What's new?

• New tables added
  • aws_iot_thing_group (#1998)
  • aws_iot_thing_type (#1999)
  • aws_kms_key_rotation (#2174)

Enhancements

• Added the version flag to the plugin's Export tool. (#65)

Bug fixes

• Fixed intermittent FDW crashes when certain postgres errors resulted in a signal 16 being raised. (#455)
• Fixed the broken Postgres 14, Postgres 15 and SQLite x86_64 binaries for Darwin operating systems.

What's new?

• New tables added
  • aws_iot_fleet_metric (#2000)

Enhancements

• The account_id column has now been assigned as a connection key column across all the tables which facilitates more precise and efficient querying across multiple AWS accounts. (#2133)

Bug fixes

• Fixed the getDirectoryServiceSnapshotLimit and getDirectoryServiceEventTopics hydrate calls in the aws_directory_service_directory table to correctly return nil for the unsupported ADConnector services instead of an error. (#2170)

What's new?

• New tables added: (Thanks @jplanckeel for the new plugin!)
  • opsgenie_alert
  • opsgenie_team

What's new?

• New tables added
  • googlesearchconsole_indexing_status
  • googlesearchconsole_pagespeed_analysis_aggregated
  • googlesearchconsole_pagespeed_analysis
  • googlesearchconsole_site
  • googlesearchconsole_sitemap

v0.40.0 [2024-04-12]

What's new?

• New tables added
  • github_organization_collaborator (#411)
• Added support for plugin authentication using Github App. Please refer Github plugin configuration for more information. (#414)

Bug fixes

• Fixed the github_workflow table to correctly return data for dynamic workflows instead of an error. (#412)
• Fixed the plugin's Postgres FDW Extension crash issue.

What's new?

• New tables added
  • aws_accessanalyzer_finding (#2142)

Enhancements

• Added snapshot_block_public_access_state column to aws_ec2_regional_settings table. (#2077)

Bug fixes

• Fixed the getDirectoryServiceSnapshotLimit and getDirectoryServiceEventTopics hydrate calls in the aws_directory_service_directory table to correctly return nil for unsupported SharedMicrosoftAD services instead of an error. (#2156)

What's new?

• New tables added: (Thanks @ramirezj for the new plugin!)
  • kolide_admin_user
  • kolide_audit_log
  • kolide_check
  • kolide_deprovisioned_person
  • kolide_device
  • kolide_device_open_issue
  • kolide_issue
  • kolide_package

What's new?

• Added support for connection key columns. (#768)
• Added sp_ctx and sp_connection_name columns to all tables. (#769)

What's new?

• New tables added
  • gcp_tag_binding (#560)

Enhancements

• Added support for nested dashboards. (#4208)

Bug fixes

• Fixed the issue where local plugins were not being loaded. (#4196)
• Re-added support for 'implicit' local plugins (i.e. the plugin binary exists but there is no entry in the versions.json). (#4223)
• Fixed the issue where the daily update check message showed a <nil> when there was no message to show. (#4206)

What's new?

• New tables added
  • gcp_vertex_ai_model (#555)

Enhancements

• Added support for quota_project config arg to provide users the ability to set the Project ID used for billing and quota. (#556)

Bug fixes

• Fixed the retry_policy_maximum_backoff and retry_policy_minimum_backoff columns of gcp_pubsub_subscription table to correctly return data. (#552) (Thanks to @mvanholsteijn for the contribution!)

What's new?

• New tables added
  • aws_backup_job (#2145) (Thanks @rogerioacp for the contribution!)
  • aws_elastic_beanstalk_application_version (#2150)
  • aws_rds_db_engine_version (#2098)
  • aws_s3_object_version (#2070)
  • aws_servicequotas_service (#2070)

Bug fixes

• Fixed the aws_vpc_eip table to return an Access Denied error instead of an Invalid Memory Address or Nil Pointer Dereference error when a Service Control Policy is applied to an account for a specific region. (#2136)
• Fixed the aws_s3_bucket terraform script to prevent the AccessControlListNotSupported: The bucket does not allow ACLs error during the PutBucketAcl terraform call. (#2080) (Thanks @pdecat for the contribution!)
• Fixed an issue where querying regional tables while using AWS profiles with cross-account role credentials results in the correct error being reported instead of zero rows. (#2137)
• Fixed pagination in the aws_ebs_snapshot table to make fewer API calls when the limit parameter is passed to the query. (#2088)

What's new?

