7.0.2

Changelog

• be45519 Add target PodTemplate which exposes the full Pod (not only the spec) (#801)
• f9e2603 Bump alpine from 3.16.0 to 3.16.1 (#810)
• 7addced Bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0 (#815)
• 76c42c4 Bump github.com/spf13/cobra from 1.4.0 to 1.5.0 (#813)
• 4103032 Bump github.com/stretchr/testify from 1.7.1 to 1.8.0 (#786)
• 65add73 Bump k8s.io/api from 0.24.1 to 0.24.3 (#808)
• af0d548 Bump k8s.io/apimachinery from 0.24.1 to 0.24.3 (#807)
• 3efa3b4 Bump k8s.io/client-go from 0.24.1 to 0.24.3 (#806)
• 7e77350 Bump sigs.k8s.io/controller-runtime from 0.12.1 to 0.12.3 (#814)
• e5b9236 FWI-2476: Add missingNetworkPolicy, automountServiceAccountToken, and linuxHardening checks (#816)
• 2063222 FWI-2509: Add sensitiveContainerEnvVar and sensitiveConfigMapContent checks (#817)
• 50d789f Fix resourceKindMap.addResource() to not assume every Kind has an APIGroup (#805)
• e3a6cb3 Fix namespace checking when validating additional schemas which are not namespaced (#822)
• a0000e1 Suppress empty results when --only-show-failed-tests is passed (#811)
• 25ab600 Update docs to reflect target: PodTemplate RE: PR #801 (#804)
• c3b57bf target: container also populates .Polaris.PodSpec|PodTemplate + a new .Polaris.Container representing the currently checked container, GetPodTemplate serializes data to work around a DeepCopy bug with type int (#812)
• ccaa384 expose Polaris.PodSpec for PodSpec targeted checks (#793)
• b90f091 fix polaris cves (#824)
• 652b65b fix: properly remove emojis in pretty format with no color (#765)

You can verify the signature of the checksums.txt file using cosign.

cosign verify-blob checksums.txt --signature=checksums.txt.sig  --key https://artifacts.fairwinds.com/cosign.pub

7.0.1

Changelog

• fec0089 Update fairwinds-insights.yaml (#799)
• 1c09ce9 update changelog and docs (#800)

You can verify the signature of the checksums.txt file using cosign.

cosign verify-blob checksums.txt --signature=checksums.txt.sig  --key https://artifacts.fairwinds.com/cosign.pub

7.0.0

Changelog

• f713d43 ensure path exists when adding mutations (#789)
• e3e7900 Add checks flag to fix specific checks (#797)
• c3eb081 Add flag to enable mutations in webhook (#794)
• a2ec025 Add more mutations, fix mutation tests (#790)
• 276c168 Bump alpine from 3.15.4 to 3.16.0 (#773)
• f71ca99 Change target: Pod to target: PodSpec (#726)
• 0868207 Enable pullPolicyNotAlways (#795)
• e896eec Expose GetValidateResults function to be used in the polaris package (#763)
• 5423449 Use orb to publish docs (#791)
• acadebe add docs for mutation (#792)
• 92f0b6e fix issue when the files-path is actual file path instead of directory (#761)
• 50319fb fix webhook test (#798)
• 3b865fc skip incomplete or broken YAML - warn user (#678)
• 25a120b update dependencies (#777)

You can verify the signature of the checksums.txt file using cosign.

cosign verify-blob checksums.txt --signature=checksums.txt.sig  --key https://artifacts.fairwinds.com/cosign.pub

6.0.0

Changelog

• a59063b Add fix command to mutate and update IaC (#746)
• 6b7d6ab Added Mutation webhook (#755)
• 321bfa8 Added more mutations and refactor test to test each mutation separately (#734)
• 57d0ae3 Bump alpine from 3.15.3 to 3.15.4 (#745)
• c597b16 Managed by Terraform
• c92819c Save last podspec when walking owner hierarchy (#748)
• 322e6f7 fix kinds (#752)
• 8a8ac2d update go modules (#743)
• 6c33168 update release process (#744)

You can verify the signature of the checksums.txt file using cosign.

