v2.5.0

What's Changed

• Pretty name for registry and role in audit logs table by @milan-deepfence in #2282
• scan history selection improvements by @manV in #2283
• Support order filter in scans list api by @ramanan-ravi in #2281
• Add all vulnerability rules in neo4j by @ramanan-ravi in #2284
• add pod priorityClassName in helm charts by @gnmahanth in #2285
• Vulnerability rule by @noboruma in #2286
• add fields to required for vulnerability by @gnmahanth in #2290
• fix worker scans by @noboruma in #2291
• fix vuln rules apis by @noboruma in #2292
• Add feeds UI by @manV in #2293
• Add EPSS score in lookup vulnerabilities api by @ramanan-ravi in #2294
• Add description in lookup vulnerabilities api by @ramanan-ravi in #2295
• CVE detail modal fields by @manV in #2296
• Remove VulnerabilityStub as extended field of Vulnerability by @ramanan-ravi in #2297
• S3 integration - cross account by @ramanan-ravi in #2298
• remove cgroup settings in boostrapper by @noboruma in #2299
• update cloud scanner docs for using cloud scanner on EKS cluster by @gnmahanth in #2301
• Fix container by @noboruma in #2302
• Update version by @ramanan-ravi in #2305
• update instuctions to run cloud scanner on ec2 by @gnmahanth in #2306
• ECR registry using IAM role in Kubernetes by @ramanan-ravi in #2307
• Combobox, Listbox components refactor by @manV in #2312
• add docs with support for gke and gce vm cloud scanner by @gnmahanth in #2313
• Listbox refactor by @manV in #2315
• Fix deepfence agent privileges on security hardened clusters by @Kajot-dev in #2314
• update docs to support azure aks cluster and azure virtual machine by @gnmahanth in #2317
• remove sensitive contents while logging by @gnmahanth in #2320
• Add refresh status info message for cloud posture accounts by @manV in #2321
• fix vulnerability scan filters not working by @gnmahanth in #2323
• Cloud scanner resources refresh progress by @ramanan-ravi in #2316
• add docs for locating logs in agent by @gnmahanth in #2324
• Update linux agent installation documentation by @ramanan-ravi in #2326
• Most exploitable dashboard changes by @manV in #2327
• Update cloud scanner documentation by @ramanan-ravi in #2329
• Update cloud scanner documentation by @ramanan-ravi in #2330
• Update cloud scanner docs by @ramanan-ravi in #2334
• add proxy support by @noboruma in #2336
• Use globally stacked modals when navigating between different resources by @manV in #2335
• stacked detail modal fixes by @manV in #2339
• Don't ingest all vulnerability rules on startup by @ramanan-ravi in #2341
• Remove vulnerability rules listing page by @manV in #2340
• Update fargate documentation by @ramanan-ravi in #2342
• Add posture controls management settings screens by @manV in #2343
• Add cisa kev and epss score in vulnerability scan result by @ramanan-ravi in #2346
• Changes to fargate entrypoint by @ramanan-ravi in #2347
• Add cvss score in vulnerability node by @ramanan-ravi in #2348
• fix all providers selected for notification by @gnmahanth in #2349
• fix cloud account filter for integration form by @manV in #2351
• Remove dynamically linked file envsubst in fargate by @ramanan-ravi in #2352
• Jira - fix attachment empty when optional custom fields are not set by @ramanan-ravi in #2354
• Fix missing node id in VulnerabilityStub by @ramanan-ravi in #2353
• Bump to golang 1.23 by @noboruma in #2355
• Secrets and Malware dashboard updates by @manV in #2357
• Bump to golang 1.23 by @ramanan-ravi in #2356
• Set steampipe version in Kubernetes cluster agent by @ramanan-ravi in #2358
• Update docs by @ramanan-ravi in #2360
• Add info text on vulnerability dashboard card by @manV in #2361
• Rename secret field 'name' to 'rule_id' by @ramanan-ravi in #2363
• Change secret meta Name to Rule ID by @manV in #2364
• Update AWS cloud scanner docs by @ramanan-ravi in #2365
• UI: add an option for zipped report download by @manV in #2366
• zipped reports download by @gnmahanth in #2359
• change nodeType in report params to string array by @gnmahanth in #2368
• Update reporting spec by @manV in #2370
• Add support for proxy server by @ramanan-ravi in #2371
• add resource_group to azure cloud resources by @gnmahanth in #2369