• New tables added
  • azure_compute_virtual_machine_metric_available_memory (#729)
  • azure_compute_virtual_machine_metric_available_memory_daily (#729)
  • azure_compute_virtual_machine_metric_available_memory_hourly (#729)

Enhancements

• Added the access_keys column to azure_storage_account table. (#730)
• Added the disable_local_auth column to azure_cosmosdb_account table. (#736)

What's new?

• New tables added
  • aws_acmpca_certificate_authority (#2125)
  • aws_dms_endpoint (#1992)
  • aws_dms_replication_task (#2110)
  • aws_docdb_cluster_snapshot (#2123)
  • aws_transfer_user (#2089) (Thanks @jramosf for the contribution!)

Enhancements

• Added auto_minor_version_upgrade column to aws_rds_db_cluster table. (#2109)
• Added open_zfs_configuration column to aws_fsx_file_system table. (#2113)
• Added logging_configuration column to aws_networkfirewall_firewall table. (#2115)
• Added lf_tags column to aws_glue_catalog_table table. (#2128)

Bug fixes

• Fixed the query in the aws_s3_bucket table doc to correctly filter out buckets without the application tag. (#2093)
• Fixed the aws_cloudtrail_lookup_event input param to pass correctly end_time as an optional qual. (#2102)
• Fixed the arn column of the aws_elastic_beanstalk_environment table to correctly return data instead of null. (#2105)
• Fixed the template_body_json column of the aws_cloudformation_stack table to correctly return data by adding a new transform function formatJsonBody, replacing the UnmarshalYAML transform function. (#1959)
• Fixed the next_execution_time column of aws_ssm_maintenance_window table to be of String datatype instead of TIMESTAMP. (#2116)
• Renamed the client_log_options column to connection_log_options in aws_ec2_client_vpn_endpoint table to correctly return data instead of null. (#2122)

Whats new

• Improved startup performance with high plugin count - parallelize plugin startup. (#4183)
• Added database SSL password support for encrypted private key in order to handle your own certificates. (#4149)

Bug fixes

• Fixed issue where plugin list cannot re-create top-level versions.json file if the file has been corrupted or empty. (#4191)

Notice

• Scripts must use the permanent installation script at https://steampipe.io/install/steampipe.sh.
• The script above is automatically updated when the script moves location.
• install.sh has been moved from the top level folder to the scripts folder.
• Scripts directly referencing the raw GitHub location must be updated.

Notice

Steampipe will no longer officially publish or support a Dockerfile or container images.

Steampipe can be run in a containerized setup. We run it ourselves that way as part of Turbot Pipes. But, we've decided to cease publishing an supporting a container definition because:

• The CLI is optimized for developer use on the command line.
• Everyone has specific goals and requirements for their containers.
• Container setup requires various mounts and access to configuration files.
• It's hard to support containers across many different environments.

We welcome users to create and share your own open-source container definitions for Steampipe!

Steampipe unbundled, introducing Powerpipe

Powerpipe is now the recommended way to run dashboards and benchmarks!

Mods still work as normal in Steampipe for now, but they are deprecated and will be removed in a future release:

• Steampipe unbundled →
• Powerpipe for Steampipe users →

Whats new

• Added version column to steampipe_plugin table. (#4141)
• Direct all errors and warnings to standard error (stderr). (4162)

Bug fixes

• Fixed the issue where search_path_prefix set in database options does not alter the search path. (#4160)
• Fix issue where asff output was always missing the first row. (#4157)

