Skip to content

Releases: aquasecurity/tfsec

tfsec v0.30.0

08 Oct 20:49
a8d1db8
Compare
Choose a tag to compare
  • add check for wildcard policy actions
  • add check for hard coded creds in aws provider
  • add check for WAF when using Cloud front

tfsec v0.29.0

08 Oct 10:18
4bfd0db
Compare
Choose a tag to compare
  • More AWS IAM password policy checks

tfsec v0.28.1

08 Oct 08:52
3187cbb
Compare
Choose a tag to compare
  • Fix image publishing

tfsec v0.28.0

08 Oct 08:24
c6027fa
Compare
Choose a tag to compare
  • Check for AWS IAM password reuse prevention

tfsec v0.27.0

22 Sep 19:28
9eb8d19
Compare
Choose a tag to compare
  • Check CloudFront security policy version >= TLSv1.2_2019
  • Add check for encryption at rest for Elasticsearch domains
  • Add checks for encryption at rest and in transit for Elasticache
  • Add GCP IAM user grant check

tfsec v0.26.0

22 Sep 13:52
2d97615
Compare
Choose a tag to compare
  • Add plain text output

tfsec v0.25.0

10 Aug 10:01
4b6cff2
Compare
Choose a tag to compare
  • Option to output to file (--out)
  • New check: API Gateway domain name uses outdated SSL/TLS protocols.

tfsec v0.24.1

15 Jul 19:12
da4266a
Compare
Choose a tag to compare
  • Fixes detection of open security group rules in AWS, specifically for IPv6 CIDRs

tfsec v0.24.0

09 Jul 21:16
adbf997
Compare
Choose a tag to compare
  • Added multiple GKE checks

tfsec v0.23.2

06 Jul 08:15
7aa8a13
Compare
Choose a tag to compare
  • Fixes docker push issue