Changes

This release contains the following changes 🎉. Help spread the word or leave a GitHub star if you like it 😉

⚠️ Upgrade Notes

This update adds new fields to the Custom Resource Definitions (CRDs), Helm does not update CRDs after the initial installation.
To upgrade the CRDs you can run the following script or grab the latest CRDs from the git repo at the v3.4.0 tag:

kubectl apply -f https://raw.githubusercontent.com/secureCodeBox/secureCodeBox/v3.4.0/operator/crds/cascading.securecodebox.io_cascadingrules.yaml
kubectl apply -f https://raw.githubusercontent.com/secureCodeBox/secureCodeBox/v3.4.0/operator/crds/execution.securecodebox.io_parsedefinitions.yaml
kubectl apply -f https://raw.githubusercontent.com/secureCodeBox/secureCodeBox/v3.4.0/operator/crds/execution.securecodebox.io_scancompletionhooks.yaml
kubectl apply -f https://raw.githubusercontent.com/secureCodeBox/secureCodeBox/v3.4.0/operator/crds/execution.securecodebox.io_scans.yaml
kubectl apply -f https://raw.githubusercontent.com/secureCodeBox/secureCodeBox/v3.4.0/operator/crds/execution.securecodebox.io_scantypes.yaml
kubectl apply -f https://raw.githubusercontent.com/secureCodeBox/secureCodeBox/v3.4.0/operator/crds/execution.securecodebox.io_scheduledscans.yaml

🚀 Features

• Add support for hook priorities (ordering) @EndPositive (#695)
• Add ability to configure which hooks to run per scan @EndPositive (#757)
• Add Cronjob Configuration Options and Fix Security Context for Nuclei Chart @J12934 (#801)

🚓 Security Scanner

• Upgraded kubeaudit from v0.14.2 to v0.15.0 @secureCodeBoxBot (#826)
• Upgraded semgrep from 0.71.0 to 0.73.0 @secureCodeBoxBot (#822)
• Upgraded wpscan from v3.8.19 to v3.8.20 @secureCodeBoxBot (#799)
• Upgraded trivy from 0.20.2 to 0.21.0 @secureCodeBoxBot (#816)
• Upgraded amass from 3.14.3 to 3.15.0 @secureCodeBoxBot (#809)
• Upgraded trivy from 0.19.2 to 0.20.2 @github-actions (#777)
• Upgraded amass from 3.14.2 to 3.14.3 @secureCodeBoxBot (#794)
• Upgraded semgrep from 0.70.0 to 0.71.0 @github-actions (#791)

⚓️ Hooks

• Add support for hook priorities (ordering) @EndPositive (#695)
• Add ability to configure which hooks to run per scan @EndPositive (#757)
• Fix Outdated Example in Update Field Hook Docs @J12934 (#787)

🐛 Bug Fixes

• Update Java Model for CRD @J12934 (#824)
• Update Debian in Vagrant Box @Weltraumschaf (#811)
• Fixes wrongly appended "v" to the appVersion @Ilyesbdlala (#819)
• Add Cronjob Configuration Options and Fix Security Context for Nuclei Chart @J12934 (#801)

🧪 Test

• Add Improvements to SCB Bot @Ilyesbdlala (#798)

📚 Documentation

• Update Helm Docs @J12934 (#813)
• Fix Minor Grammar Mistake in Finding Post Processing Hook @J12934 (#802)
• Fix Outdated Example in Update Field Hook Docs @J12934 (#787)

🔧 Maintenance

• Upgrade axios from 0.21.4 to 0.22.0 @snyk-bot (#782)
• Add Improvements to SCB Bot @Ilyesbdlala (#798)
• Changed SCB-BOT PR's token to GitHub PAT @Ilyesbdlala (#792)
• Security upgrade jsonpointer from 4.1.0 to 5.0.0 @snyk-bot (#793)

Distribution

Contributers

Thx to all our contributers supporting this project 🤗
@EndPositive, @malexmave, @Ilyesbdlala, @J12934, @Weltraumschaf, @secureCodeBoxBot, @github-actions and @snyk-bot