Skip to content

InfraScan v1.1.1

Marketplace
Marketplace

Choose a tag to compare

View all tags
@jkondrat jkondrat released this 18 Sep 14:53
· 20 commits to main since this release
v1.1.1
0720e52
This commit was signed with the committer’s verified signature.
jkondrat Jakub Kondrat
GPG key ID: C5AD92DE83610160
Verified
Learn about vigilant mode.

InfraScan 1.1.1 Release Notes

This release contains all changes since v1.1.0.

Highlights

  • feat: improve PR comments: display all new findings by default
  • fix: raise grype per-image timeout to cover large image pulls
  • fix: container scanning silently failing under non-default uid
  • fix: show container CVEs in PR comment findings
  • fix: prevent stored/reflected XSS via repository_url and add nginx rate limits

Other changes

  • The GitHub Action's framework input now defaults to smart (was auto), matching the CLI and web UI. smart scans all detected frameworks in a multi-framework repo instead of silently picking one and ignoring the rest — existing workflows that don't set framework: explicitly may see additional findings after this update.
  • action.yml's description and framework input docs updated to reflect Helm/CloudFormation/Ansible security-scanning support (cost estimation remains Terraform-only).

Notes

  • The application version has been updated to 1.1.1.
  • The Marketplace quick-start example now pins the rolling @v1 tag instead of a specific patch version.
Assets 2
Loading