Allow default max capacity to be set

This release contains a bug fix - allow default max capacity to be set by allowing null value for max_group_prepared_capacity. This is better than setting to max size (tested in nomis account - fixes the issue).

This release also includes security updates (see What's Changed section for details).

What's Changed

• Bump ossf/scorecard-action from 2.3.1 to 2.3.3 by @dependabot in #318
• Bump bridgecrewio/checkov-action from 12.2740.0 to 12.2742.0 by @dependabot in #317
• Bump bridgecrewio/checkov-action from 12.2742.0 to 12.2743.0 by @dependabot in #319
• Bump bridgecrewio/checkov-action from 12.2743.0 to 12.2744.0 by @dependabot in #320
• DSOS-2759: allow default max capacity to be set by @drobinson-moj in #321

Full Changelog: v.2.5.3...v.2.5.4

v.2.5.3

What's Changed

• Bump bridgecrewio/checkov-action from 12.2655.0 to 12.2656.0 by @dependabot in #253
• Bump bridgecrewio/checkov-action from 12.2656.0 to 12.2657.0 by @dependabot in #254
• Bump bridgecrewio/checkov-action from 12.2657.0 to 12.2660.0 by @dependabot in #255
• Bump bridgecrewio/checkov-action from 12.2660.0 to 12.2664.0 by @dependabot in #257
• Bump actions/upload-artifact from 4.3.0 to 4.3.1 by @dependabot in #256
• Bump bridgecrewio/checkov-action from 12.2664.0 to 12.2669.0 by @dependabot in #258
• Bump bridgecrewio/checkov-action from 12.2669.0 to 12.2671.0 by @dependabot in #259
• Bump bridgecrewio/checkov-action from 12.2671.0 to 12.2672.0 by @dependabot in #260
• Bump bridgecrewio/checkov-action from 12.2672.0 to 12.2673.0 by @dependabot in #261
• Bump bridgecrewio/checkov-action from 12.2673.0 to 12.2674.0 by @dependabot in #262
• Bump bridgecrewio/checkov-action from 12.2674.0 to 12.2675.0 by @dependabot in #263
• Bump bridgecrewio/checkov-action from 12.2675.0 to 12.2676.0 by @dependabot in #264
• Bump bridgecrewio/checkov-action from 12.2676.0 to 12.2678.0 by @dependabot in #265
• Bump bridgecrewio/checkov-action from 12.2678.0 to 12.2680.0 by @dependabot in #266
• Bump actions/cache from 4.0.0 to 4.0.1 by @dependabot in #267
• Bump bridgecrewio/checkov-action from 12.2680.0 to 12.2683.0 by @dependabot in #268
• Bump bridgecrewio/checkov-action from 12.2683.0 to 12.2684.0 by @dependabot in #269
• Bump bridgecrewio/checkov-action from 12.2684.0 to 12.2685.0 by @dependabot in #270
• Bump bridgecrewio/checkov-action from 12.2685.0 to 12.2687.0 by @dependabot in #271
• Bump bridgecrewio/checkov-action from 12.2687.0 to 12.2688.0 by @dependabot in #273
• Bump actions/checkout from 4.1.1 to 4.1.2 by @dependabot in #272
• Bump bridgecrewio/checkov-action from 12.2688.0 to 12.2689.0 by @dependabot in #274
