Bug fixes

• Fixed the GetConfig of github_team_repository table to include support for dynamic GraphQL queries. (#379)
• Fixed the example queries in github_commit doc file. (#377)
• Fixed the example queries in github_search_issue doc file to filter out results from the API. (#378)

What's new?

• New tables added
  • gcp_vertex_ai_endpoint (#513)

Bug fixes

• Fixed the retention_policy column of gcp_storage_bucket table to correctly return data instead of null. (#502)

What's new?

• New tables added
  • aws_lambda_event_source_mapping (#1874) (Thanks @nickman for the contribution!)

Enhancements

• Added the resource_record_set_limit column to aws_route53_zone table. (#1969) (Thanks @keyolk for the contribution!)

What's new?

• New tables added
  • jira_issue_comment (#103)
  • jira_issue_worklog (#104)

Enhancements

• Added the properties column to jira_project table. (#105)

Bug fixes

• Fixed typo in the docs/index.md file. (#102) (Thanks @adrfrank for the contribution!)
• Fixed the jira_issue table by enhancing case insensitivity support for the status column. (#90)

What's new?

• Added CIS v3.0.0 benchmark (steampipe check benchmark.cis_v300). (#57)

Breaking Changes

• Removed the following tables using the search API that no longer work due to API limitations. These tables will be added back if functionality can be restored.
  • linkedin_company_employee
  • linkedin_company_past_employee
  • linkedin_connection
  • linkedin_search_company
  • linkedin_search_profile

Bug fixes

• Fixed the compute_firewall_allow_tcp_connections_proxied_by_iap query to correctly include all the ports and source IP ranges. (#128) (Thanks @saisirishreddy for the contribution!)

What's new?

• Encapsulate plugin server so it is possible to use it in-process as well as via GRPC. (#719)
• Add steampipe field to _ctx column, containing sdk version. (#712)

Bug fixes

• Remove plugin has no connections error when deleting and then re-adding a connection. (#725)
• Fix potential divide by zero bug when setting cache size

Enhancements

• Added the dns_mx_dmarc_record_enabled control to the dns_mx_best_practices benchmark. (#20)

Bug fixes

• Fixed dashboard localhost URLs in README and index doc. (#23)

Enhancements

• Added the run_started_at column to github_actions_repository_workflow_run table. (#358) (Thanks @mridang for the contribution!)

What's new?

• New tables added
  • aws_fms_policy (#1851)
  • aws_fms_app_list (#1851)
  • aws_transfer_server (#1909) (Thanks @jramosf for the contribution!)

Enhancements

• Added the features column to aws_guardduty_detector table. (#1958)

What's new?_

• Added the new All Controls benchmark (steampipe check benchmark.all_controls). This new benchmark includes 109 service-specific controls. (#127)

• Updated the plugin dependency section of the following mods to use min_version instead of version:
  • Alicloud Insights
  • AWS Insights
  • AWS Tags
  • Azure Insights
  • Digitalocean Insights
  • Docker Compliance
  • GCP Insights
  • GCP Labels
  • Github Compliance
  • Github Insights
  • Gitlab Insights
  • Hackernews Insights
  • IBM Insights
  • Kubernetes Insights
  • Microsoft 365 Compliance
  • OCI Compliance
  • OCI Insights
  • OCI Thrifty
  • Snowflake Compliance
  • Tailscale Compliance
  • Terraform AWS Compliance
  • Terraform Azure Compliance
  • Terraform GCP Compliance
  • Terraform OCI Compliance
  • Turbot Guardrails Insights

Breaking changes

• Updated the plugin dependency section of the mod to use min_version instead of version. (#82)

Bug fixes

• Updated the docs to include the correct links for the nsa_cisa_v1 benchmark. (#80) (Thanks @aniketh-varma for the contribution!)
• Fixed the following queries to cast the data to boolean format. (#79)
  • cronjob_container_privilege_disabled
  • cronjob_host_network_access_disabled
  • cronjob_hostpid_hostipc_sharing_disabled
  • cronjob_immutable_container_filesystem
  • cronjob_non_root_container
  • daemonset_container_privilege_disabled
  • daemonset_host_network_access_disabled
  • daemonset_hostpid_hostipc_sharing_disabled
  • daemonset_immutable_container_filesystem
  • daemonset_non_root_container
  • deployment_container_privilege_disabled
  • deployment_host_network_access_disabled
  • deployment_hostpid_hostipc_sharing_disabled
  • deployment_immutable_container_filesystem
  • deployment_non_root_container
  • job_container_privilege_disabled
  • job_host_network_access_disabled
  • job_hostpid_hostipc_sharing_disabled
  • job_immutable_container_filesystem
  • job_non_root_container
  • pod_container_privilege_disabled
  • pod_immutable_container_filesystem
  • pod_non_root_container
  • pod_service_account_token_enabled
  • pod_template_container_privilege_disabled
  • pod_template_immutable_container_filesystem
  • replicaset_container_privilege_disabled
  • replicaset_host_network_access_disabled
  • replicaset_hostpid_hostipc_sharing_disabled
  • replicaset_immutable_container_filesystem
  • replicaset_non_root_container
  • replication_controller_container_privilege_disabled
  • replication_controller_host_network_access_disabled
  • replication_controller_hostpid_hostipc_sharing_disabled
  • replication_controller_immutable_container_filesystem
  • replication_controller_non_root_container
  • statefulset_container_privilege_disabled
  • statefulset_host_network_access_disabled
  • statefulset_hostpid_hostipc_sharing_disabled
  • statefulset_immutable_container_filesystem
  • statefulset_non_root_container

