Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Tags: jcoffi/regula

Tags

v2.6.1

Toggle v2.6.1's commit message
* `regula version` output

v2.6.0

Toggle v2.6.0's commit message
* New TF rules: FG_R00354, FG_R00355, FG_R00357, FG_R00359, FG_R00375…

…, FG_R00451, FG_R00452, FG_R00468

* SARIF output format (fugue#284)
* Resource tags to JSON report (fugue#317)
* Support for valueless tags (fugue#319)
* `input_resource_types` set to `fugue` library (fugue#322)
* Support for waivers defined in Fugue SaaS when using `--sync` (fugue#316)

* Commented-out defaults from generated config file (fugue#320)

* Package name to match Go mod conventions for package versioning (fugue#296) (fugue#312)
* Nil panic in Cloudformation detector (fugue#313)
* Bug in FG_R00068 when KMS key resource not defined in same module (fugue#299)

* Upgrade OPA from 0.34.1 to 0.37.0 (fugue#308)
* Upgrade Alpine version in docker image (fugue#323)

* Support for `count` attribute in HCL (fugue#321)

v2.5.0

Toggle v2.5.0's commit message
* Rule package names to match what's in the Fugue platform offering (f…

…ugue#300)

* Empty `opa.runtime()` result (fugue#301)
* Null `terraform.workspace` value (fugue#305)
* Panic from null count in some Terraform configurations (fugue#307)

* Table output by making the result and severity columns more visible (fugue#298 authored by @fafg)

v2.4.0

Toggle v2.4.0's commit message
* Added support for retrieving rule bundles from Fugue

* Add families to JSON output

* Change ARM provider from "arm" to "azurerm"
* On --sync, apply only rules from synced environment

* Fix issue around module detection
* Better error for missing environment ID on --upload

v2.3.0

Toggle v2.3.0's commit message
* Rule `FG_R00500` that enforces AWS WAF configuration that mitigates…

… the recently-publicized Log4J vulnerabilities

v2.2.1

Toggle v2.2.1's commit message
* Panic in Terraform loader (fugue#279)

v2.2.0

Toggle v2.2.0's commit message
* Azure Resource Manager (ARM) template support with 38 rules. This f…

…eature is currently in preview.

v2.1.0

Toggle v2.1.0's commit message
* Ability to specify remediation doc URL for custom rules (fugue#247 …

…authored by @darrendao)

* Support for aws_alb resource type in Terraform rules (fugue#252)
* Remediation doc links for some newer rules

* Panic from HCL loader for variables without defaults (fugue#245)
* Bucket policies not correctly associated with buckets in some Terraform rules (fugue#251)
* Lambda permissions not associated with functions when values besides function name are used (fugue#200)
* False positives from FG_R00073 for WAFv2 with Terraform HCL inputs (fugue#249)

v2.0.1

Toggle v2.0.1's commit message
* Issue where some data resources would appear empty in the resource …

…view for Terraform HCL inputs (fugue#244)

v2.0.0

Toggle v2.0.0's commit message
This is a major release that contains a few breaking changes describe…

…d below. Users who are upgrading from previous versions should:

* Swap any uses of the `--user-only` flag for `--no-built-ins`
* Use `regula run --sync --upload` instead of `regula scan`
* Update any tooling that consumes Regula's JSON output to account for the newly-added field

Please see our [docs site](https://regula.dev) for the latest usage information.

* `--sync` flag to `regula run`. When `--sync` is specified, Regula will fetch custom rules from Fugue.
* `--upload` flag to `regula run`. When `--upload` is specified, Regula will upload rule results to Fugue.
* `--exclude` flag to `regula run`. `--exclude` takes a rule ID or rule name and excludes that rule from the evaluation.
* `--only` flag to `regula run`. `--only` takes a rule ID or rule name and excludes all other rules from the evaluation.
* `rule_raw_result` field to Regula JSON report output. This boolean field indicates the unwaived rule status - `true` if the rule passed before waivers were applied and `false` otherwise.

* Renamed `--user-only` flag to `--no-built-ins`

* `regula scan` command. The functionality of `regula scan` has been combined into `regula run`.

* `:unneeded is deprecated` warning from brew install (fugue#239 authored by @somaritane)

* Regula's Terraform HCL loader. We've gained support for heredoc syntax, better error handling, better function support, and more.