Tags: jcoffi/regula
Tags
* New TF rules: FG_R00354, FG_R00355, FG_R00357, FG_R00359, FG_R00375… …, FG_R00451, FG_R00452, FG_R00468 * SARIF output format (fugue#284) * Resource tags to JSON report (fugue#317) * Support for valueless tags (fugue#319) * `input_resource_types` set to `fugue` library (fugue#322) * Support for waivers defined in Fugue SaaS when using `--sync` (fugue#316) * Commented-out defaults from generated config file (fugue#320) * Package name to match Go mod conventions for package versioning (fugue#296) (fugue#312) * Nil panic in Cloudformation detector (fugue#313) * Bug in FG_R00068 when KMS key resource not defined in same module (fugue#299) * Upgrade OPA from 0.34.1 to 0.37.0 (fugue#308) * Upgrade Alpine version in docker image (fugue#323) * Support for `count` attribute in HCL (fugue#321)
* Rule package names to match what's in the Fugue platform offering (f… …ugue#300) * Empty `opa.runtime()` result (fugue#301) * Null `terraform.workspace` value (fugue#305) * Panic from null count in some Terraform configurations (fugue#307) * Table output by making the result and severity columns more visible (fugue#298 authored by @fafg)
* Added support for retrieving rule bundles from Fugue * Add families to JSON output * Change ARM provider from "arm" to "azurerm" * On --sync, apply only rules from synced environment * Fix issue around module detection * Better error for missing environment ID on --upload
* Ability to specify remediation doc URL for custom rules (fugue#247 … …authored by @darrendao) * Support for aws_alb resource type in Terraform rules (fugue#252) * Remediation doc links for some newer rules * Panic from HCL loader for variables without defaults (fugue#245) * Bucket policies not correctly associated with buckets in some Terraform rules (fugue#251) * Lambda permissions not associated with functions when values besides function name are used (fugue#200) * False positives from FG_R00073 for WAFv2 with Terraform HCL inputs (fugue#249)
This is a major release that contains a few breaking changes describe… …d below. Users who are upgrading from previous versions should: * Swap any uses of the `--user-only` flag for `--no-built-ins` * Use `regula run --sync --upload` instead of `regula scan` * Update any tooling that consumes Regula's JSON output to account for the newly-added field Please see our [docs site](https://regula.dev) for the latest usage information. * `--sync` flag to `regula run`. When `--sync` is specified, Regula will fetch custom rules from Fugue. * `--upload` flag to `regula run`. When `--upload` is specified, Regula will upload rule results to Fugue. * `--exclude` flag to `regula run`. `--exclude` takes a rule ID or rule name and excludes that rule from the evaluation. * `--only` flag to `regula run`. `--only` takes a rule ID or rule name and excludes all other rules from the evaluation. * `rule_raw_result` field to Regula JSON report output. This boolean field indicates the unwaived rule status - `true` if the rule passed before waivers were applied and `false` otherwise. * Renamed `--user-only` flag to `--no-built-ins` * `regula scan` command. The functionality of `regula scan` has been combined into `regula run`. * `:unneeded is deprecated` warning from brew install (fugue#239 authored by @somaritane) * Regula's Terraform HCL loader. We've gained support for heredoc syntax, better error handling, better function support, and more.
PreviousNext