v3.0.0 #581

Changes

This is our next major release Version 3 and it contains the following changes 🎉.
Help us to spread the word or leave a GitHub star if you like it 😉

✨✨✨ Highlights

This major release v3 contains a lot of stuff and tremendous cool new features like our new AutoDiscovery Operator for Kubernetes 🎆 . Special thx to @J12934 who takes the major part on this.

• More details about the new AutoDiscovery Operator can be found here. Added a new AutoDiscovery Operator for automated Scans in Kubernetes Clusters @J12934 (Add a new AutoDiscovery Operator for automated Scans in Kubernetes Clusters #461)
• We also added a full Support for all secureCodeBox Scanners in the DefectDojo Hook @JohannesZahn (Added DefectDojo Hook Support for all secureCodeBox Scanners #487)

💣 Breaking

Please be aware of a lot of breaking changes in this major release v3. Most of them shouldn't be much disturbing but please read our UPGRADING.md hints to get the full details about what changed and how to migrate from v2 to v3.

• Migrated DefectDojo Hook to SCB v3 Findings Format @JohannesZahn (Migrate DefectDojo Hook to SCB v3 Findings Format #572)
• Removed Old Teams Webhook @JohannesZahn (Remove Old Teams Webhook #570)
• Renamed lurcher to lurker @twwd (Rename lurcher to lurker #537)
• Removed unused slack-webhook Directory due to the new Notification Hook @fuhrmeistery (Remove Unused slack-webhook Directory #524)
• Renamed demo-apps to demo-targets @twwd (Rename demo-apps to demo-targets #515)
• Upgraded Kubebuilder Version to v3 @J12934 (Upgrade Kubebuilder Version to v3 #512)
• Refactored hook HelmCharts to introduce consistency in HelmChart Values @EndPositive ( Refactor hook HelmCharts to introduce consistency in HelmChart Values #484)
• Refactored scanner HelmCharts to introduce consistency in HelmChart Values @EndPositive ( Refactor scanner HelmCharts to introduce consistency in HelmChart Values  #483)
• Renamed cascadingScans hook directory & docker containers @EndPositive (Cascading Scans: rename directory & docker containers #481)
• Added scanner.appendName to chart values @EndPositive (Add scanner.appendName to chart values #469)
• Trivy Scanner no longer produces invalid Severities "UNKNOWN" and "CRITICAL" @JohannesZahn (Trivy Scanner no longer produces invalid Severities "UNKNOWN" and "CRITICAL" #566)

🚀 Features

• Added Ability to Configure ZAP Advanced API Scans with Configs without Hardcoded URLs @J12934 (Add Ability to Configure ZAP Advanced API Scans with Configs without Hardcoded URLs #569)
• Added Alert Filters Config to ZAP Advanced @J12934 (Add Alert Filters Config to ZAP Advanced #562)
• Inherit environment variables, volumes, and volume mounts from parent in cascading scans @EndPositive (Inherit environment variables, volumes, and volume mounts from parent in cascading scans #538)
• Added a new AutoDiscovery Operator for automated Scans in Kubernetes Clusters @J12934 (Add a new AutoDiscovery Operator for automated Scans in Kubernetes Clusters #461)
• Environment Variables can now be set for Parsers @JohannesZahn (Environment Variables can now be set for Parsers #532)
• Added matched-finding id to cascading scan annotations @EndPositive (Add matched-finding id to cascading scan annotations #514)

🚓 Security Scanner

• Added Ability to Configure ZAP Advanced API Scans with Configs without Hardcoded URLs @J12934 (Add Ability to Configure ZAP Advanced API Scans with Configs without Hardcoded URLs #569)
• Added Alert Filters Config to ZAP Advanced @J12934 (Add Alert Filters Config to ZAP Advanced #562)
• Added Dedicated Container User For ncrack @fuhrmeistery (Add Dedicated Container User For ncrack #560)
• Added Makefile For Amass @fuhrmeistery (Add Makefile For Amass #551)
• Updated kube-hunter from 0.4.1 -> 0.6.1 @fuhrmeistery (Update kube-hunter from 0.4.1 -> 0.6.1 #561)
• Added Dedicated User For Screenshooter @fuhrmeistery (Add Dedicated User For Screenshooter #559)
• Environment Variables can now be set for Parsers @JohannesZahn (Environment Variables can now be set for Parsers #532)
• Added matched-finding id to cascading scan annotations @EndPositive (Add matched-finding id to cascading scan annotations #514)
• Run git-repo-scanner As User instead of root in docker @fuhrmeistery (Run git-repo-scanner As User #527)
• Run gitleaks As User As User instead of root in docker @fuhrmeistery (Run gitleaks As User In Container #526)

⚓️ Hooks

• Removed Old Teams Webhook @JohannesZahn (Remove Old Teams Webhook #570)
• Fixed inconsistent casing in findings created in DefectDojo Hooks syncFindingsBack Mode @J12934 (Fix inconsistent casing in findings created in DefectDojo Hooks syncFindingsBack Mode #556)
• Added hook Directory For Each Hook @fuhrmeistery (Add hook Directory For Each Hook #550)
• Added MS Teams Notifier To Notification Hook @fuhrmeistery (Add MS Teams Notifier To Notification Hook #513)
• Fixed Bug in DefectDojo Hook where Findings with Null fields caused Runtime Exceptions @JohannesZahn (Fixed Bug in DefectDojo Hook where Findings with Null fields caused Runtime Exceptions #529)
• Added DefectDojo Hook Support for all secureCodeBox Scanners @JohannesZahn (Added DefectDojo Hook Support for all secureCodeBox Scanners #487)

