v2.2.1

What's Changed

• fix(actions): standardize kicsbot automation branch names under feature/kicsbot-* by @cx-lior-poterman in #8129
• fix(queries): Rename query "Not Using JSON In CMD And ENTRYPOINT Arguments" to "Not Using proper exec form In CMD And ENTRYPOINT Arguments" by @cx-laura-rodrigues in #8131
• fix(query): various fixes for passwords and secrets queries by @cx-andre-pereira in #8117
• fix(vulnerabilities): update package versions to fix vulnerabilities by @cx-artur-ribeiro in #8137
• fix(parse): rename resource name to fix "failed to parse file content" error by @cx-artur-ribeiro in #7962
• docs(queries): clarify riskScore type in query metadata by @cx-artur-ribeiro in #8138
• fix(detector): fix data race in dockerfile line detection for multiple dockerfiles projects by @cx-artur-ribeiro in #8121
• fix(query): improve "last user is root" dockerfile query coverage by @cx-andre-pereira in #8123
• fix(queries): correct mismatched expected/actual values across 22 queries by @cx-artur-ribeiro in #8120
• test(action): test kics-github-action changes by @cx-artur-ribeiro in #8139
• docs(contributing): fix wrong E2E fixture path and typos across docs by @toyeshhm in #8127
• fix(ids): remove duplicated query ids from password and secrets aws queries by @cx-artur-ribeiro in #8142
• ci(release): AST-186869 allow release-docker-image to build a given tag by @cx-lior-poterman in #8146
• ci(release): AST-186869 unblock release-docker-image under StepSecurity policy by @cx-lior-poterman in #8147
• ci(release): AST-186869 fix Docker Hub token expiry and automate release publish by @cx-lior-poterman in #8148
• test(query): minor adjustments to passwords and secrets start-of-file sample comments by @AndrePereira123 in #8145
• ci(release): AST-186869 push prebuilt OCI archives with a fresh login by @cx-lior-poterman in #8149
• ci(release): AST-186869 clean build cache after each image build by @cx-lior-poterman in #8150
• fix(version): update version prefix comparison with latest version by @cx-artur-ribeiro in #8155
• test(pwd): add password and secrets timeout test coverage by @cx-artur-ribeiro in #8156
• fix(queries): fixed fp on terraform/aws network acl with unrestricted access to rdp/ssh queries by @cx-ricardo-jesus in #8151
• fix(query): fixed FP on Security Operations Empty Object Definition for OpenAPI by @cx-ricardo-jesus in #8159
• fix(query): fixed FP on Response Code Missing query for OpenAPI by @cx-ricardo-jesus in #8160
• fix(vulnerabilities): update dockerfile images by @cx-artur-ribeiro in #8165
• fix(query): add missing case on Response Code Missing query for OpenAPI by @cx-artur-ribeiro in #8168
• ci(release): use a GitHub App token for release automation pushes by @cx-lior-poterman in #8164
• docs(release): preparing for release 2.2.1 by @cx-kics-release[bot] in #8174
• fix(action): remove ms-teams-deploy-card from github actions by @cx-artur-ribeiro in #8175
• docs(queries): update queries catalog by @cx-kics-release[bot] in #8176

New Contributors

• @toyeshhm made their first contribution in #8127
• @AndrePereira123 made their first contribution in #8145
• @cx-kics-release[bot] made their first contribution in #8174

Full Changelog: v2.2.0...v2.2.1