Releases: deepfence/ThreatMapper
Releases · deepfence/ThreatMapper
threatintel-vuln-v5-2024-11-24_01-30-13
Merge branch 'main' into release-2.5
threatintel-vuln-v5-2024-11-23_13-06-17
Merge branch 'main' into release-2.5
v2.5.0
What's Changed
- Pretty name for registry and role in audit logs table by @milan-deepfence in #2282
- scan history selection improvements by @manV in #2283
- Support order filter in scans list api by @ramanan-ravi in #2281
- Add all vulnerability rules in neo4j by @ramanan-ravi in #2284
- add pod priorityClassName in helm charts by @gnmahanth in #2285
- Vulnerability rule by @noboruma in #2286
- add fields to required for vulnerability by @gnmahanth in #2290
- fix worker scans by @noboruma in #2291
- fix vuln rules apis by @noboruma in #2292
- Add feeds UI by @manV in #2293
- Add EPSS score in lookup vulnerabilities api by @ramanan-ravi in #2294
- Add description in lookup vulnerabilities api by @ramanan-ravi in #2295
- CVE detail modal fields by @manV in #2296
- Remove VulnerabilityStub as extended field of Vulnerability by @ramanan-ravi in #2297
- S3 integration - cross account by @ramanan-ravi in #2298
- remove cgroup settings in boostrapper by @noboruma in #2299
- update cloud scanner docs for using cloud scanner on EKS cluster by @gnmahanth in #2301
- Fix container by @noboruma in #2302
- Update version by @ramanan-ravi in #2305
- update instuctions to run cloud scanner on ec2 by @gnmahanth in #2306
- ECR registry using IAM role in Kubernetes by @ramanan-ravi in #2307
- Combobox, Listbox components refactor by @manV in #2312
- add docs with support for gke and gce vm cloud scanner by @gnmahanth in #2313
- Listbox refactor by @manV in #2315
- Fix deepfence agent privileges on security hardened clusters by @Kajot-dev in #2314
- update docs to support azure aks cluster and azure virtual machine by @gnmahanth in #2317
- remove sensitive contents while logging by @gnmahanth in #2320
- Add refresh status info message for cloud posture accounts by @manV in #2321
- fix vulnerability scan filters not working by @gnmahanth in #2323
- Cloud scanner resources refresh progress by @ramanan-ravi in #2316
- add docs for locating logs in agent by @gnmahanth in #2324
- Update linux agent installation documentation by @ramanan-ravi in #2326
- Most exploitable dashboard changes by @manV in #2327
- Update cloud scanner documentation by @ramanan-ravi in #2329
- Update cloud scanner documentation by @ramanan-ravi in #2330
- Update cloud scanner docs by @ramanan-ravi in #2334
- add proxy support by @noboruma in #2336
- Use globally stacked modals when navigating between different resources by @manV in #2335
- stacked detail modal fixes by @manV in #2339
- Don't ingest all vulnerability rules on startup by @ramanan-ravi in #2341
- Remove vulnerability rules listing page by @manV in #2340
- Update fargate documentation by @ramanan-ravi in #2342
- Add posture controls management settings screens by @manV in #2343
- Add cisa kev and epss score in vulnerability scan result by @ramanan-ravi in #2346
- Changes to fargate entrypoint by @ramanan-ravi in #2347
- Add cvss score in vulnerability node by @ramanan-ravi in #2348
- fix all providers selected for notification by @gnmahanth in #2349
- fix cloud account filter for integration form by @manV in #2351
- Remove dynamically linked file envsubst in fargate by @ramanan-ravi in #2352
- Jira - fix attachment empty when optional custom fields are not set by @ramanan-ravi in #2354
- Fix missing node id in VulnerabilityStub by @ramanan-ravi in #2353
- Bump to golang 1.23 by @noboruma in #2355
- Secrets and Malware dashboard updates by @manV in #2357
- Bump to golang 1.23 by @ramanan-ravi in #2356
- Set steampipe version in Kubernetes cluster agent by @ramanan-ravi in #2358
- Update docs by @ramanan-ravi in #2360
