Raqib v0.13.0

Raqib v0.13.0

A rebuilt browser explorer that finally shows the whole tool, plus a small text fix. No change to the checks.

The explorer, across four clouds

The example report at siteq8.github.io/Raqib/report.html was a static AWS only page. It is now an interactive report across AWS, Azure, GCP, and Kubernetes that shows every finding the engine produces:

• A cloud by tactic matrix at the top, the six tactics read across every cloud at a glance.
• Live filtering by cloud, attacker tactic, severity, and free text, with the summary counts updating as you filter.
• Every finding carries its severity, the principal it concerns, the change that closes it, and the MITRE ATT&CK technique it defends against.
• The findings are written into the page, so it reads with no script and the filtering is progressive enhancement on top.

Docs that cannot drift

A new generator, docs/build_explorer.py, runs the engine over the samples and rebuilds both the explorer and the landing page, including its version. The landing explorer had been showing an old, partial finding set; it now reflects the current build, and stays in step with the engine on every change.

Also

• Fixed a hyphen in one finding text to match the house style.
• 137 tests pass, the bash scanner and the Python engine still in lockstep.

Independent tool, not affiliated with or endorsed by any cloud provider. Read only: it lists and describes authorization configuration and never changes anything.