v1.28.2

What's Changed

• chore(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1 by @dependabot in #1930
• Set github stale bot message "days" to its config by @nitrocode in #1963
• Fix table in usage.md by @Eforen in #1922
• chore(deps): bump github.com/spf13/cobra from 1.6.0 to 1.6.1 by @dependabot in #1933
• Update snapshot-release.yml by @owenrumney in #1971
• chore(deps): bump crazy-max/ghaction-import-gpg from 5.1.0 to 5.2.0 by @dependabot in #1928
• chore(deps): bump goreleaser/goreleaser-action from 3 to 4 by @dependabot in #1964
• chore(deps): bump github.com/liamg/memoryfs from 1.4.3 to 1.5.0 by @dependabot in #1944
• chore(deps): bump github.com/aquasecurity/defsec from 0.82.2 to 0.82.6 by @dependabot in #1951
• Update snapshot-release.yml by @owenrumney in #1973
• chore(deps): bump golangci/golangci-lint-action from 3.2.0 to 3.3.1 by @dependabot in #1947
• chore(deps): bump actions/stale from 6 to 7 by @dependabot in #1968
• docs: Add Trivy migration guide by @simar7 in #1961
• chore(deps): bump golangci/golangci-lint-action from 3.3.1 to 3.4.0 by @dependabot in #1981
• chore(deps): bump github.com/liamg/memoryfs from 1.5.0 to 1.6.0 by @dependabot in #1984
• Update golangci-lint.yml by @giorod3 in #2009
• bump go to version 1.19 by @simar7 in #2013
• chore(deps): bump github.com/aquasecurity/defsec from 0.82.6 to 0.84.1 by @dependabot in #2008
• chore(deps): bump alpine from 3.16.0 to 3.17.2 by @dependabot in #1998
• fix typo of drop-invalid-headers doc by @tk3fftk in #1976
• chore(deps): bump github/issue-labeler from 2.5 to 3.0 by @dependabot in #1989
• fix: sha256 command by @aiell0 in #1987
• feat(config): use spf13/viper to read config from env vars by @nitrocode in #1990
• docs: Trivy callout and migration guide added by @AnaisUrlichs in #2021
• feat: Add a transition message by @simar7 in #2067
• docs: README tfsec to trivy migration callout by @AnaisUrlichs in #2020
• chore(deps): bump github.com/cloudflare/circl from 1.1.0 to 1.3.3 by @dependabot in #2055

New Contributors

• @nitrocode made their first contribution in #1963
• @Eforen made their first contribution in #1922
• @giorod3 made their first contribution in #2009
• @aiell0 made their first contribution in #1987
• @AnaisUrlichs made their first contribution in #2021

Full Changelog: v1.28.1...v1.28.2

v1.28.1

What's Changed

• chore(deps): bump github.com/liamg/memoryfs from 1.4.2 to 1.4.3 by @dependabot in #1893
• chore(deps): bump actions/stale from 5 to 6 by @dependabot in #1910
• chore(deps): bump github.com/AlecAivazis/survey/v2 from 2.3.5 to 2.3.6 by @dependabot in #1891
• chore: Update defsec to v0.82.2 by @liamg in #1932

Full Changelog: v1.28.0...v1.28.1

v1.28.0

What's Changed

• Add missing docs from recent additions to defsec by @reedloden in #1884
• fix wrong code block by @dawez in #1883
• feat: support exclude expiry in config by @owenrumney in #1897
• feat: support optional provider and service name in custom checks by @owenrumney in #1899
• fix: Ensure rego input is properly filled for nested slices by @liamg in aquasecurity/defsec#952
• fix: Readd policy wildcards rule to default framework by @liamg in aquasecurity/defsec#954
• feat: add OnlyContains helper function by @owenrumney in aquasecurity/defsec#953

Full Changelog: v1.27.6...v1.28.0

v1.27.6

What's Changed

• docs: Add module ignore documentation by @liamg in #1875
• build: Speed up caching and tidy actions build by @liamg in #1876
• fix: Use mktemp instead of /tmp to securely manage temporary directories by @reedloden in #1870
• chore: Update defsec to v0.73.0 by @liamg in #1877

New Contributors

• @reedloden made their first contribution in #1870

Full Changelog: v1.27.5...v1.27.6

v1.27.5

What's Changed

• fix: Resolve S3 regressions by @liamg in #1867

Full Changelog: v1.27.4...v1.27.5

v1.27.4

What's Changed

• fix: panic in sqs adapter by @liamg in #1866

Full Changelog: v1.27.3...v1.27.4

v1.27.3

What's Changed

• fix: Fix s3 public access block linking by @liamg in #1865

Full Changelog: v1.27.2...v1.27.3

v1.27.2

What's Changed

• misc: automate the installation of tfsec on linux by @dawez in #1847
• chore(deps): bump crazy-max/ghaction-import-gpg from 5.0.0 to 5.1.0 by @dependabot in #1837
• chore(deps): Update defsec to fix IAM ignores by @liamg in #1853
• fix: Fix build script by @owenrumney in #1856
• chore(deps): update defsec to v0.71.11 by @liamg in #1858
• chore(deps): update defsec to v0.72.0 by @liamg in #1861

New Contributors

• @dawez made their first contribution in #1847

Full Changelog: v1.27.1...v1.27.2

v1.27.1

What's Changed

• chore: bump defsec by @owenrumney in #1843

Full Changelog: v1.27.0...v1.27.1

v1.27.0

What's Changed

• chore(deps): bump github.com/aquasecurity/defsec from 0.68.8 to 0.68.9 by @dependabot in #1827
• fix tiny typo by @tk3fftk in #1833
• chore(deps): bump github.com/aquasecurity/defsec from 0.68.9 to 0.68.10 by @dependabot in #1831
• fix: output statistics in lovely, markdown or json format (#1790) by @amandahla in #1840
• feat: Add exclude-ignores flag and --config-file attribute by @alexandrupopafc in #1839

New Contributors

• @tk3fftk made their first contribution in #1833
• @amandahla made their first contribution in #1840
• @alexandrupopafc made their first contribution in #1839

Full Changelog: v1.26.3...v1.27.0