🚀 InfraScan v1.0.4 is here! Enhanced Pipeline Visibility, Zero-Config Scans, and more!

[igor-soldev]

We are excited to announce the release of InfraScan v1.0.4! This update focuses on making security and cost auditing even more seamless for both developers in their local environments and DevOps engineers in CI/CD pipelines.

🌟 What's New?

📊 Beautiful Terminal Reports (Pipeline Visibility)

Gone are the days of downloading HTML artifacts just to see why your build failed.

• New Feature: Even when generating HTML or JSON reports, InfraScan now prints a full, colorized summary of findings directly to your terminal/CI log.
• Benefit: Immediate visibility into vulnerabilities and cost leaks during pipeline execution.

🐳 "Just Works" Container Scanning

We've made container analysis much more robust:

• Zero-Config Fallback: If Docker Scout isn't logged in or fails, InfraScan automatically falls back to Grype to ensure you always get security results.
• Amazon ECR Support: Automatic authentication with ECR registries using the AWS CLI.
• Smart Image Mapping: Full support for environment variables in docker-compose.yml image names, including ${VAR:-default} syntax.

🌐 Web & UI Improvements

The Web interface got some love too:

• Accessibility: Added SkipLinks and improved accessibility IDs for better navigation with screen readers.
• Robust Reporting: Fixed "413 Request Entity Too Large" issues, allowing for much larger scan reports to be saved and analyzed.
• Performance: Optimized the unified Docker image for faster startup.

🏗️ CI/CD Enhancements

• Auto-Cancellation: Added support for auto-canceling redundant builds in Bitbucket Pipelines to save on runner minutes.
• Flexible Failures: New --fail-on options for specific grades (e.g., grade_c) and priorities.

---

🚀 How to get it?

If you are using Docker, just pull the latest version:

docker pull soldevelo/infrascan:latest

Or run it directly:

docker run --rm -v $(pwd):/scan soldevelo/infrascan:latest

💬 We want to hear from you!

Have you tried the new terminal reports? Is there a cost optimization pattern we missed?

• Join our Slack: Join the Community
• Drop a comment below with your feedback!

Happy Auditing! 🛡️💰