Changelog, page 3

Enhancements

  • Added DefaultRetryConfig to the plugin, enabling automatic retries on rate limit errors and improving overall query stability and performance. (#55)

Dependencies

  • Recompiled plugin with Go version 1.24. (#52)
  • Recompiled plugin with steampipe-plugin-sdk v5.13.0 that addresses critical and high vulnerabilities in dependent packages. (#52)

Bug fixes

  • Fixed the bound_to column of hcloud_image table to correctly return data instead of an error. (#48) (Thanks @kuang87 for the contribution!!)

Dependencies

  • Recompiled plugin with Go version 1.24.
  • Recompiled plugin with steampipe-plugin-sdk v5.13.0 that addresses critical and high vulnerabilities in dependent packages.

Bug fixes

  • Fixed the example query in the plugin documentation to use the correct column name exec_output instead of output. (#63) (Thanks @pdecat for the contribution!!)

Dependencies

  • Recompiled plugin with Go version 1.24.
  • Recompiled plugin with steampipe-plugin-sdk v5.13.0 that addresses critical and high vulnerabilities in dependent packages.

What's new?

Enhancements

  • Added columns tags and tags_src to aws_ec2_load_balancer_listener_rule table. (#2625)
  • Added column multi_az to aws_redshift_cluster table. (#2617)

Bug fixes

  • Fixed the aws_cloudformation_stack_resource table to correctly return data instead of an error. (#2622)

What's new?

Bug fixes

  • Fixed the okta_network_zone table to correctly return data instead of an error. (#160)

Dependencies

  • Recompiled plugin with Go version 1.24.
  • Recompiled plugin with steampipe-plugin-sdk v5.13.0 that addresses critical and high vulnerabilities in dependent packages.

Breaking changes

  • Configuration Changes

    • The plugin configuration format has changed to support the REST API.
    • You must now configure either OAuth client credentials or an access token for authentication. Please refer to the Configuration section for additional information.
  • API Migration

    • Migrated from Vanta's deprecated GraphQL API to the new REST API.
    • Queries, dashboards, and benchmarks that reference removed columns (listed below) will fail until updated.
  • Removed Columns

    vanta_computer

    • agent_version
    • hostname
    • host_identifier
    • last_ping
    • num_browser_extensions
    • endpoint_applications
    • installed_av_programs
    • installed_password_managers
    • unsupported_reasons
    • organization_name

    vanta_evidence

    • title
    • evidence_request_id
    • category
    • uid
    • app_upload_enabled
    • restricted
    • dismissed_status
    • renewal_metadata
    • organization_name

    vanta_group

    • checklist
    • embedded_idp_group
    • organization_name

    vanta_integration

    • description
    • application_url
    • installation_url
    • logo_slug_id
    • credentials
    • integration_categories
    • service_categories
    • organization_name

    vanta_monitor

    • controls
    • organization_name

    vanta_policy

    • policy_type
    • created_at
    • updated_at
    • employee_acceptance_test_id
    • num_users
    • num_users_accepted
    • source
    • acceptance_controls
    • approver
    • standards
    • uploaded_doc
    • uploader
    • organization_name

    vanta_user

    • is_from_scan
    • needs_employee_digest_reminder
    • is_not_human

    vanta_vendor

    • vendor_risk_locked
    • owner
    • risk_profile
    • organization_name
  • Migration Notes

    • Reason for change: Vanta has ended GraphQL API support; the REST API is now the only supported interface.
    • Action required:
      • Update SQL queries to remove or replace references to removed columns.
      • Review table documentation for updated field availability.

Deprecations

  • The cloudflare_firewall_rule table has been deprecated. Please use cloudflare_ruleset table instead. (#166)
  • The following columns have been deprecated due to lack of API support and will be fully removed in the future major release: (#166)
    • cloudflare_account_member
      • code
    • cloudflare_dns_record
      • locked
    • cloudflare_logpush_job
      • frequency
      • logpull_options
    • cloudflare_user
      • api_key
    • cloudflare_zone
      • plan_pending
      • settings

What's new?