• Bump bridgecrewio/checkov-action from 12.2689.0 to 12.2690.0 by @dependabot in #276
• Bump google.golang.org/protobuf from 1.30.0 to 1.33.0 in /test by @dependabot in #275
• Bump bridgecrewio/checkov-action from 12.2690.0 to 12.2691.0 by @dependabot in #277
• Bump actions/cache from 4.0.1 to 4.0.2 by @dependabot in #278
• Bump bridgecrewio/checkov-action from 12.2691.0 to 12.2693.0 by @dependabot in #279
• Bump bridgecrewio/checkov-action from 12.2693.0 to 12.2695.0 by @dependabot in #280
• Bump bridgecrewio/checkov-action from 12.2695.0 to 12.2699.0 by @dependabot in #283
• Bump terraform-docs/gh-actions from 1.0.0 to 1.1.0 by @dependabot in #282
• Bump bridgecrewio/checkov-action from 12.2699.0 to 12.2700.0 by @dependabot in #284
• Bump bridgecrewio/checkov-action from 12.2700.0 to 12.2702.0 by @dependabot in #286
• Bump bridgecrewio/checkov-action from 12.2702.0 to 12.2703.0 by @dependabot in #287
• Bump bridgecrewio/checkov-action from 12.2703.0 to 12.2705.0 by @dependabot in #288
• Bump bridgecrewio/checkov-action from 12.2705.0 to 12.2707.0 by @dependabot in #289
• Bump bridgecrewio/checkov-action from 12.2707.0 to 12.2712.0 by @dependabot in #290
• Bump bridgecrewio/checkov-action from 12.2712.0 to 12.2717.0 by @dependabot in #291
• Bump bridgecrewio/checkov-action from 12.2717.0 to 12.2720.0 by @dependabot in #292
• Bump bridgecrewio/checkov-action from 12.2720.0 to 12.2723.0 by @dependabot in #295
• Bump actions/upload-artifact from 4.3.1 to 4.3.2 by @dependabot in #294
• Bump golang.org/x/net from 0.17.0 to 0.23.0 in /test by @dependabot in #296
• Bump actions/checkout from 4.1.2 to 4.1.3 by @dependabot in #297
• Bump bridgecrewio/checkov-action from 12.2723.0 to 12.2726.0 by @dependabot in #298
• Bump actions/upload-artifact from 4.3.2 to 4.3.3 by @dependabot in #299
• Bump hashicorp/setup-terraform from 3.0.0 to 3.1.0 by @dependabot in #300
• Bump actions/checkout from 4.1.3 to 4.1.4 by @dependabot in #301
• Bump github.com/hashicorp/go-getter from 1.7.0 to 1.7.4 in /test by @dependabot in #303
• Added trivy by @ep-93 in #302
• update README.md by @Khatraf in #305
• feature/6675-GitHub Action Status Badges by @Kudzai-moj in #306
• Bump bridgecrewio/checkov-action from 12.2726.0 to 12.2731.0 by @dependabot in #307
• Bump actions/setup-go from 5.0.0 to 5.0.1 by @dependabot in #308
• Bump bridgecrewio/checkov-action from 12.2731.0 to 12.2734.0 by @dependabot in #309
• Bump actions/checkout from 4.1.4 to 4.1.5 by @dependabot in #310
• Bump bridgecrewio/checkov-action from 12.2734.0 to 12.2736.0 by @dependabot in #311
• Bump hashicorp/setup-terraform from 3.1.0 to 3.1.1 by @dependabot in #312
• Bump aquasecurity/trivy-action from 0.19.0 to 0.20.0 by ...