Deprecations and migrations

• Steampipe mods and dashboards are now separately available in Powerpipe, a new open-source project. The steampipe mod, check and dashboard commands have been deprecated and will be removed in a future version. Migration guide.
• Deprecated cloud-host and cloud-token CLI args, and replaced them with pipes-host and pipes-token respectively. (#4137)
• Deprecated STEAMPIPE_CLOUD_HOST and STEAMPIPE_CLOUD_TOKEN env vars, replaced with PIPES_HOST and PIPES_TOKEN respectively. (#4137)
• Deprecated cloud_host and cloud_token workspace args, replaced with pipes_host and pipes_token respectively. (#4137)
• Removed support for deprecated terminal options. (#3751)
• Removed support for deprecated max_parallel property in general options. (#4132)
• Removed support for deprecated connection options. (#4131)
• Removed deprecated version property from the mod require block. (#3750)

Enhancements

• Updated the regex pattern of slack_api_token to also detect the Slack bot tokens. (#73)
• Updated the regex pattern of AWS access_key_id to include key resources like AWS SSO credentials. (#74)

What's new?

• New dashboards added:
  • OpenSearch Domain Detail (#75) (Thanks @Errahulaws for the contribution!)

What's new?

• New tables added
  • aws_ecr_registry_scanning_configuration (#2084)

Bug fixes

• Fixed the InvalidParameterCombination error when querying the aws_rds_db_instance table. (#2085)
• Fixed aws_rds_db_instance_metric_write_iops_daily table to correctly display WriteIOPS instead of ReadIOPS. (#2079)

Dependencies

• Recompiled plugin with steampipe-plugin-sdk v5.9.0 that fixes critical caching issues. (#2067)

Bug fixes

• Fixed the plugin to return nil instead of an error when API credentials are not set in the *.spc file. (#14)
• Fixed the default data type of the dynamic columns to be of the String type instead of JSON. (#16)

Bug fixes

• Fixed the hierarchy in the benchmark list by properly integrating Cloud Functions benchmark into all_controls benchmark. (#146)

What's new?

• Removed support for Memoized functions to be directly assigned as column hydrate functions. Instead, require a wrapper hydrate function. (#756) (#738)

Bug fixes

• If cache is disabled for the server, but enabled for the client, the query execution code tries to stream to the cache even though there is no active set operation. (#740)

Bug fixes

• Fixed growing memory usage following file watching events when running dashboard server. (#4150)

Dependencies

• GCP plugin v0.49.0 or higher is now required. (#143)

Enhancements

• Added 5 new controls to the All Controls benchmark across the following services: (#143)
  • App Engine
  • Cloud Run
  • Kubernetes

Dependencies

• AWS plugin v0.131.0 or higher is now required. (#747)

Enhancements

• Added 11 new controls to the All Controls benchmark across the following services: (#747)
  • API Gateway
  • DMS
  • EMR
  • MQ
  • VPC

Bug fixes

• Fixed the foundational_security_ssm_2 control to correctly evaluate results when patches are not applicable for SSM managed EC2 instances. (#761)

Bug fixes

• Fixed the typo in the scaleway_billing_consumption table docs to use consumption instead of consumtion. (#80)

What's new?

• New tables added
  • scaleway_account_project (#53) (Thanks @jplanckeel for the contribution!)
  • scaleway_billing_consumption (#70) (Thanks @jplanckeel for the contribution!)

Enhancements

• Improved the plugin error message when invalid credentials are set in the wiz.spc file. (#23)

Bug fixes

• Fixed the service_tickets column in wiz_issue table by removing the action subfield from the ServiceTickets field in the GraphQL response since it was no longer available. (#24 #25) (Thanks @sycophantic for the contribution!)

Bug fixes

• Removed duplicate control rds_db_cluster_encrypted_with_kms_cmk. (#105)

Bug fixes

• Removed duplicate node service_account. (#56)

Bug fixes

• Fixed the pipeline column of the github_workflow table to correctly return data instead of an error. (#388)
• Fixed the example query in the docs/index.md file by replacing the stargazers_count column with stargazer_count. (#397)

What's new?

• New tables added
  • aws_api_gateway_method (#1995)
  • aws_dms_certificate (#1985)
  • aws_emr_security_configuration (#1984)
  • aws_iot_thing (#1997)
  • aws_organizations_organizational_unit (#2063)
  • aws_ssmincidents_response_plan (#1885)
  • aws_trusted_advisor_check_summary (#1978)

Bug fixes

• Fixed aws_sfn_state_machine_execution_history table to handle pagination and ignore errors for expired execution history. (#1934) (Thanks @pdecat for the contribution!)
• Fixed the aws_health_affected_entity table to correctly return data instead of an interface conversion error. (#2072)

What's new?

