Skip to content

Commit

Permalink
Add 11.8 release notes
Browse files Browse the repository at this point in the history
Signed-off-by: Tim Smith <[email protected]>
  • Loading branch information
tas50 committed Jun 6, 2024
1 parent 1bd961b commit 77b4590
Show file tree
Hide file tree
Showing 7 changed files with 813 additions and 703 deletions.
91 changes: 91 additions & 0 deletions releases/2024-06-11-mondoo-11.8-is-out.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,91 @@
---
slug: mondoo-11.8-is-out/
title: Mondoo 11.8 is out!
description: Announcing the 11.8 release of Mondoo, with fine grained asset scanning, FOO, BAR, BAZ, and more!

Check failure on line 4 in releases/2024-06-11-mondoo-11.8-is-out.md

View workflow job for this annotation

GitHub Actions / Run spell check

`BAZ` is not a recognized word. (unrecognized-spelling)
author: Tim Smith
author_title: Mondoo Core Team
author_url: https://github.com/tas50
image: /img/featured_img/release-feature.jpg
tags: [release, mondoo]
---

## 🥳 Mondoo 11.8 is out! This release includes fine grained asset scanning, FOO, BAR, BAZ, and more!

Check failure on line 12 in releases/2024-06-11-mondoo-11.8-is-out.md

View workflow job for this annotation

GitHub Actions / Run spell check

`BAZ` is not a recognized word. (unrecognized-spelling)

Get this release: [Installation Docs](https://mondoo.com/docs/cnspec/) | [Package Downloads](https://releases.mondoo.com/cnspec/) | [Docker Container](https://hub.docker.com/r/mondoo/cnspec)

---

## 🎉 NEW FEATURES

### Fine grained cloud asset scanning

Bring greater visibility to your cloud security posture, with new fine grained asset scanning for Azure, GCP, and Mondoo hosted AWS integrations. With fine grained asset scanning Mondoo will scan common cloud resources such as load balancers, virtual networks, or storage buckets as individual assets, giving you improved visibility into the security posture of your most important cloud assets.

![Granular Cloud Assets](/img/releases/2024-06-11-mondoo-11.8-is-out/granular_assets.png)

#### Expanded asset inventory

With fine grained asset scanning you can quickly find and understand cloud assets accross multiple providers or accounts all within Mondoo. Search for resources by name or type using our newly expanded search capabilities.

Check failure on line 28 in releases/2024-06-11-mondoo-11.8-is-out.md

View workflow job for this annotation

GitHub Actions / Run spell check

`accross` is not a recognized word. (unrecognized-spelling)

![Asset search](/img/releases/2024-06-11-mondoo-11.8-is-out/search.png)

Once you've found the right asset, quickly determine the location and owner with detailed asset overview data for each asset type.

![Asset overview](/img/releases/2024-06-11-mondoo-11.8-is-out/asset_overview.png)

#### Improved security visibility

Understand where critical security vulnerabilities exist within your infrastructure with fine grained asset scanning. With checks applied directly to cloud assets, you can more easily see which assets are passing and which are failing without the need to dive into complex account-wide check output.

![Granular security check](/img/releases/2024-06-11-mondoo-11.8-is-out/security_check.png)

#### Granular exceptions

The world is full of edge cases and now you have the granularity to account for those exceptions where necessary. With fine grained asset scanning you can create exceptions that run on the specific cloud resources instead of your entire account. This means you can disable or snooze a check without losing security visibility accross your whole cloud account.

Check failure on line 44 in releases/2024-06-11-mondoo-11.8-is-out.md

View workflow job for this annotation

GitHub Actions / Run spell check

`accross` is not a recognized word. (unrecognized-spelling)

![Granular asset exceptions](/img/releases/2024-06-11-mondoo-11.8-is-out/exceptions.png)

#### Common questions

**Q: Why is the cloud resource FOO not scanning as an asset?**

**A**: Not all cloud resources will scan as assets initially. We've added common resources that include security checks in CIS Level 1 policies. We will be expanding our scanning coverage as time goes on and as new checks are developed. If there's a resource you'd love to see scanned as an asset in Mondoo let us know at [[email protected]](mailto:[email protected]).

**Q: Will the increase in asset counts impact billing?**

**A**: Billing shouldn't get in the way of having the granularity to solve critical security findings, so there will not be an additional charge for these assets.

### Space wide software vulnerability page

DEETS

Check failure on line 60 in releases/2024-06-11-mondoo-11.8-is-out.md

View workflow job for this annotation

GitHub Actions / Run spell check

`DEETS` is not a recognized word. (unrecognized-spelling)

### Quick space and organization navigation

DEETS

Check failure on line 64 in releases/2024-06-11-mondoo-11.8-is-out.md

View workflow job for this annotation

GitHub Actions / Run spell check

`DEETS` is not a recognized word. (unrecognized-spelling)

## 🧹 IMPROVEMENTS

### Oracle Unbreakable Enterprise Kernel CVE detection

https://github.com/mondoohq/server/pull/8342

### Resource updates

#### aws.applicationautoscaling.target

- New `createdAt` field

#### aws.ec2.image

- New `deprecatedAt` field

## 🐛 BUG FIXES AND UPDATES

- Fix a type error querying data from the `aws.ecs.task` resource.
- Display policies in preview on assets in grey.
- Show the correct Microsoft icon on the console login page.
- Fix the display of priority chart totals in light mode.
- Expand Linux policies to support PowerPC and Arm based systems.
- Improve icons on the workstation setup page.
- Allow updating the AWS Mondoo hosted integration without re-entering credentials.
- Improve policy score calculations when some policies are in preview.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading

0 comments on commit 77b4590

Please sign in to comment.