v.2.5.2

What's Changed

• Bump bridgecrewio/checkov-action from 12.2653.0 to 12.2654.0 by @dependabot in #249
• Bump bridgecrewio/checkov-action from 12.2654.0 to 12.2655.0 by @dependabot in #250
• DSOS-2590: allow healthcheck protocol specify and remove unused variable by @drobinson-moj in #252

Full Changelog: v2.5.0...v2.5.2

v2.5.1

What's Changed

Fix SSM parameter and secrets policy.
Bug fix: changed "and" condition to "or". Ensures policy is created if either SSM Params or Secrets are created.
Best practice: add minimum possible permissions (e.g. only need Put if there are placeholder params/secrets)

• Bump bridgecrewio/checkov-action from 12.2599.0 to 12.2600.0 by @dependabot in #213
• DSOS-2423: ssm and secrets policy fix by @drobinson-moj in #214
• Bump bridgecrewio/checkov-action from 12.2600.0 to 12.2601.0 by @dependabot in #215

Full Changelog: v2.5.0...v2.5.1

v2.5.0

What's New

• SecretsManager secrets can now be populated with fixed or random values, and can have a recovery_window_in_days set.

What's Changed

• Bump bridgecrewio/checkov-action from 12.2598.0 to 12.2599.0 by @dependabot in #211
• DSOS-2406: align secretsmanager options with ssm by @drobinson-moj in #212

Full Changelog: v2.4.0...v2.5.0

v2.4.0

What's Changed

• Bump bridgecrewio/checkov-action from 12.2564.0 to 12.2567.0 by @dependabot in #199
• secretsmanager compatibility by @wullub in #200

New Contributors

• @wullub made their first contribution in #200

Full Changelog: v2.2.0...v2.4.0

v.2.3.0

What's Changed

• Bump bridgecrewio/checkov-action from 12.2564.0 to 12.2567.0 by @dependabot in #199
• secretsmanager compatibility by @wullub in #200

New Contributors

• @wullub made their first contribution in #200

Full Changelog: v2.2.0...v2.3.0

v2.2.0

What's Changed

• Bump actions/upload-artifact from 3.1.2 to 3.1.3 by @dependabot in #152
• Bump bridgecrewio/checkov-action from 12.2486.0 to 12.2490.0 by @dependabot in #153
• Bump bridgecrewio/checkov-action from 12.2490.0 to 12.2491.0 by @dependabot in #155
• Bump actions/cache from 3.3.1 to 3.3.2 by @dependabot in #157
• Bump bridgecrewio/checkov-action from 12.2491.0 to 12.2493.0 by @dependabot in #158
• Bump bridgecrewio/checkov-action from 12.2493.0 to 12.2494.0 by @dependabot in #159
• Bump bridgecrewio/checkov-action from 12.2494.0 to 12.2497.0 by @dependabot in #160
• Bump bridgecrewio/checkov-action from 12.2497.0 to 12.2500.0 by @dependabot in #161
• Bump bridgecrewio/checkov-action from 12.2500.0 to 12.2502.0 by @dependabot in #162
• Bump bridgecrewio/checkov-action from 12.2502.0 to 12.2503.0 by @dependabot in #163
• Bump actions/checkout from 3.6.0 to 4.0.0 by @dependabot in #150
• Bump bridgecrewio/checkov-action from 12.2503.0 to 12.2508.0 by @dependabot in #164
• Bump bridgecrewio/checkov-action from 12.2508.0 to 12.2509.0 by @dependabot in #165
• Bump actions/checkout from 4.0.0 to 4.1.0 by @dependabot in #166
• Bump terraform-linters/setup-tflint from 3.1.1 to 4.0.0 by @dependabot in #167
• Bump bridgecrewio/checkov-action from 12.2509.0 to 12.2511.0 by @dependabot in #168
• Bump bridgecrewio/checkov-action from 12.2511.0 to 12.2512.0 by @dependabot in #169
• Bump bridgecrewio/checkov-action from 12.2512.0 to 12.2516.0 by @dependabot in #170
• Bump bridgecrewio/checkov-action from 12.2516.0 to 12.2520.0 by @dependabot in #172
• Bump bridgecrewio/checkov-action from 12.2520.0 to 12.2521.0 by @dependabot in #173
• Bump bridgecrewio/checkov-action from 12.2521.0 to 12.2523.0 by @dependabot in #174
• Bump bridgecrewio/checkov-action from 12.2523.0 to 12.2526.0 by @dependabot in #175
• Bump ossf/scorecard-action from 2.2.0 to 2.3.0 by @dependabot in #176
• Bump golang.org/x/net from 0.7.0 to 0.17.0 in /test by @dependabot in #178
• Bump bridgecrewio/checkov-action from 12.2526.0 to 12.2527.0 by @dependabot in #177
• Bump bridgecrewio/checkov-action from 12.2527.0 to 12.2528.0 by @dependabot in #179
• Bump bridgecrewio/checkov-action from 12.2528.0 to 12.2530.0 by @dependabot in #180
• Bump bridgecrewio/checkov-action from 12.2530.0 to 12.2531.0 by @dependabot in #182
• Bump actions/checkout from 4.1.0 to 4.1.1 by @dependabot in #181
• Bump bridgecrewio/checkov-action from 12.2531.0 to 12.2533.0 by @dependabot in #183
• Bump bridgecrewio/checkov-action from 12.2533.0 to 12.2535.0 by @dependabot in #184
• Bump bridgecrewio/checkov-action from 12.2535.0 to 12.2539.0 by @dependabot in #185
• Bump ossf/scorecard-action from 2.3.0 to 2.3.1 by @dependabot in #186
• Bump bridgecrewio/checkov-action from 12.2539.0 to 12.2543.0 by @dependabot in #187
• Bump bridgecrewio/checkov-action from 12.2543.0 to 12.2552.0 by @dependabot in #190
• Bump google.golang.org/grpc from 1.53.0 to 1.56.3 in /test by @dependabot in #189
• Workflow fix by @markgov in #191
• Bump bridgecrewio/checkov-action from 12.2552.0 to 12.2556.0 by @dependabot in #194
• Bump hashicorp/setup-terraform from 2.0.3 to 3.0.0 by @dependabot in #192
• Bump bridgecrewio/checkov-action from 12.2556.0 to 12.2559.0 by @dependabot in #195
• adding disable api stop attribute by @haitchison in #196
• Bump bridgecrewio/checkov-action from 12.2559.0 to 12.2564.0 by @dependabot in #197

