secureCodeBox Release v2.6.0 🎉

[rseedorff]

Changes

This release contains the following changes 🎉. Help spread the word or leave a GitHub star if you like it 😉

🚓 Security Scanner

• Added a New WebFrontend Scanner: AngularJS CSTI Scanner (closes 🚓 Integrate a new Angular Client-Side Template Injection Scanner #216) @paulschmelzer (New Scanner: AngularJS CSTI Scanner (closes #216) #248)
• Refactored the Python Code for the Git-Repo-Scanner @paulschmelzer (👨‍🏭 Git-Repo-Scanner Refactoring #358)
• Expanded SSLyze CascadingRules for HTTPS @luckolen (Expanded SSLyze CascadingRules for HTTPS #356)

⚓️ Hooks

• Add new Persistence-Provider Hook to Import Scan Results into OWASP DefectDojo @J12934 (Add new Persistence-Provider Hook to Import Scan Results into OWASP DefectDojo #300)
• Reimporting SCB Findings from OWASP DefectDojo after persisting them @J12934 (Reimporting SCB Findings from OWASP DefectDojo after persisting them #330)

🐛 Bug Fixes

• Fixed HelmChart Hook Templates @rseedorff (Fixed HelmChart Hook Templates #367)
• Fixed File Mount Options For Hook CRD @fuhrmeistery (Fixed File Mount Options For Hook CRD #337)

🧪 Test

• Implemented End-2-End test for the gitleaks scanner (closes 🧪 Implement a end-2-end test for the gitleaks scanner #273) @twwd (Implemented End-2-End test for the gitleaks scanner (closes #273) #336)

📚 Documentation

• Release And Bugfixing Strategy @fuhrmeistery (Release And Bugfixing Strategy #353)
• Added missing metadata to ⛑ HelmCharts @rseedorff (Added missing metadata to ⛑ HelmCharts #354)
• Added first ASCII CLI example video as SVG @rseedorff (Added first ASCII CLI example video as SVG #344)

🔧 Maintenance

• Remove auto-generated Java Classes for unused fields of Scan CRD #thisIsNoJavaRepo @J12934 (Remove auto-generated Java Classes for unused fields of Scan CRD #thisIsNoJavaRepo #341)
• Improving and bugfixing the github issue templates @rseedorff (Improving and bugfixing the github issue templates #333)

📌 Dependencies

• Update to JuiceShop v12.7.0 @J12934 (Update to JuiceShop v12.7.0 #366)
• Updated GitLeaks to v7.3.0 @rseedorff (Updated GitLeaks to v7.3.0 #312)
• Update to JuiceShop v12.6.1 @J12934 (Update to JuiceShop v12.6.1 #359)
• Bump y18n from 4.0.0 to 4.0.1 in /hooks @dependabot (Bump y18n from 4.0.0 to 4.0.1 in /hooks #352)
• Bump y18n from 4.0.0 to 4.0.1 in /hooks/persistence-elastic @dependabot (Bump y18n from 4.0.0 to 4.0.1 in /hooks/persistence-elastic #351)
• Bump y18n from 4.0.0 to 4.0.1 in /hooks/update-field @dependabot (Bump y18n from 4.0.0 to 4.0.1 in /hooks/update-field #350)
• Bump y18n from 4.0.0 to 4.0.1 @dependabot (Bump y18n from 4.0.0 to 4.0.1 #349)
• Bump y18n from 4.0.0 to 4.0.1 in /hooks/declarative-subsequent-scans @dependabot (Bump y18n from 4.0.0 to 4.0.1 in /hooks/declarative-subsequent-scans #347)
• Bump y18n from 4.0.0 to 4.0.1 in /hooks/generic-webhook @dependabot (Bump y18n from 4.0.0 to 4.0.1 in /hooks/generic-webhook #346)
• Bump y18n from 4.0.0 to 4.0.1 in /scanners @dependabot (Bump y18n from 4.0.0 to 4.0.1 in /scanners #348)
• [Snyk] Upgrade ws from 7.4.3 to 7.4.4 @snyk-bot ([Snyk] Upgrade ws from 7.4.3 to 7.4.4 #345)
• [Snyk] Upgrade ws from 7.4.3 to 7.4.4 @snyk-bot ([Snyk] Upgrade ws from 7.4.3 to 7.4.4 #342)
• [Snyk] Upgrade @kubernetes/client-node from 0.13.2 to 0.14.0 @snyk-bot ([Snyk] Upgrade @kubernetes/client-node from 0.13.2 to 0.14.0 #329)
• [Snyk] Upgrade @kubernetes/client-node from 0.13.2 to 0.14.0 @rseedorff ([Snyk] Upgrade @kubernetes/client-node from 0.13.2 to 0.14.0 #326)
• [Snyk] Upgrade @kubernetes/client-node from 0.13.2 to 0.14.0 @rseedorff ([Snyk] Upgrade @kubernetes/client-node from 0.13.2 to 0.14.0 #324)
• Update SCB Scanner dependencies @rseedorff (Update SCB Scanner dependencies #315)

Distribution

Contributers

Thx to all our contributers supporting this project 🤗
@J12934, @dependabot, @dependabot[bot], @fuhrmeistery, @luckolen, @luckolen-secura, @rseedorff, @snyk-bot, @twwd and @paulschmelzer

---

This discussion was created from the release v2.6.0.