New Contributors

• @Kajot-dev made their first contribution in #2314

Full Changelog: v2.4.0...v2.5.0

threatintel-vuln-v5-2024-11-15_01-30-10

Merge branch 'main' into release-2.5

threatintel-vuln-v5-2024-11-14_13-07-58

Add support for proxy server

v2.4.0

What's Changed

• add support for TLS redis connection by @finchr in #2308
• Revert "add support for TLS redis connection" by @ramanan-ravi in #2309
• Add support for TLS redis connection by @ramanan-ravi in #2310
• Enforce DEEPFENCE_FILE_SERVER_PORT to be a string by @psych0d0g in #2331
• Remove duplicate app label by @psych0d0g in #2332

New Contributors

• @finchr made their first contribution in #2308
• @psych0d0g made their first contribution in #2331

Full Changelog: v2.3.1...v2.4.0

threatintel-vuln-v3-2024-09-24_00-02-40

Fix deepfence agent privileges on security hardened clusters (#2314)

threatintel-vuln-v3-2024-09-23_00-02-38

ECR registry using IAM role in Kubernetes (#2307)

(cherry picked from commit 0e13f0e5a9bdb82ed1bb79d42b939e9b0b8ea48c)

v2.3.1

What's Changed

• Fix label name by @milan-deepfence in #2280
• remove cgroup settings in boostrapper by @noboruma in #2300