New Contributors

• @markgov made their first contribution in #191
• @haitchison made their first contribution in #196

Full Changelog: v2.1.1...v2.1.2

v2.1.1

What's Changed

• Bump bridgecrewio/checkov-action from 12.2420.0 to 12.2425.0 by @dependabot in #119
• Bump bridgecrewio/checkov-action from 12.2425.0 to 12.2427.0 by @dependabot in #120
• Bump bridgecrewio/checkov-action from 12.2427.0 to 12.2431.0 by @dependabot in #122
• Bump bridgecrewio/checkov-action from 12.2431.0 to 12.2436.0 by @dependabot in #123
• Bump bridgecrewio/checkov-action from 12.2436.0 to 12.2439.0 by @dependabot in #124
• Bump bridgecrewio/checkov-action from 12.2439.0 to 12.2443.0 by @dependabot in #125
• Bump bridgecrewio/checkov-action from 12.2443.0 to 12.2445.0 by @dependabot in #126
• Bump bridgecrewio/checkov-action from 12.2445.0 to 12.2447.0 by @dependabot in #127
• Bump bridgecrewio/checkov-action from 12.2447.0 to 12.2450.0 by @dependabot in #128
• Bump bridgecrewio/checkov-action from 12.2450.0 to 12.2451.0 by @dependabot in #129
• Bump bridgecrewio/checkov-action from 12.2451.0 to 12.2454.0 by @dependabot in #130
• Bump bridgecrewio/checkov-action from 12.2454.0 to 12.2455.0 by @dependabot in #132
• Bump actions/setup-go from 4.0.1 to 4.1.0 by @dependabot in #131
• Bump bridgecrewio/checkov-action from 12.2455.0 to 12.2456.0 by @dependabot in #133
• Bump bridgecrewio/checkov-action from 12.2456.0 to 12.2460.0 by @dependabot in #134
• Bump bridgecrewio/checkov-action from 12.2460.0 to 12.2461.0 by @dependabot in #135
• Bump bridgecrewio/checkov-action from 12.2461.0 to 12.2463.0 by @dependabot in #136
• Bump bridgecrewio/checkov-action from 12.2463.0 to 12.2464.0 by @dependabot in #137
• Bump bridgecrewio/checkov-action from 12.2464.0 to 12.2467.0 by @dependabot in #138
• Bump bridgecrewio/checkov-action from 12.2467.0 to 12.2468.0 by @dependabot in #139
• Bump bridgecrewio/checkov-action from 12.2468.0 to 12.2472.0 by @dependabot in #142
• Bump actions/checkout from 3.5.3 to 3.6.0 by @dependabot in #141
• Bump bridgecrewio/checkov-action from 12.2472.0 to 12.2476.0 by @dependabot in #144
• Bump terraform-linters/setup-tflint from 3.0.0 to 3.1.0 by @dependabot in #143
• Bump bridgecrewio/checkov-action from 12.2476.0 to 12.2479.0 by @dependabot in #145
• MOJ Compliant Badge Update by @ASTRobinson in #146
• Bump bridgecrewio/checkov-action from 12.2479.0 to 12.2483.0 by @dependabot in #147
• Bump terraform-linters/setup-tflint from 3.1.0 to 3.1.1 by @dependabot in #148
• Bump bridgecrewio/checkov-action from 12.2483.0 to 12.2486.0 by @dependabot in #149
• DS0S-2124: allow placeholder ssm params by @drobinson-moj in #154

