v0.10.4

Changelog

• 8c385ff build(deps): bump github.com/aws/aws-sdk-go-v2/config (#1827)
• eb375f4 build(deps): bump github.com/aws/aws-sdk-go-v2/service/securityhub (#1826)
• 594eb2c build(deps): bump golang from 1.23.6 to 1.24.0 (#1805)
• c74ce3a fix: address vulnerabilities in kubectl (#1828)

v0.10.3

Changelog

• 9499991 DEVOPS-934: Fix UBI image labels in order to be able to pass Red Hat pre-flight checks (#1812)
• c8d80e6 build(deps): bump alpine from 3.21.2 to 3.21.3 (#1806)
• 7f2f0f3 build(deps): bump github.com/aws/aws-sdk-go-v2 from 1.36.0 to 1.36.3 (#1822)
• bd6eae0 build(deps): bump github.com/aws/aws-sdk-go-v2/config (#1821)
• d85a765 build(deps): bump github.com/aws/aws-sdk-go-v2/service/securityhub (#1824)
• 01afe91 build(deps): bump github.com/spf13/cobra from 1.8.1 to 1.9.1 (#1809)
• 99d3eb6 build(deps): bump k8s.io/client-go from 0.32.1 to 0.32.2 (#1811)
• b0cb472 fix: Add default case to CIS benchmark version selection (#1823)
• c40b2a7 fix: typo of applicaions which should have been applications (#1819)

v0.10.2

Changelog

• fcb6517 Bump golang from 1.23.5 to 1.23.6 to fix CVE-2025-22866 (#1800)
• 2de22f8 Updated version in documentation and using a version var (#1799)
• f9e2c77 ci: bump up Go version to 1.23.6 in Github workflows (#1801)
• 18e7e35 fix: suppress vulnerabilities in kubectl (#1802)

v0.10.1

Changelog

• c9985a6 Bump golang from 1.23.4 to 1.23.5 to fix vulnerabilities. (#1793)
• 5557601 DEVOPS-788: in order to pass RedHat operator certification, labels mu… (#1781)
• 62a5442 build(deps): bump github.com/aws/aws-sdk-go-v2 from 1.32.8 to 1.36.0 (#1796)
• 4d82ee7 build(deps): bump github.com/aws/aws-sdk-go-v2/config (#1795)
• c04b700 build(deps): bump github.com/aws/aws-sdk-go-v2/service/securityhub (#1794)
• b1547c0 build(deps): bump golang from 1.23.4 to 1.23.5 (#1787)
• 368a8b5 build(deps): bump k8s.io/apimachinery from 0.32.0 to 0.32.1 (#1782)
• a7bd33c build(deps): bump k8s.io/client-go from 0.32.0 to 0.32.1 (#1785)
• fcfb537 fix(ci): add missed args for building docker images (#1788)
• 26aaeec fix: required fixes for rke-cis 1.7 / 1.28 / 1.29 (#1792)

v0.10.0

Changelog

• 3a2348e Add CIS Kubernetes CIS-1.10 for k8s v1.28 - v1.31 (#1753)
• acab94e CVE-2024-45338: Inefficient Regular Expression Complexity (#1766)
• fd5e2c1 VEX related improvements in the build process (#1768)
• 438dc09 build(deps): bump alpine from 3.21.0 to 3.21.2 (#1773)
• 2cab7f9 build(deps): bump github.com/aws/aws-sdk-go-v2 from 1.32.6 to 1.32.8 (#1771)
• 362e95a build(deps): bump github.com/aws/aws-sdk-go-v2/config (#1769)
• 4e70640 build(deps): bump github.com/aws/aws-sdk-go-v2/service/securityhub (#1770)
• 9e526e6 build(deps): bump github.com/golang/glog from 1.2.3 to 1.2.4 (#1774)
• 08574d7 chore: bump up Go version to 1.23.4 (#1776)
• a38a3c5 feat: CIS EKS 1.5.0 (#1653)

v0.9.4

Changelog

• 2fa813e build(deps): bump alpine from 3.20.3 to 3.21.0 (#1751)
• cce6b9d build(deps): bump github.com/magiconair/properties from 1.8.7 to 1.8.9 (#1750)
• 84fb69d build(deps): bump golang from 1.23.3 to 1.23.4 (#1752)
• e26eff0 build(deps): bump golang.org/x/crypto from 0.24.0 to 0.31.0 (#1754)
• f0f89b2 fix: change the folder name for certificate files in rke-1.23 and rke-1.24, fixes #1747 (#1749)
• fbb674c fix: check_files_owner_in_dir.sh script not found error, fixes #1746 (#1755)