- Add info text on vulnerability dashboard card by @manV in #2361
- Rename secret field 'name' to 'rule_id' by @ramanan-ravi in #2363
- Change secret meta Name to Rule ID by @manV in #2364
- Update AWS cloud scanner docs by @ramanan-ravi in #2365
- UI: add an option for zipped report download by @manV in #2366
- zipped reports download by @gnmahanth in #2359
- change nodeType in report params to string array by @gnmahanth in #2368
- Update reporting spec by @manV in #2370
- Add support for proxy server by @ramanan-ravi in #2371
- add resource_group to azure cloud resources by @gnmahanth in #2369
New Contributors
- @Kajot-dev made their first contribution in #2314
Full Changelog: v2.4.0...v2.5.0
v2.4.0
What's Changed
- add support for TLS redis connection by @finchr in #2308
- Revert "add support for TLS redis connection" by @ramanan-ravi in #2309
- Add support for TLS redis connection by @ramanan-ravi in #2310
- Enforce DEEPFENCE_FILE_SERVER_PORT to be a string by @psych0d0g in #2331
- Remove duplicate app label by @psych0d0g in #2332
New Contributors
- @finchr made their first contribution in #2308
- @psych0d0g made their first contribution in #2331
Full Changelog: v2.3.1...v2.4.0
threatintel-vuln-v3-2024-09-24_00-02-40
Fix deepfence agent privileges on security hardened clusters (#2314)
threatintel-vuln-v3-2024-09-23_00-02-38
ECR registry using IAM role in Kubernetes (#2307) (cherry picked from commit 0e13f0e5a9bdb82ed1bb79d42b939e9b0b8ea48c)
v2.3.1
What's Changed
- Fix label name by @milan-deepfence in #2280
- remove cgroup settings in boostrapper by @noboruma in #2300
Full Changelog: v2.3.0...v2.3.1
v2.3.0
What's Changed
- report error when results exceed 100k nodes by @gnmahanth in #2108
- New golang shipper to replace fluentbit by @gnmahanth in #2102
- Revert "report error when results exceed 100k nodes" by @gnmahanth in #2131
- Reports limits by @gnmahanth in #2132
- Fix table heading text style by @milan-deepfence in #2133
- Fix badge icon from shrinking by @milan-deepfence in #2134
- Disable extension of ttl on get in ttlcache by @ramanan-ravi in #2137
- update go modules and syft by @gnmahanth in #2136
- switch worker & server to libc by @gnmahanth in #2138
- Update API spec and regenerate API client by @manV in #2140
- Use full cluster domain for service names in console helm chart by @ramanan-ravi in #2142
- update agent Dockerfile by @gnmahanth in #2144
- fix worker build in ci by @gnmahanth in #2145
- Option to configure additional no_procy env variable in console helm chart by @ramanan-ravi in #2143
- Missing filter for soc2 by @milan-deepfence in #2149
- UI: upgrade deps by @manV in #2075
- Update and theme toast popups by @manV in #1935
- Apply filter in top 5 issues by @milan-deepfence in #2147
- Remove playwright test by @milan-deepfence in #2146
- ISSUE-1980: Changes for CloudScanner auto upgrade and cloud agent by @varunsharma0286 in #2139
- Remove prefix v in version check and queries by @milan-deepfence in #2151
- fix k8s posture scan not starting by @gnmahanth in #2153
- fix-cs-scans: Fixing the node type for cs scheduled scans by @varunsharma0286 in #2154
- Listbox button background by @milan-deepfence in #2157
- clean up bootstrapper & fix node_id by @noboruma in #2158
- Disable inlining for image assets caused by vite 5 by @manV in #2159
- update kubernetes console install instructions by @gnmahanth in #2160
- dont exit shipper if console not reachable on startup by @gnmahanth in #2162
- Added build and push support for package-scanner-cli by @akumars1 in #2155
- refactor agent Dockerfile by @gnmahanth in #2167
- refactor agent Dockerfile remove unused paths by @gnmahanth in #2169
- remove order filters when getting sev counts for scans by @gnmahanth in #2166
- fix: es integration validation failure when auth header provided by @gnmahanth in #2170