• New table added
  • tfe_project (#42) (Thanks @edebrye for the contribution!)

Bug fixes

• Fixed the plugin initialization error by returning only the static tables when invalid config parameters were set for dynamic tables. #39

Bug fixes

• Fixed variables not being reloaded after the file watch event. (#4123)
• Fixed mod file being left invalid after mod uninstall. (#4124)

v0.86 [2024-02-08]

What's new?

• Added CIS v3.0.0 benchmark (steampipe check benchmark.cis_v300). (#755)

Bug fixes

• Fixed pagination in the datadog_monitor table to correctly return data instead of an error. (#48) (Thanks @mdb for the contribution!)

Bug fixes

• Fixed HomeDirectoryModfileCheck returning false positive, causing errors when executing steampipe out of the home directory. (#4118)

Enhancements

• Updated all the tables to fetch the column data using hydrate functions to optimize the API calls and increase query speed when querying specific columns. (#30)

Bug fixes

• Fixed UI freeze when prompting for workspace variables. (#4105)
• Fixed dependency variable validation - it was failing if dependency variable value was set in the vars file. (#4110)

Dependencies

• OCI plugin v0.35.0 or higher is now required. (#83)

What's new?

• Added CIS v2.0.0 benchmark (steampipe check benchmark.cis_v200). (#80)

What's new?

• New tables added
  • gcp_app_engine_application (#537)
  • gcp_compute_machine_image (#519)

What's new?

• Added OAuth config support to provide users the ability to set OAuth secret client ID and OAuth secret value of a service principal. For more information, please see Databricks plugin configuration. (#6) (Thanks @rinzool for the contribution!)
• Added Config object to directly pass credentials to the client. (#10)

What's new?

• New tables added
  • azure_api_management_backend (#689)
  • azure_consumption_usage (#721)
  • azure_monitor_log_profile (#717)

Enhancements

• Added the authorization_rules column to azure_servicebus_namespace table. (#719)

Enhancements

• Optimized aws_cloudwatch_log_stream table's query performance by adding descending, log_group_name, log_stream_name_prefix and order_by new optional key qual columns. (#1951)
• Optimized aws_ssm_inventory table's query performance by adding new optional key qual columns such as filter_key, filter_value, network_attribute_key, network_attribute_value, etc. (#1980)

Bug fixes

• Fixed aws_cloudwatch_log_group table key column to be globally unique by filtering the results by region. (#1976)
• Removed duplicate memoizing of getCommonColumns function from aws_s3_multi_region_access_point and aws_ec2_launch_template tables.(#2065)
• Fixed error for column type_name in table aws_ssm_inventory_entry. (#1980)
• Added the missing rate-limiter tags for aws_s3_bucket table's GetBucketLocation hydrate function to optimize query performance. (#2066)

What's new?

• New tables added
  • guardrails_query (#31)

Dependencies

• Azure plugin v0.53.0 or higher is now required. (#242)

Enhancements

• Added 41 new controls to the All Controls benchmark across the following services: (#234 #233)
  • Active Directory
  • App Service
  • Batch
  • Compute
  • Container Instance
  • Key Vault
  • Kubernetes Service
  • Network
  • Recovery Service
  • Service Bus
  • Storage

Bug fixes

• Fixed the description of CIS_v150_2_1_9 control. (#238) (Thanks @sfunkernw for the contribution!)

Breaking changes

• Removed the iam_root_user_virtual_mfa control since it is not recommended as good practice. (#743)
• Replaced iam_account_password_policy_strong with iam_account_password_policy_strong_min_reuse_24 in the GDPR, FFIEC and CISA Cyber Essentials benchmarks to align more accurately with the requirements specified in the AWS Config rules. (#739)

Bug fixes

• Updated the dashboard image to correctly list all the 25 benchmarks. (#748)