v0.9.3

Changelog

• 39dfe93 Ensure 127.0.0.1 for the --bind-address parameter (#1723)
• 0eae00c build(deps): bump codecov/codecov-action from 4 to 5 (#1733)
• 3ee8299 build(deps): bump github.com/aws/aws-sdk-go-v2/config (#1743)
• 6aa242e build(deps): bump github.com/aws/aws-sdk-go-v2/service/securityhub (#1745)
• 09aa59e build(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0 (#1736)
• 6da5ff4 build(deps): bump gorm.io/driver/postgres from 1.5.9 to 1.5.11 (#1742)
• 2500cee build(deps): bump k8s.io/client-go from 0.31.2 to 0.31.3 (#1738)
• 20604a5 fix: change the folder name for certificate files in rke-cis-1.7
• 64bc053 fix: k3s-cis-*- CHECK 4.2.1-4.2.3 (#1739)

v0.9.2

Changelog

• 5eccb49 FIX| RKE-CIS-1.24- CHECK 1.1.19 (#1722)
• d5ba5ed build(deps): bump actions/setup-python from 4 to 5 (#1536)
• 0e3dbfa build(deps): bump docker/build-push-action from 5 to 6 (#1631)
• ea24d0e build(deps): bump engineerd/setup-kind from 0.5.0 to 0.6.2 (#1721)
• 7ce327f build(deps): bump github.com/aws/aws-sdk-go-v2/config (#1728)
• 74f5c8b build(deps): bump github.com/aws/aws-sdk-go-v2/service/securityhub (#1716)
• 9f0f556 build(deps): bump github.com/aws/aws-sdk-go-v2/service/securityhub (#1724)
• 5fac7f6 build(deps): bump github.com/fatih/color from 1.16.0 to 1.18.0 (#1719)
• 8656945 build(deps): bump github.com/golang/glog from 1.2.2 to 1.2.3 (#1726)
• e2a97f4 build(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1 (#1718)
• 702107d build(deps): bump github.com/spf13/viper from 1.18.2 to 1.19.0 (#1720)
• 86c6a27 build(deps): bump golang from 1.22.7 to 1.23.2 (#1697)
• 27a1942 build(deps): bump golang from 1.23.2 to 1.23.3 (#1727)
• e9ea1db build(deps): bump golangci/golangci-lint-action from 4 to 5 (#1604)
• e48c3dd build(deps): bump golangci/golangci-lint-action from 5 to 6 (#1707)
• b4000f6 build(deps): bump gorm.io/gorm from 1.25.10 to 1.25.12 (#1714)
• ddb586d build(deps): bump k8s.io/apimachinery from 0.29.3 to 0.31.1 (#1681)
• 8a695eb build(deps): bump k8s.io/client-go from 0.29.3 to 0.31.2 (#1712)
• 5568895 chore: add go toolchain version (#1710)

v0.9.1

Changelog

• 1d8f80e build(deps): bump github.com/golang/glog from 1.2.0 to 1.2.2 (#1702)
• fa478ce fix: correct TLSCipherSuites to tlsCipherSuites (#1703)

v0.9.0

Changelog

• a15e8ac Add GKE 1.6 CIS benchmark for GCP environment (#1672)
• e8562f2 Extend default kubelet configlist to fit AWS EKS (#1637)
• c533d68 FIXING RKE-2-CIS-1.24 Checks (#1688)
• b85ec78 Fix CIS-1.9 policies 5.1.1/5.1.5 typos (#1658)
• 2751f87 Fix audit and remediation for CIS-1.9 master 1.1.13/1.1.14 (#1649)
• f6877e3 Fix issue 1595: failed to output to ASFF (#1691)
• 4b4c1ce Modify 1.2.3 Ensure that the DenyServiceExternalIPs is set in CIS-1.7/1.8 (#1607)
• a9422a6 Overhaul of K3s scans (#1659)
• 674d8e8 Update command to build docker to run in EKS cluster (#1648)
• e75cd6b Updated KUBECTL_VERSION to 1.31.0 for fixing vulnerabilities (#1690)
• d8f041a build(deps): bump alpine from 3.20.0 to 3.20.3 (#1676)
• c683e93 build(deps): bump github.com/aws/aws-sdk-go-v2/service/securityhub (#1696)
• 5a3fd1d build(deps): bump golang from 1.22.2 to 1.22.4 (#1629)
• e477252 build(deps): bump gorm.io/driver/postgres from 1.5.6 to 1.5.9 (#1698)
• f8b6f2f chore: fixed vulns - bump Go version (#1687)
• 3a0ccc4 fix: rh-1.0 check 4.1.3 typo (#1652)
• 7ea1d59 update audit script for cis-1.9 kubernetes policies id 5.1.6 (#1655)
• 89842dc update dockerfile to add package findutils (#1657)