cosign verify-blob checksums.txt --signature=checksums.txt.sig  --key https://artifacts.fairwinds.com/cosign.pub

5.2.0

Changelog

• 78838a6 Add a --namespace flag to the in-cluster audit (#742)
• a4c0b0f Add mutation field to imagePolicyNotAlways (#712)
• a7e3007 Bump alpine from 3.15.0 to 3.15.1 (#731)
• f2833f2 Bump alpine from 3.15.1 to 3.15.2 (#733)
• 82d3663 Bump alpine from 3.15.2 to 3.15.3 (#739)
• 861fd42 Bump golang from 1.17.7 to 1.17.8 (#716)
• bd8b296 Fix license headers (#736)
• 1841b74 audit check specific checks when passing checks args (#737)
• fd16fb9 merge the list of resources from custom checks and the generated controller list before deduplicating them (#727)
• ce8786b update x/text (#740)

You can verify the signature of the checksums.txt file using cosign.

cosign verify-blob checksums.txt --signature=checksums.txt.sig  --key https://artifacts.fairwinds.com/cosign.pub

5.1.0

Changelog

• b1e22ab Bump alpine from 3.14 to 3.15.0 (#704)
• 5e4d6bd Bump github.com/spf13/cobra from 1.2.1 to 1.3.0 (#687)
• e61c50a Bump golang from 1.16 to 1.17.7 (#705)
• afe718b Managed by Terraform
• f429f19 Nobletrout/add kubectx support (#719)
• ef50fbb Release 5.1 (#720)
• 06322dc bounce out once we hit a type we know to avoid CRD problems (#718)

You can verify the signature of the checksums.txt file using cosign.

cosign verify-blob checksums.txt --signature=checksums.txt.sig  --key https://artifacts.fairwinds.com/cosign.pub

5.0.0

Changelog

268f0e6 Correct URL to download polaris tar (#660)
fa24382 Delete .github/ISSUE_TEMPLATE/bug.yaml
675eb15 Delete .github/ISSUE_TEMPLATE/bug_report.md
40fbe9c Delete .github/ISSUE_TEMPLATE/bug_report.md
6d89e6b Delete .github/stale.yml
31e9f22 Managed by Terraform
a7aef2a Managed by Terraform
19d3af9 Managed by Terraform
6bebdb8 Managed by Terraform
d695a20 Managed by Terraform
be80d91 Managed by Terraform
975b829 Managed by Terraform
0e2212d Managed by Terraform
94e74e3 Managed by Terraform
008a7cb Managed by Terraform
8584110 Managed by Terraform
5e1f758 Managed by Terraform
1731feb Managed by Terraform
e31f3f1 Managed by Terraform
e91b9b8 Update serverity for polaris check (#690)
5acdc4a fix: add space before "in namespace" output (#650)

4.2.0

Changelog

89dfce5 Bump github.com/fatih/color from 1.12.0 to 1.13.0 (#641)
5aa397c Bump github.com/thoas/go-funk from 0.9.0 to 0.9.1 (#624)
8c454fa Bump k8s.io/api from 0.22.1 to 0.22.2 (#630)
1b97f31 Bump sigs.k8s.io/controller-runtime from 0.10.0 to 0.10.1 (#640)
1934120 Bump sigs.k8s.io/yaml from 1.2.0 to 1.3.0 (#639)
d41ce88 Update README.md (#627)
a62389b Update documentation from template (#634)
32c1150 config: new flags '--disallow-(config|annotation)-exemptions' (#636)
0f1d4cd fix configuration syntax for goreleaser (#644)
c398f10 prep for 4.2.0 release and helm chart update (#643)
091fa77 update goreleaser and make sure to build darwin arm build for homebrew (#642)

4.1.0

Changelog

bb7ba83 Bump sigs.k8s.io/controller-runtime from 0.9.6 to 0.10.0 (#621)
310015f bump to 4.1.0 (#623)
19bf91e change test for PDB disruptions (#620)
c0d8eb6 handle case-insensitivity for capabilities (#619)

4.0.9

Changelog

195619f empty commit