aws/services.rds.regions.id.vpcs.id.instances.html
@x4v13r64
Remove duplicate reference
46277da
@JJmako
Fixing files path
e41891d
@JJmako
Fixing file path
7221a78
@x4v13r64
Merge branches 'master' and 'release/5.10' of github.com:nccgroup/Sco…
b2f1adb 
…utSuite into develop
@x4v13r64
Merge pull request #783 from nccgroup/feature/pytest
fde9d71 
switch from nose to pytest + GitHub Actions
x4v13r64 and others added 26 commits September 24, 2020 13:43
@x4v13r64
Add throttling detection for GCP
9b815c6
@x4v13r64
Add user agent setting into this method too
b9a1d94
@x4v13r64
Reformat code
6d58c9f
@x4v13r64
Merge pull request #875 from nccgroup/bugfix/gcp-usage-quotas
9a8f1d2 
Bugfix/Handle GCP API Quotas
@x4v13r64
Merge pull request #874 from nccgroup/enhancement/provider-user-agents
b5ca0dd 
Enhancement/Add ScoutSuite user agent
@x4v13r64
Fix button positioning
b763d28
@x4v13r64
Merge branch 'develop' into feature/438_export_finding_summary
82cf869
@x4v13r64
Clean code
78ae4af
@x4v13r64
Merge pull request #860 from nccgroup/feature/438_export_finding_summary
ea7ce31 
Added export CSV button
@x4v13r64
Upgrade CLI core version
fa9d98c
@x4v13r64
Update AWS IPs
c010622
@x4v13r64
Format finding
53dabf5
@x4v13r64
Format code
818be5e
@x4v13r64
Format rulesets and filters
a42da41
@x4v13r64
Reformat code
47aba77
@x4v13r64
Minor changes
9057043
@x4v13r64
Reformat code
c794c79
@x4v13r64
Set correct dependency name
315e6e2
@x4v13r64
Minor changes
4f12073
@x4v13r64
Basic testing module
e2f1d31
@x4v13r64
Improve error handling
8190727
@x4v13r64
Remove duplicate header setting
31900ff
@x4v13r64
Remove debug message
c207efa
@x4v13r64
Remove debug message
fc56d42
@x4v13r64
Add missing service
a8d3c48
@x4v13r64
Handle project not configured as a workspace
577c233
@x4v13r64 x4v13r64 marked this pull request as ready for review September 29, 2020 10:48
@x4v13r64 x4v13r64 merged commit ad3b8fb into master Oct 1, 2020
@JLLeitschuh
Copy link

Why was the Dockerfile removed?

@x4v13r64
Copy link
Collaborator Author

x4v13r64 commented Oct 6, 2020

@JLLeitschuh it was replaced by #775 (see https://github.com/nccgroup/ScoutSuite/wiki/Docker-Image).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

release

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

10 participants

@x4v13r64 @JLLeitschuh @ramimac @tkeech1 @JJmako @alessandrogonzalez3 @rossja @rbdixon @Techbrunch