Enhancements

  • Added the following new columns to the cloudflare_zone table: (#174) (Thanks @Theo-Bouguet for the contribution!!)
    • smart_tiered_cache
    • regional_tiered_cache
    • argo_tiered_caching
    • argo_smart_routing
    • bot_management
    • security_txt
  • Added columns account_name and health to the cloudflare_load_balancer_pool table. (#175) (Thanks @Theo-Bouguet for the contribution!!)
  • Added max_request_timeout and max_retries config arguments to effectively manage the plugin's rate limiting errors. (#166)

Bug fixes

  • Fixed the ttl column in cloudflare_dns_record table to correctly return data instead of null. (#173) (Thanks @Theo-Bouguet for the contribution!!)

Dependencies

Enhancements

  • Added diagnostic_settings column to the azure_databricks_workspace table. (#930)
  • Added file_services column to the azure_storage_account table. (#933)
  • Added rotation_policy column to the azure_key_vault_key table. (#931)

Bug fixes

  • Fixed the azure_network_watcher_flow_log table to correctly return data instead of an error. (#926)

Deprecations

  • The following columns of the azure_security_center_contact have now been deprecated due to the lack of API support:
    • alert_notifications
    • alerts_to_admins

What's new?

Enhancements

  • Added rate-limiter tags to all tables which can be used to smooth request rates and limit the number of parallel requests to avoid hitting API rate limits. (#904)
  • Added diagnostic_settings column to azure_app_service_web_app table. (#921)
  • Added default_blob_diagnostic_settings, default_file_diagnostic_settings, default_table_diagnostic_settings and default_queue_diagnostic_settings columns to azure_storage_account table. (#918)
  • Added key_policy column to azure_storage_account table. (#922)

Bug fixes

  • Fixed the azure_storage_account table to correctly handle the no such host error for premium type storage account. (#922)
  • Fixed the diagnostic_settings column in azure_key_vault table to correctly return data instead of null. (#915)
  • Fixed azure_data_protection_backup_vault and azure_security_center_contact tables to correctly return data instead of an error. (#917)
  • Fixed the azure_security_center_contact table to correctly return data instead of null. (#902)

Dependencies

Bug fixes

  • Fixed the containers_resources_limits_std and containers_resources_requests_std columns in the kubernetes_pod table to correctly return data when pod resource limits or requests are expressed in scientific notation, preventing errors. (#315)

Dependencies

  • Recompiled plugin with Go version 1.24.
  • Recompiled plugin with steampipe-plugin-sdk v5.13.0 that addresses critical and high vulnerabilities in dependent packages.

Bug fixes

  • Fixed gcp_compute_ssl_policy table to return regional along with global SSL policies. (#773)

Dependencies

  • Recompiled plugin with Go version 1.24.
  • Recompiled plugin with steampipe-plugin-sdk v5.13.0 that addresses critical and high vulnerabilities in dependent packages.

What's new?

Enhancements

  • Added export column to the aws_acm_certificate table. (#2571)
  • Added ignore_error_messages config arg to provide users the ability to set a list of additional AWS error messages to ignore while running queries. For more information, please see AWS plugin configuration (#2560)

Dependencies

  • Recompiled plugin with Go version 1.24.
  • Recompiled plugin with steampipe-plugin-sdk v5.13.0 that addresses critical and high vulnerabilities in dependent packages.

Bug fixes

  • Fixed the control column of wiz_cloud_config_rule table to correctly return data instead of an error. (#61)

Dependencies

  • Recompiled plugin with steampipe-plugin-sdk v5.11.7 which resolves an issue where rate limiters were not being applied to hydrate functions correctly. (#58)

Enhancements

  • Added destination, destination_branch_name and source columns to the bitbucket_pull_request table. (#119)

Bug fixes

  • Renamed the incorrectly named branch_name column to source_branch_name in the bitbucket_pull_request table to reflect the correct source branch of the pull request. (#119)

Dependencies

Whats new

  • Compiled with Go 1.24.
  • The versioning mechanism has been changed to use GoReleaser for automated version management during the build process.

Breaking changes

  • The version package, which was previously used to control CLI versioning, has been removed in this version. This change only affects users who were importing the Steampipe version package in their Go code. Regular CLI usage is not impacted.

Bug fixes

  • Bump module to v2. (#4593)

Dependencies

  • Update go-viper package to remediate moderate vulnerabilities.

What's new?

