Use xOpera TOSCA parser and Steampunk Scanner

We are releasing version 0.1.7 of our IaC Scan Runner. This version brings and updates two checks for scanning OASIS TOSCA templates and CSARs with opera-tosca-parser and Ansible entities with steampunk-scanner:

• xOpera TOSCA parser
• Steampunk Scanner

You can find more info in our docs here: https://xlab-si.github.io/iac-scanner-docs/.

Smaller Docker image and cloc check

The new version of the IaC Scan Runner brings some smaller API changes and a way smaller Docker image. It also includes a new cloc check for counting lines of code within IaC.

You can find more info here: https://xlab-si.github.io/iac-scanner-docs/.

Include Snyk and SonarScanner

This is version 0.1.5 of IaC Scan Runner. Apart from some API updates and check installation fixes, this release brings first two remote service checks Snyk and SonarScanner. You can find more about how to use them in our docs here: https://xlab-si.github.io/iac-scanner-docs/.

Validate TOSCA and check Java

Let's release 0.1.4 of our IaC Scan Runner. This version contains two new checks for scanning OASIS TOSCA templates and CSARs with xOpera orchestrator's validate CLI command and scanning style of Java files:

• xOpera TOSCA orchestrator
• Checkstyle

You can find more info in our docs here: https://xlab-si.github.io/iac-scanner-docs/.

Scan web-based solutions

We are releasing version 0.1.3 for IaC Scan Runner. This release includes the following four new checks for scanning vulnerabilities within web apps:

• ESLint
• TSLint (TypeScript ESLint)
• HTMLHint
• Stylelint

You can read more about them in our docs here: https://xlab-si.github.io/iac-scanner-docs/.

Scan with hadolint, Gixy and ShellCheck

This IaC Scan Runner release is for version 0.1.1 and introduces three new checks that can scan for vulnerabilities within Dockerfiles, Nginx configuration and shell scripts:

• hadolint
• Gixy
• ShellCheck

You can discover more in our docs here: https://xlab-si.github.io/iac-scanner-docs/.

0.0.9 scans Git repositories

Version 0.0.9 of the IaC Scan Runner brings three checks that can scan for vulnerabilities within Git repositories and these are:

• Gitleaks
• git-secrets
• Markdown lint

For more info navigate to: https://xlab-si.github.io/iac-scanner-docs/.

0.0.8 comes with Python checks

The new version of the IaC Scan Runner includes three Python checks which are:

• Pylint
• Bandit
• PyUp Safety

You can find more info on how to use them here: https://xlab-si.github.io/iac-scanner-docs/.

0.0.7 introduces yamllint

This version brings a new check called yamllint that will be able to find errors in YAML templates.

Apart from that we also enabled enabling, disabling and configuring checks with the new API endpoints. YOu can find more info on that in our documentation.

0.0.3 brings Terraform checks

This version brings the following checks for Terraform:

• TFLint
• tfsec
• Terrascan

We have also set up a documentation here: https://xlab-si.github.io/iac-scanner-docs/.