New Contributors

• @ASTRobinson made their first contribution in #146

Full Changelog: v2.1.0...v2.1.1

Introducing additional tags.

Adding finer control over tagging. Allow additional (optional) tags specific to ec2_instance and ebs_volume resources. This allows to add a backup tag to only the ec2_instance resource, thus avoiding duplicate ec2 and ebs backups.

Additionally, this release contains security updates, see What's Changed for more details.

What's Changed

• Bump bridgecrewio/checkov-action from 12.2391.0 to 12.2393.0 by @dependabot in #100
• Bump bridgecrewio/checkov-action from 12.2393.0 to 12.2395.0 by @dependabot in #101
• Bump bridgecrewio/checkov-action from 12.2395.0 to 12.2398.0 by @dependabot in #102
• Bump bridgecrewio/checkov-action from 12.2398.0 to 12.2400.0 by @dependabot in #103
• Bump ministryofjustice/github-actions from 13 to 14 by @dependabot in #105
• Bump ossf/scorecard-action from 2.1.3 to 2.2.0 by @dependabot in #104
• Bump bridgecrewio/checkov-action from 12.2400.0 to 12.2402.0 by @dependabot in #106
• Bump bridgecrewio/checkov-action from 12.2402.0 to 12.2404.0 by @dependabot in #107
• Bump bridgecrewio/checkov-action from 12.2404.0 to 12.2406.0 by @dependabot in #108
• Bump bridgecrewio/checkov-action from 12.2406.0 to 12.2407.0 by @dependabot in #109
• Bump bridgecrewio/checkov-action from 12.2407.0 to 12.2408.0 by @dependabot in #110
• Bump bridgecrewio/checkov-action from 12.2408.0 to 12.2409.0 by @dependabot in #111
• Bump bridgecrewio/checkov-action from 12.2409.0 to 12.2410.0 by @dependabot in #112
• Bump google.golang.org/grpc from 1.51.0 to 1.53.0 in /test by @dependabot in #113
• Bump bridgecrewio/checkov-action from 12.2410.0 to 12.2412.0 by @dependabot in #114
• Bump bridgecrewio/checkov-action from 12.2412.0 to 12.2416.0 by @dependabot in #115
• Bump bridgecrewio/checkov-action from 12.2416.0 to 12.2418.0 by @dependabot in #116
• Bump bridgecrewio/checkov-action from 12.2418.0 to 12.2420.0 by @dependabot in #117
• DSOS-1987: allow specific tags for ec2 and ebs resources by @drobinson-moj in #118

Full Changelog: v2.0.0...v2.1.0