- Support Resource Group Hierarchy
- Add Risk Score to observations, calculated from the severity of the observation (as defined in the rule) and the impact of the observation (detected from the environment)
- Collectors can now collect observations
- Improved stats view
- Improved export to CSV
- Add support for Security Command Center (SCC)
- Start collecting Kubernetes resources
- Use GORM for both the PSQL and SQLite storage backends
- Use SQLite for the in-memory database for testing
- Increase performance overall by optimizing the DB queries, parallelizing the scans, and reducing the number of external calls
- Introduce rate limiting for the collectors
- Use logrus with structured logging for GCP Logging (Stackdriver)
- Add support for OpenTelemetry
- Add an otel-collector to receive traces and metrics
- Send traces to Google Cloud Trace
- Send metrics to Google Cloud Monitoring
- Completely rework the UI with an improved design
- Show observations as a table, sorted by Risk Score by default
- Add a detailed view dialog for the observations
- Use
go-argfor the CLI arguments / environment variables - Switch to buf for the protobuf generation
- Bug fixes
- Upgrade to Go 1.23
- Rules now support external configuration
- Moved to go 1.19
- Added automated runs for scans
- Fixed issue where last reported observation would still appear even if newer scans reported no observations
- Fixed group member ship resolution when checking for accesses to GCP projects
- Initial public release