- fix neo4j commands failing while executing backup by @gnmahanth in #2172
- In containerd, images does not have created_at field, set it as empty by @ramanan-ravi in #2173
- Fix severity info style by @milan-deepfence in #2165
- Remove theme props from ReactEchart component by @milan-deepfence in #2161
- Update backup_neo4j.sh by @gnmahanth in #2175
- Update docs by @ramanan-ravi in #2177
- optimize cloud resource ingestion by @noboruma in #2178
- remove auto-retries on registry scans by @noboruma in #2180
- separate out envfile names by @gnmahanth in #2181
- Arrange side nav menu and headers by @milan-deepfence in #2141
- Cloud scanner: fetch the list of monitored accounts dynamically by @ramanan-ravi in #2182
- Remove cloud scanner controls from register api by @ramanan-ravi in #2185
- ISSUE-2199: Migrate to use Enum fields instead of strings by @varunsharma0286 in #2174
- Replace string benchmark type with enum type by @milan-deepfence in #2179
- Remove cloud agent logs which is merged in agent logs by @milan-deepfence in #2186
- Replace posture string status with enum status by @milan-deepfence in #2188
- Update pending todo by @milan-deepfence in #2164
- Fix wrong page navigation by @milan-deepfence in #2190
- fix neo4j dump/load & backup script by @noboruma in #2192
- Fetch cloud resources periodically by @ramanan-ravi in #2191
- Fix for posture scan status to use enum by @milan-deepfence in #2193
- Fix posture scan status for non cloud in filter dropdown by @milan-deepfence in #2194
- Move settings management to utils by @ramanan-ravi in #2195
- Added missing severity check and posture status by @milan-deepfence in #2197
- update cloud controls for result grouping support by @gnmahanth in #2150
- Fix scan status of never scanned for org account by @milan-deepfence in #2200
- Update accordion component style by @milan-deepfence in #2199
- Azure multi-subscription cloud scanner support by @ramanan-ravi in #2201
- Remove duplicate copy button by @milan-deepfence in #2205
- kill ingester if unknown topic error is encountered by @gnmahanth in #2207
- ELK Doc Update by @akumars1 in #2209
- Dashboard support for AWS Foundational Security benchmark type by @manV in #2210
- Use tenant and subscription terminology for Azure cloud by @milan-deepfence in #2208
- Update integration with doc links in each integration form by @milan-deepfence in #2211
- Update table and checkbox style by @milan-deepfence in #2213
- Add cloud account refresh status by @ramanan-ravi in #2212
- Link Registry image tag table scan status to the scan results by @manV in #2216
- Rename table test snapshot file by @manV in #2219
- Add namespace in kafka topic name by @ramanan-ravi in #2220
- Fix incorrect node type in start scan for host account by @milan-deepfence in #2222
- Use pretty name for benchmarks in integration report by @milan-deepfence in #2218
- Update headless ui library version by @milan-deepfence in #2217
- Integrations & Notification Updates by @gnmahanth in #2215
- Add completion api for cloud account by @ramanan-ravi in #2221
- move lastupdatedevent logic to function by @gnmahanth in #2223
- Add filters in completion api by @ramanan-ravi in #2224
- add human readable error messages in integrations by @gnmahanth in #2225
- minor optimisations related integration object creation by @gnmahanth in #2228
- Update to GCP terminology by @milan-deepfence in #2227
- Generic lib by @noboruma in #2226
- support sending scan summary & link by @gnmahanth in #2229
- Clouds scanner - start scan after cloud resources refresh is complete by @ramanan-ravi in #2231
- fix malware scan by @ibreakthecloud in #2233
- apply results filter for sending scan summay by @gnmahanth in https://github.com/deepfence/T...
threatintel-yara-2024-07-07_18-02-15
Update docs
threatintel-yara-2024-07-06_18-02-28
Update docs