v1.13.0

What's Changed

• feat: Add support for TF_VAR_ env vars by @liamg in #1613

Full Changelog: v1.12.0...v1.13.0

v1.12.0

What's Changed

• feat: Add --print-rego-input to print input provided to rego policies by @liamg in #1611

Full Changelog: v1.11.0...v1.12.0

v1.11.0

What's Changed

• feat: enable the 'custom' namespace for custom rego policies by @liamg in #1608

Full Changelog: v1.10.0...v1.11.0

v1.10.0

What's Changed

• feat: Add rego support by @liamg in #1605
• fix: Fix race condition in legacy ignore rule matching by @liamg in #1606

Full Changelog: v1.9.3...v1.10.0

v1.9.3

What's Changed

• fix: Load embedded files correctly on Windows by @liamg in #1603

Full Changelog: v1.9.2...v1.9.3

v1.9.2

What's Changed

• fix: Run all filter functions via defsec by @liamg in #1602

Full Changelog: v1.9.1...v1.9.2

v1.9.1

What's Changed

• chore: fix for #1595 and #1597: bump defsec version by @owenrumney in #1599

Full Changelog: v1.9.0...v1.9.1

v1.9.0

What's Changed

• feat: Add option to show ignored checks by @liamg in #1596
• chore: relocate scanner to defsec by @liamg in #1587
• chore(deps): bump github.com/spf13/cobra from 1.3.0 to 1.4.0 by @dependabot in #1590

The --include-ignored flag now correctly includes all ignored checks without affecting the result of the scan. The new --no-ignores flag stops ignore rules having any effect, causing all previously ignored results to fail.

Full Changelog: v1.8.0...v1.9.0

v1.8.0

What's Changed

• feat: split aws performance insight checks by @owenrumney in #1584
• fix: update defsec to fix NPE by @liamg in #1585

Full Changelog: v1.7.1...v1.7.3

v1.7.2

What's Changed

fix: Update configuration for gpg signing by @liamg in #1582
feat: Add --minimum-severity flag
docs: Add usage note for minimum severity
feat: Add minimum_severity option to config file

Full Changelog: v1.7.1...v1.7.2