Fixed the example query in the plugin documentation to use the correct column name exec_output instead of output. (#63) (Thanks @pdecat for the contribution!!)
Dependencies
Recompiled plugin with Go version 1.24.
Recompiled plugin with steampipe-plugin-sdk v5.13.0 that addresses critical and high vulnerabilities in dependent packages.
The plugin configuration format has changed to support the REST API.
You must now configure either OAuth client credentials or an access token for authentication. Please refer to the Configuration section for additional information.
API Migration
Migrated from Vanta's deprecated GraphQL API to the new REST API.
Queries, dashboards, and benchmarks that reference removed columns (listed below) will fail until updated.
Removed Columns
vanta_computer
agent_version
hostname
host_identifier
last_ping
num_browser_extensions
endpoint_applications
installed_av_programs
installed_password_managers
unsupported_reasons
organization_name
vanta_evidence
title
evidence_request_id
category
uid
app_upload_enabled
restricted
dismissed_status
renewal_metadata
organization_name
vanta_group
checklist
embedded_idp_group
organization_name
vanta_integration
description
application_url
installation_url
logo_slug_id
credentials
integration_categories
service_categories
organization_name
vanta_monitor
controls
organization_name
vanta_policy
policy_type
created_at
updated_at
employee_acceptance_test_id
num_users
num_users_accepted
source
acceptance_controls
approver
standards
uploaded_doc
uploader
organization_name
vanta_user
is_from_scan
needs_employee_digest_reminder
is_not_human
vanta_vendor
vendor_risk_locked
owner
risk_profile
organization_name
Migration Notes
Reason for change: Vanta has ended GraphQL API support; the REST API is now the only supported interface.
Action required:
Update SQL queries to remove or replace references to removed columns.
Review table documentation for updated field availability.
Added rate-limiter tags to all tables which can be used to smooth request rates and limit the number of parallel requests to avoid hitting API rate limits. (#904)
Added diagnostic_settings column to azure_app_service_web_app table. (#921)
Added default_blob_diagnostic_settings, default_file_diagnostic_settings, default_table_diagnostic_settings and default_queue_diagnostic_settings columns to azure_storage_account table. (#918)
Added key_policy column to azure_storage_account table. (#922)
Bug fixes
Fixed the azure_storage_account table to correctly handle the no such host error for premium type storage account. (#922)
Fixed the diagnostic_settings column in azure_key_vault table to correctly return data instead of null. (#915)
Fixed azure_data_protection_backup_vault and azure_security_center_contact tables to correctly return data instead of an error. (#917)
Fixed the azure_security_center_contact table to correctly return data instead of null. (#902)
Fixed the containers_resources_limits_std and containers_resources_requests_std columns in the kubernetes_pod table to correctly return data when pod resource limits or requests are expressed in scientific notation, preventing errors. (#315)
Dependencies
Recompiled plugin with Go version 1.24.
Recompiled plugin with steampipe-plugin-sdk v5.13.0 that addresses critical and high vulnerabilities in dependent packages.
Added export column to the aws_acm_certificate table. (#2571)
Added ignore_error_messages config arg to provide users the ability to set a list of additional AWS error messages to ignore while running queries. For more information, please see AWS plugin configuration (#2560)
Dependencies
Recompiled plugin with Go version 1.24.
Recompiled plugin with steampipe-plugin-sdk v5.13.0 that addresses critical and high vulnerabilities in dependent packages.
Recompiled plugin with steampipe-plugin-sdk v5.11.7 which resolves an issue where rate limiters were not being applied to hydrate functions correctly. (#87)
Fixed the control column of wiz_cloud_config_rule table to correctly return data instead of an error. (#61)
Dependencies
Recompiled plugin with steampipe-plugin-sdk v5.11.7 which resolves an issue where rate limiters were not being applied to hydrate functions correctly. (#58)
Added destination, destination_branch_name and source columns to the bitbucket_pull_request table. (#119)
Bug fixes
Renamed the incorrectly named branch_name column to source_branch_name in the bitbucket_pull_request table to reflect the correct source branch of the pull request. (#119)
Dependencies
Recompiled plugin with steampipe-plugin-sdk v5.11.7 which resolves an issue where rate limiters were not being applied to hydrate functions correctly. (#115)
The versioning mechanism has been changed to use GoReleaser for automated version management during the build process.
Breaking changes
The version package, which was previously used to control CLI versioning, has been removed in this version. This change only affects users who were importing the Steampipe version package in their Go code. Regular CLI usage is not impacted.
Optimized the aws_s3_bucket table to reduce query time by improving how bucket regions are handled. (#2519)
Bug fixes
Fixed the policy column of aws_iam_policy table to correctly return data instead of an error when the policy document contains trailing tab characters. (#2529)
Dependencies
Recompiled plugin with steampipe-plugin-sdk v5.12.0, which introduces support for the UnmarshalJSON transform function, ensuring robust handling of IAM policy JSON columns. (#2529)
Added support for Fine-grained personal access token via the token config argument, with each table’s documentation updated to specify the required permissions. Refer to the plugin's Credentials section for additional information. (#497)
Dependencies
Recompiled plugin with steampipe-plugin-sdk v5.11.7 which resolves an issue where rate limiters were not being applied to hydrate functions correctly. (#499)
Increased the minimum required glibc version to 2.34 for the FDW, due to the upgrade of the Linux build environment from Ubuntu 20.04 to Ubuntu 22.04 GitHub runners. As a result, Steampipe no longer supports older Linux distributions such as Ubuntu 20.04 and Amazon Linux 2.
Bug fixes
Fix issue where the FDW did not correctly provide planning cost information for key-columns with an any-of requirement. This led the Postgres planner to choose query plans that do not include filters on those columns, even when filters were present in the query. (#558)
Fix issue where Steampipe was returning a 0 exit code even when a wrong sub-command was run. (#4563)
Optimized the aws_ecr_image_scan_finding table to reduce the query timing by removing the listAwsEcrImageTags parent hydrate and by adding the image_tag as an optional qual. (#2492)
Added column ephemeral_storage to aws_lambda_function table. (#2505)
Added connection and config-dir flags to the plugin's Export tool.
Dependencies
Recompiled plugin with steampipe-plugin-sdk v5.11.7 which resolves an issue where rate limiters were not being applied to hydrate functions correctly, and ensures that errors during data streaming are now properly surfaced by the Export CLI.
Fixed infinite loop issues in several tables by ensuring queries stop when no more rows are returned by the API. (#508) (Thanks @QiXingchuan for the contribution!)
Added rate-limiter tags to all tables which can be used to smooth request rates and limit the number of parallel requests to avoid hitting API rate limits. (#563)
Added period_start and period_end as optional qualifiers to all aws_cost_* tables to enable custom date range filtering and reduce API usage costs. (#2168)
Updated all aws_* tables to use AWS Go SDK v2 instead of v1, enabling support for newer AWS regions like ap-southeast-5. (#2370)
Dependencies
Recompiled plugin with AWS Go SDK v2.1.36.3. (#2495)
Deprecations
Deprecated search_start_time and search_end_time columns in the aws_cost_usage table. Please use period_start and period_end instead. (#2168)
Added allowedToCreateTenants field under default_user_role_permissions column of azuread_authorization_policy table. (#243) (Thanks @MarkusGnigler for the contribution!)