v0.7.0

Release Notes

Another day, another release. These are the release notes for version v0.7.0.

Features

• Terraform State file Action - New Action for scanning Terraform state files for security configuration best practices.
• Terraform Plan Action - New Action for scanning Terraform plan files repositories for security configuration best practices.

Updates

• Terraform HCL Action - Renames Terraform Action as Terraform HCL. This action can be used to do static analysis of Terraform HCL files and projects.

Documentation updates

• 6e11067 - Fix incorrect readme example

v0.6.0

Release Notes

Another day, another release. These are the release notes for version v0.6.0.

Features

• GitHub Organization Action - New Action for scanning GitHub organization for security configuration best practices.
• GitHub Repository Action - New Action for scanning individual GitHub repositories for security configuration best practices.

Documentation Updates

• dca1240 - Fix docs for setup action
• 072758a - format github action
• 0766f71 - Clearer README description of GitHub org/repo Action

Mondoo Scan v0.5.1

• Update description data on GitHub Actions Marketplace

Mondoo Scan v0.5.0

Big Changes to the Mondoo GitHub Action!

The Mondoo GitHub Action has been entirely rewritten to better integrate within modular workflows in your projects. The action now includes individual GitHub Actions for scanning AWS accounts, Kubernetes Clusters, Kubernetes manifests, Docker images, and Terraform configuration files. There's also a new action for uploading Mondoo Policies to PolicyHub and an action for configuring Mondoo Client, so you can run whatever scan commands you may need. Keep in mind that this new setup is entirely different than our previous releases and breaks existing workflow configurations. Make sure to check out the project Readme and each new action's readme for more information on usage. As always, let us know if you have any questions at [email protected] or join us on our Mondoo Community Slack

Mondoo Scan v0.4.2

• Resolves failures scanning Docker images

Mondoo Scan v0.4.1

• Fix failures introduced in 0.4.0
• Update setup instructions to match new UI experience

Mondoo Scan v0.4.0

• Rename the tf scan type to terraform to match the value expected by Mondoo Client
• Fail with an error message when the scan type is terraform and no path is specified
• Add an extra_args workflow configuration options for passing additional flags to Mondoo Client during the scan

Mondoo Scan v0.3.0

• Add new output_format input for controlling the output from the Mondoo Client. Defaults to the shorter compact output.
• Add new score_threshold input to control the level of failures that cause the action to fail.

Mondoo Scan v0.2.2

• Updated the action to pass along CI information to the Mondoo console for our upcoming CI/CD view

Mondoo Scan v0.2.1

• Improve documentation steps to make sure users base64 encode their service account