🐛 Bug Fixes

• Trivy Scanner no longer produces invalid Severities "UNKNOWN" and "CRITICAL" @JohannesZahn (Trivy Scanner no longer produces invalid Severities "UNKNOWN" and "CRITICAL" #566)
• Fixed inconsistent casing in findings created in DefectDojo Hooks syncFindingsBack Mode @J12934 (Fix inconsistent casing in findings created in DefectDojo Hooks syncFindingsBack Mode #556)
• Fixed typo in Artifact Hub annotations @cynthia-sg (Fix typo in Artifact Hub annotations #552)
• Self-close HTML Img Tags @twwd (Self-close HTML Img Tags #541)
• Use filtered findings for check instead of the original @J12934 (Use filtered findings for check instead of the original #531)
• Fixed Bug in DefectDojo Hook where Findings with Null fields caused Runtime Exceptions @JohannesZahn (Fixed Bug in DefectDojo Hook where Findings with Null fields caused Runtime Exceptions #529)

🧪 Test

• Validate SCB Findings in Unit Tests @JohannesZahn (Validate SCB Findings in Unit Tests #520)

📚 Documentation

• Added a sponsors section in the main readme @rseedorff (Added a sponsors section in the main readme #580)
• Updated the Upgrading hints for the upcoming SCB V3 release @rseedorff (Updated the Upgrading hints for the upcoming SCB V3 release #577)
• Added a breaking category to the generated release notes @rseedorff (Added a breaking category to the generated release notes #576)
• Added ADR 8 @Weltraumschaf (This accepts ADR 8 #565)
• Propose ADR to drop documentation versioning @Weltraumschaf (Propose ADR to drop documentation versioning #542)
• Fixed another typo in helm docs template @J12934 (Fixed another typo in helm docs template #553)
• Self-close HTML Img Tags @twwd (Self-close HTML Img Tags #541)
• Added Upgrading Notes for Cleanup @twwd (Add Upgrading Notes for Cleanup #540)
• Added a Readme and License Notice to all secureCodeBox related DockerHub Repos @rseedorff (Add a Readme and License Notice to all secureCodeBox related DockerHub Repos #523)

🔧 Maintenance

• Updated demo-target BodgeIt Docker Image Source @rseedorff (Updated demo-target BodgeIt Docker Image Source #579)
• Fixed and updated all licenses headers @SebieF (Fixing and updating licenses headers #575)
• Made Scanner and Hook Titles more uniform @JohannesZahn (Made Scanner and Hook Titles more uniform  #571)
• Removed Old Teams Webhook @JohannesZahn (Remove Old Teams Webhook #570)
• Added Dedicated Container User For ncrack @fuhrmeistery (Add Dedicated Container User For ncrack #560)
• Updated WS, JEST and @kubernetes/client-node @fuhrmeistery (Update WS, JEST and @kubernetes/client-node #564)
• Added Makefile For Amass @fuhrmeistery (Add Makefile For Amass #551)
• Name, Severity and Category are now required Findings attributes @JohannesZahn (Name, Severity and Category are now required Findings attributes #557)
• Updated kube-hunter from 0.4.1 -> 0.6.1 @fuhrmeistery (Update kube-hunter from 0.4.1 -> 0.6.1 #561)
• Added Dedicated User For Screenshooter @fuhrmeistery (Add Dedicated User For Screenshooter #559)
• Upgraded ws And @kubernetes/client-node @fuhrmeistery (Upgrade ws And @kubernetes/client-node #555)
• Added hook Directory For Each Hook @fuhrmeistery (Add hook Directory For Each Hook #550)
• Updated NPM Dependencies @fuhrmeistery (Update NPM Dependencies #548)
• Renamed lurcher to lurker @twwd (Rename lurcher to lurker #537)
• Run git-repo-scanner As User instead of root in docker @fuhrmeistery (Run git-repo-scanner As User #527)
• Run gitleaks As User As User instead of root in docker @fuhrmeistery (Run gitleaks As User In Container #526)
• Removed unused slack-webhook Directory due to the new Notification Hook @fuhrmeistery (Remove Unused slack-webhook Directory #524)
• Improved install/uninstall script to respect namespaces @rseedorff (Improve install/uninstall script to respect namespaces #425)

📌 Dependencies

• Update WS, JEST and @kubernetes/client-node @fuhrmeistery (Update WS, JEST and @kubernetes/client-node #564)
• Update kube-hunter from 0.4.1 -> 0.6.1 @fuhrmeistery (Update kube-hunter from 0.4.1 -> 0.6.1 #561)
• Upgrade ws And @kubernetes/client-node @fuhrmeistery (Upgrade ws And @kubernetes/client-node #555)
• Update NPM Dependencies @fuhrmeistery (Update NPM Dependencies #548)

Distribution

Contributers

Thx to all our contributers supporting this project 🤗
@J12934, @JohannesZahn, @SebieF, @Weltraumschaf, @fuhrmeistery, @rseedorff, @twwd and @EndPositive, @cynthia-sg