Releases · ZupIT/horusec

28 Dec 13:23

v1.4.2

Fix keycloak environments
Update logs of gRCP communication
Add gRCP in health check route in horusec-account, horusec-api, horusec-analytics, horusec-auth
Update CLI configs
- DEPRECATED flag tools-ignore
- Add new option horusecCliToolsConfig for usage only horusec-config.json file with this option you can ignore an tool and pass image path if this tool is private in other repository
- Add new option config-file-path for usage in global flags for pass location of your horusec-config.json very usage in horusec-cli image docker
- Deprecating options that use a list in a string format such as "HASH1, HASH2" can now be used as an array in the horusec-config.json file

Assets 7

14 Dec 16:26

v1.4.1

Updates:

New flag to bind path locally with horusec-cli docker image and change entry point in image;
Change Horusec-CLI to usage docker sock locally, improving analysis performance.

Assets 7

08 Dec 21:08

v1.4.0

Assets 7

23 Nov 13:36

v1.3.0

Adding suport for:
- Javascript(nodejs, web-applications)
- Typescript
- C#(.net framework, .net, .net 5, .netcore 3.x)
- Kubernetes(yaml)
- PHP
- C
- HTML
- JSON
New feature:
- Adding webhook to dispatch analysis object with http-request
- Integration with new tools in analysis: (semgrep, horusec-csharp, horusec-nodejs, horusec-kubernetes, eslint)
Update:
- Fix nil pointer when not found code in vulnerability using horusec-engine
- Fix some regexes in horusec-java and horusec-leaks
- Migrate routes of auth-users of horusec-account to horusec-auth
- Migrate horusec-lp to private repository
- Change log error to warn if not found package-lock or .csproject or requirements.txt

Versions:

Assets 7

09 Nov 19:21

v1.2.0

Assets 7

19 Oct 11:43

v1.1.0

Getting automatic csproj, package-lock, requirements
Fixing dashboard of company visible only admin
Removing fields Type, VulnerabilityBellow and Version from analysis
Adding New permission supervisor
Adding token of organization
Adding create repository when pass via CLI using token of organization
Adding screen not found
Change to repository and user unique names
Adding screen to manipulate false positives, risk accept, vulnerabilities and corrected
Adding flag to skip and not broken pipeline if hash is false positive
Adding flag to skip and not broken pipeline if hash is risk accept
Adding CLI image to docker
Removing DEPRECATED manager
Fixing regexes in horusec-java