v2.1.21

What's Changed

• fix(query): fix EFS Volume With Disabled Transit Encryption queries for multiple volumes cases by @cx-artur-ribeiro in #7947
• fix(analyzer): add failed utf conversions to unwanted files by @cx-miguel-dasilva in #7997
• fix(dockerhub): add token login to DockerHub by @cx-artur-ribeiro in #8024
• feat(testing): add arm64 testing infra by @cx-miguel-dasilva in #7998
• feat(tests): improving E2E HTML report and output on remediation tests by @cx-ricardo-jesus in #7955
• fix(workflows): update github actions to use SHA by @cx-bruno-silva in #8035
• feat(action): added validation for searchLine field in actions by @cx-ricardo-jesus in #7994
• Change to use actions role by @cx-joao-reigota in #8040
• ci(secrets): use aws oidc by @cx-rafael-carvalho in #8041
• fix(query): fix FP results on "IAM policy allows for data exfiltration" CloudFormation and Terraform queries by @cx-andre-pereira in #8030
• [StepSecurity] Apply security best practices by @stepsecurity-app[bot] in #8060
• [StepSecurity] Apply security best practices by @stepsecurity-app[bot] in #8063
• chore: remove Dependabot configuration by @cx-ohad-israeli in #8070
• CISO-1254 Remove old SBOM by @cx-yevgeny-kuznetsov in #8071
• fix(vulnerabilities): update dockerfile and fix trivy vulnerabilities by @cx-artur-ribeiro in #8076
• bug(security): fix security vulnerability findings by @cx-miguel-dasilva in #8084
• fix(parser): fixed looping behavior triggered during dockerfile parsing by @cx-andre-pereira in #8085
• fix(query): updated "SQL DB Instance With SSL Disabled" Terraform query to handle 'require_ssl' field deprecation by @cx-andre-pereira in #8029
• fix(query): the "Image Version Using Latest" dockerfile query was not accounting for specific digest values by @cx-andre-pereira in #8033
• fix(query): fixed FP on default azure storage account network is too permissive for arm by @cx-ricardo-jesus in #8086
• fix(queries): fixed FN on run/script block injection query for github/cicd by @cx-ricardo-jesus in #8089
• fix(query): fixed FP for sql server database without auditing for arm by @cx-ricardo-jesus in #8087
• fix(query): fix FP on unpinned package version in pip install for dockerfile by @cx-ricardo-jesus in #8090
• fix(query): fixed FP for web app not using tls last version by @cx-ricardo-jesus in #8091
• fix(query): fixed FP for website azure active directory disabled for arm by @cx-ricardo-jesus in #8088
• fix(query): ensures 'passwords and secrets' queries do not flag fields in 'Proto' files (.proto) by @cx-andre-pereira in #8013

New Contributors

• @stepsecurity-app[bot] made their first contribution in #8060
• @cx-ohad-israeli made their first contribution in #8070
• @cx-yevgeny-kuznetsov made their first contribution in #8071

Full Changelog: v2.1.20...v2.1.21