Full Changelog: v2.3.0...v2.3.1

v2.3.0

What's Changed

• report error when results exceed 100k nodes by @gnmahanth in #2108
• New golang shipper to replace fluentbit by @gnmahanth in #2102
• Revert "report error when results exceed 100k nodes" by @gnmahanth in #2131
• Reports limits by @gnmahanth in #2132
• Fix table heading text style by @milan-deepfence in #2133
• Fix badge icon from shrinking by @milan-deepfence in #2134
• Disable extension of ttl on get in ttlcache by @ramanan-ravi in #2137
• update go modules and syft by @gnmahanth in #2136
• switch worker & server to libc by @gnmahanth in #2138
• Update API spec and regenerate API client by @manV in #2140
• Use full cluster domain for service names in console helm chart by @ramanan-ravi in #2142
• update agent Dockerfile by @gnmahanth in #2144
• fix worker build in ci by @gnmahanth in #2145
• Option to configure additional no_procy env variable in console helm chart by @ramanan-ravi in #2143
• Missing filter for soc2 by @milan-deepfence in #2149
• UI: upgrade deps by @manV in #2075
• Update and theme toast popups by @manV in #1935
• Apply filter in top 5 issues by @milan-deepfence in #2147
• Remove playwright test by @milan-deepfence in #2146
• ISSUE-1980: Changes for CloudScanner auto upgrade and cloud agent by @varunsharma0286 in #2139
• Remove prefix v in version check and queries by @milan-deepfence in #2151
• fix k8s posture scan not starting by @gnmahanth in #2153
• fix-cs-scans: Fixing the node type for cs scheduled scans by @varunsharma0286 in #2154
• Listbox button background by @milan-deepfence in #2157
• clean up bootstrapper & fix node_id by @noboruma in #2158
• Disable inlining for image assets caused by vite 5 by @manV in #2159
• update kubernetes console install instructions by @gnmahanth in #2160
• dont exit shipper if console not reachable on startup by @gnmahanth in #2162
• Added build and push support for package-scanner-cli by @akumars1 in #2155
• refactor agent Dockerfile by @gnmahanth in #2167
• refactor agent Dockerfile remove unused paths by @gnmahanth in #2169
• remove order filters when getting sev counts for scans by @gnmahanth in #2166
• fix: es integration validation failure when auth header provided by @gnmahanth in #2170
• fix neo4j commands failing while executing backup by @gnmahanth in #2172
• In containerd, images does not have created_at field, set it as empty by @ramanan-ravi in #2173
• Fix severity info style by @milan-deepfence in #2165
• Remove theme props from ReactEchart component by @milan-deepfence in #2161
• Update backup_neo4j.sh by @gnmahanth in #2175
• Update docs by @ramanan-ravi in #2177
• optimize cloud resource ingestion by @noboruma in #2178
• remove auto-retries on registry scans by @noboruma in #2180
• separate out envfile names by @gnmahanth in #2181
• Arrange side nav menu and headers by @milan-deepfence in #2141
• Cloud scanner: fetch the list of monitored accounts dynamically by @ramanan-ravi in #2182
• Remove cloud scanner controls from register api by @ramanan-ravi in #2185
• ISSUE-2199: Migrate to use Enum fields instead of strings by @varunsharma0286 in #2174
• Replace string benchmark type with enum type by @milan-deepfence in #2179
• Remove cloud agent logs which is merged in agent logs by @milan-deepfence in #2186
• Replace posture string status with enum status by @milan-deepfence in #2188
• Update pending todo by @milan-deepfence in #2164
• Fix wrong page navigation by @milan-deepfence in #2190
• fix neo4j dump/load & backup script by @noboruma in #2192
• Fetch cloud resources periodically by @ramanan-ravi in #2191
• Fix for posture scan status to use enum by @milan-deepfence in #2193
• Fix posture scan status for non cloud in filter dropdown by @milan-deepfence in #2194
• Move settings management to utils by @ramanan-ravi in #2195
• Added missing severity check and posture status by @milan-deepfence in #2197
• update cloud controls for result grouping support by @gnmahanth in #2150
• Fix scan status of never scanned for org account by @milan-deepfence in #2200
• Update accordion component style by @milan-deepfence in #2199
• Azure multi-subscription cloud scanner support by @ramanan-ravi in #2201
• Remove duplicate copy button by @milan-deepfence in #2205
• kill ingester if unknown topic error is encountered by @gnmahanth in #2207
• ELK Doc Update by @akumars1 in #2209
• Dashboard support for AWS Foundational Security benchmark type by @manV in #2210
• Use tenant and subscription terminology for Azure cloud by @milan-deepfence in #2208
• Update integration with doc links in each integration form by @milan-deepfence in #2211
• Update table and checkbox style by @milan-deepfence in #2213
• Add cloud account refresh status by @ramanan-ravi in #2212
• Link Registry image tag table scan status to the scan results by @manV in #2216
• Rename table test snapshot file by @manV in #2219
• Add namespace in kafka topic name by @ramanan-ravi in #2220
• Fix incorrect node type in start scan for host account by @milan-deepfence in #2222
• Use pretty name for benchmarks in integration report by @milan-deepfence in #2218
• Update headless ui library version by @milan-deepfence in #2217
• Integrations & Notification Updates by @gnmahanth in #2215
• Add completion api for cloud account by @ramanan-ravi in #2221
• move lastupdatedevent logic to function by @gnmahanth in #2223
• Add filters in completion api by @ramanan-ravi in #2224
• add human readable error messages in integrations by @gnmahanth in #2225
• minor optimisations related integration object creation by @gnmahanth in #2228
• Update to GCP terminology by @milan-deepfence in #2227
• Generic lib by @noboruma in #2226
• support sending scan summary & link by @gnmahanth in #2229
• Clouds scanner - start scan after cloud resources refresh is complete by @ramanan-ravi in #2231
• fix malware scan by @ibreakthecloud in #2233
• apply results filter for sending scan summay by @gnmahanth in https://github.com/deepfence/T...

threatintel-yara-2024-07-07_18-02-15

Update docs

threatintel-yara-2024-07-06_18-02-28

Update docs