Skip to content

Commit

Permalink
Add 11.8 release notes
Browse files Browse the repository at this point in the history
Signed-off-by: Tim Smith <[email protected]>
  • Loading branch information
tas50 committed Jun 6, 2024
1 parent 1bd961b commit c413414
Show file tree
Hide file tree
Showing 2 changed files with 809 additions and 703 deletions.
87 changes: 87 additions & 0 deletions releases/2024-06-11-mondoo-11.8-is-out.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,87 @@
---
slug: mondoo-11.8-is-out/
title: Mondoo 11.8 is out!
description: Announcing the 11.8 release of Mondoo, with fine grained asset scanning, FOO, BAR, BAZ, and more!

Check failure on line 4 in releases/2024-06-11-mondoo-11.8-is-out.md

View workflow job for this annotation

GitHub Actions / Run spell check

`BAZ` is not a recognized word. (unrecognized-spelling)
author: Tim Smith
author_title: Mondoo Core Team
author_url: https://github.com/tas50
image: /img/featured_img/release-feature.jpg
tags: [release, mondoo]
---

## 🥳 Mondoo 11.8 is out! This release includes fine grained asset scanning, FOO, BAR, BAZ, and more!

Check failure on line 12 in releases/2024-06-11-mondoo-11.8-is-out.md

View workflow job for this annotation

GitHub Actions / Run spell check

`BAZ` is not a recognized word. (unrecognized-spelling)

Get this release: [Installation Docs](https://mondoo.com/docs/cnspec/) | [Package Downloads](https://releases.mondoo.com/cnspec/) | [Docker Container](https://hub.docker.com/r/mondoo/cnspec)

---

## 🎉 NEW FEATURES

### Fine grained cloud asset scanning

Bring greater visibility to your cloud security posture, with new fine grained asset scanning for Azure, GCP, and Mondoo hosted AWS integrations. With fine grained asset scanning Mondoo will scan common cloud resources such as load balancers, virtual networks, or storage buckets as individual assets, giving you improved visibility into the security posture of your most important cloud assets.

DEETS: INVENTORY PICTURE HERE

Check failure on line 24 in releases/2024-06-11-mondoo-11.8-is-out.md

View workflow job for this annotation

GitHub Actions / Run spell check

`DEETS` is not a recognized word. (unrecognized-spelling)

#### Expanded asset inventory

With fine grained asset scanning you can quickly find and understand cloud assets accross multiple accounts and providers all within Mondoo. Using our exapanded search capabilities you can find resources by name or platform.

Check failure on line 28 in releases/2024-06-11-mondoo-11.8-is-out.md

View workflow job for this annotation

GitHub Actions / Run spell check

`accross` is not a recognized word. (unrecognized-spelling)

Check failure on line 28 in releases/2024-06-11-mondoo-11.8-is-out.md

View workflow job for this annotation

GitHub Actions / Run spell check

`exapanded` is not a recognized word. (unrecognized-spelling)

DEETS: SEARCH PICTURE HERE

Check failure on line 30 in releases/2024-06-11-mondoo-11.8-is-out.md

View workflow job for this annotation

GitHub Actions / Run spell check

`DEETS` is not a recognized word. (unrecognized-spelling)

#### Improved security visibility

With fine grained asset scanning it's easier to understand where critical security vulnerabilities exist within your infrastructure since checks run directly on cloud resource assets instead of the account. For example a

DEETS: CHECK PICTURE HERE

Check failure on line 36 in releases/2024-06-11-mondoo-11.8-is-out.md

View workflow job for this annotation

GitHub Actions / Run spell check

`DEETS` is not a recognized word. (unrecognized-spelling)

#### Granular exceptions

The world is full of exceptions and now you have the granularity to set them exactly where you want. With fine grained asset scanning you can create exceptions that run on the specific cloud resources instead of your entire account. This means you can disable or snooze a check without losing the visibility accross your whole infrastructure.

Check failure on line 40 in releases/2024-06-11-mondoo-11.8-is-out.md

View workflow job for this annotation

GitHub Actions / Run spell check

`accross` is not a recognized word. (unrecognized-spelling)

DEETS: EXCEPTION PICTURE HERE

Check failure on line 42 in releases/2024-06-11-mondoo-11.8-is-out.md

View workflow job for this annotation

GitHub Actions / Run spell check

`DEETS` is not a recognized word. (unrecognized-spelling)

#### Common questions

**Q: Why is the cloud resource FOO not scanning as an asset?**

**A**: Not all cloud resources will scan as assets initially. We've added common resources that include security checks in CIS Level 1 policies. We will be expanding our scanning coverage as time goes on and as new checks are developed. If there's a resource you'd love to see scanned as an asset in Mondoo let us know at [[email protected]](mailto:[email protected]).

**Q: Will the increase in asset counts impact billing?**

**A**: Billing shouldn't get in the way of having the granularity to solve critical security findings, so there will not be an additional charge for these assets.

### Space wide software vulnerability page

DEETS

Check failure on line 56 in releases/2024-06-11-mondoo-11.8-is-out.md

View workflow job for this annotation

GitHub Actions / Run spell check

`DEETS` is not a recognized word. (unrecognized-spelling)

### Quick space and organization navigation

DEETS

## 🧹 IMPROVEMENTS

### Oracle Unbreakable Enterprise Kernel CVE detection

https://github.com/mondoohq/server/pull/8342

### Resource updates

#### aws.applicationautoscaling.target

- New `createdAt` field

#### aws.ec2.image

- New `deprecatedAt` field

## 🐛 BUG FIXES AND UPDATES

- Fix a type error querying data from the `aws.ecs.task` resource.
- Display policies in preview on assets in grey.
- Show the correct Microsoft icon on the console login page.
- Fix the display of priority chart totals in light mode.
- Expand Linux policies to support PowerPC and Arm based systems.
- Improve icons on the workstation setup page.
- Allow updating the AWS Mondoo hosted integration without re-entering credentials.
- Improve policy score calculations when some policies are in preview.
Loading

0 comments on commit c413414

Please sign in to comment.