Enhancements

  • Updated the aws_cloudformation_stack table to also return stacks that are in DELETE_COMPLETE state. (#2548)
  • Added rate limiters for the following tables: (#2547)
    • aws_iam_role
    • aws_iam_policy
    • aws_iam_policy_attachment
  • Added default rate limiter configuration for AWS CloudFormation, AWS Kinesis, AWS Route 53, AWS WAF and AWS WAF v2 service tables. (#2537) (Thanks @pdecat for the contribution!)

Bug fixes

  • Fixed aws_rds_pending_maintenance_action table to correctly return data instead of an error. (#2545)

Bug fixes

  • Reverted the optimization of aws_s3_* tables from #2519 due to InvalidToken errors while executing S3 queries. (#2536)

Enhancements

  • Optimized the aws_s3_bucket table to reduce query time by improving how bucket regions are handled. (#2519)

Bug fixes

  • Fixed the policy column of aws_iam_policy table to correctly return data instead of an error when the policy document contains trailing tab characters. (#2529)

Dependencies

  • Recompiled plugin with steampipe-plugin-sdk v5.12.0, which introduces support for the UnmarshalJSON transform function, ensuring robust handling of IAM policy JSON columns. (#2529)

What's new?

Dependencies

Bug fixes

  • Fix plugin manager is not running error when starting steampipe via a symlink. (#4573)

Breaking changes

  • Increased the minimum required glibc version to 2.34 for the FDW, due to the upgrade of the Linux build environment from Ubuntu 20.04 to Ubuntu 22.04 GitHub runners. As a result, Steampipe no longer supports older Linux distributions such as Ubuntu 20.04 and Amazon Linux 2.

Bug fixes

  • Fix issue where the FDW did not correctly provide planning cost information for key-columns with an any-of requirement. This led the Postgres planner to choose query plans that do not include filters on those columns, even when filters were present in the query. (#558)
  • Fix issue where Steampipe was returning a 0 exit code even when a wrong sub-command was run. (#4563)

What's new?

Enhancements

  • Optimized the aws_ecr_image_scan_finding table to reduce the query timing by removing the listAwsEcrImageTags parent hydrate and by adding the image_tag as an optional qual. (#2492)
  • Added column ephemeral_storage to aws_lambda_function table. (#2505)
  • Added connection and config-dir flags to the plugin's Export tool.

Dependencies

  • Recompiled plugin with steampipe-plugin-sdk v5.11.7 which resolves an issue where rate limiters were not being applied to hydrate functions correctly, and ensures that errors during data streaming are now properly surfaced by the Export CLI.

Bug fixes

  • Fixed infinite loop issues in several tables by ensuring queries stop when no more rows are returned by the API. (#508) (Thanks @QiXingchuan for the contribution!)

Dependencies

Bug fixes

  • Fix issue where steampipe was returning 0 exit-code in batch mode even incase of API failures. (#4551)

Dependencies

  • Update FDW to 1.12.7 to remediate high vulnerabilities.

Enhancements

  • Added rate-limiter tags to all tables which can be used to smooth request rates and limit the number of parallel requests to avoid hitting API rate limits. (#563)

Dependencies

Enhancements

  • Added external_user_state and sign_in_activity columns to azuread_user table. (#250) (Thanks @MarkusGnigler for the contribution!)
  • Added disable_resilience_defaults column to azuread_conditional_access_policy table. (#251) (Thanks @MarkusGnigler for the contribution!)

Dependencies

Bug fixes

  • Removed the duplicate column source_region from aws_macie2_finding table schema.

What's new?

Enhancements

  • Added period_start and period_end as optional qualifiers to all aws_cost_* tables to enable custom date range filtering and reduce API usage costs. (#2168)
  • Updated all aws_* tables to use AWS Go SDK v2 instead of v1, enabling support for newer AWS regions like ap-southeast-5. (#2370)

Dependencies

  • Recompiled plugin with AWS Go SDK v2.1.36.3. (#2495)

Deprecations

  • Deprecated search_start_time and search_end_time columns in the aws_cost_usage table. Please use period_start and period_end instead. (#2168)

Enhancements

  • Added allowedToCreateTenants field under default_user_role_permissions column of azuread_authorization_policy table. (#243) (Thanks @MarkusGnigler for the contribution!)

Whats new?

  • Return safe bigint values as int instead of string
  • Include MCP server version in status resource

Bug fixes

  • Fix intermittent Reattachment process not found error when starting steampipe service. (#4507)