Breaking changes

• Updated the plugin dependency section of the mod to use min_version instead of version. (#130)

Bug fixes

• Fixed the kms_key_separation_of_duties_enforced query to ensure that separation of duties is enforced while assigning KMS-related roles to users. (#132)

Breaking changes

• Updated the plugin dependency section of the mod to use min_version instead of version. (#222)

Bug fixes

• Fixed the compute_vm_tcp_udp_access_restricted_internet query to ensure internet-facing virtual machines are protected with network security groups. (#224)

Breaking changes

• Updated the plugin dependency section of the mod to use min_version instead of version. (#34)

Bug fixes

• Fixed the README and index docs to correctly reference the well_architected_framework_security benchmark. (#25)

Breaking changes

• Updated the plugin dependency section of the mod to use min_version instead of version. (#161)
• Renamed the control lambda_function_with_graviton2 to lambda_function_with_graviton in order to maintain consistency. (#158) (Thanks @bluedoors for the contribution!)

Breaking changes

• Updated the plugin dependency section of the mod to use min_version instead of version. (#45)

Bug fixes

• Fixed the README to include correct links to the benchmarks. (#47) (Thanks @vil02 for the contribution!)

Breaking changes

• Updated the plugin dependency section of the mod to use min_version instead of version. (#728)

Enhancements

• Added the following controls to the All Controls benchmark: (#727)
  • glue_connection_ssl_enabled
  • vpc_peering_connection_route_table_least_privilege

Bug fixes

• Fixed the description of the name column in aws_organizations_account table. (#1947) (Thanks @badideasforsale for the contribution!)

Dependencies

• Recompiled plugin with steampipe-plugin-sdk v5.6.3 which addresses the issue of expired credentials being intermittently retained in the connection cache. (#1956)

Bug fixes

• Fixed expired credentials sometimes being left in the connection cache. Update connection cache to use a backing store per connection, rather than a shared backing store. (#699)

What's new?

• New tables added
  • azure_alert_management (#685)
  • azure_databricks_workspace (#692)
  • azure_monitor_activity_log_event (#684)
  • azure_recovery_services_backup_job (#681)

Enhancements

• Added the contact_info column to linkedin_profile table. (#5)

Bug fixes

• Fixed the required quals of github_issue and github_pull_request tables to correctly return data instead of an error. (#355)

What's new

• Updated github_issue, github_my_issue, github_pull_request, github_search_issue, and github_search_pull_request tables to only include nested and user permission columns in GraphQL request when requested. This should result in faster queries and large scale queries completing more consistently. (#342)

Bug fixes

• Fixed vanta_computer table queries failing due to inclusion of deprecated API field requiresLocationServices in fetchDomainEndpoints query. (#19) (Thanks @eric-glb for the contribution!)

What's new?

• The Sentry base URL can now be set through the base_url config argument or SENTRY_URL environment variable. (#11) (Thanks @beudbeud for the contribution!)

What's new?

• The Prometheus address (address) can now be set with the PROMETHEUS_URL environment variable. (#23) (Thanks @beudbeud for the contribution!)

Bug fixes

• Fixed README to include correct reference to the All Controls benchmark. (#218) (Thanks @vil02 for the contribution!)

Enhancements

• Added the following controls to the All Controls benchmark: (#722)
  • athena_workgroup_enforce_configuration_enabled
  • iam_inline_policy_no_administrative_privileges

Bug fixes

• Fixed README to include correct reference to the All Controls benchmark. (#721) (Thanks @vil02 for the contribution!)
• Fixed typos in several compliance control descriptions. (#719) (Thanks @pdecat for the contribution!)

Enhancements

• Improved documentation and descriptions for the aws_iam_role table. (#1940)
• Replaced uses of rand.Seed with latest rand.NewSource. (#1933)

Enhancements

• Added additional dashboard and query docs and updated metadata descriptions in docs. (#323)

What's new?

• Added 11 new controls across the benchmarks for the following services: (#39)
  • Application Gateway
  • Automation
  • Cognitive Search
  • Compute
  • Frontdoor
  • Network
  • PostgreSQL

Bug fixes

• Removed custom plugin level retryer which was unnecessary as the plugin already uses the AWS SDK retryer. (#1932)
• The plugin now retries errors with the error code UnknownError. These are often thrown by services like SNS when performing a large number of requests. (#1932)

The remaining 94 Turbot Steampipe plugins have been updated to use steampipe-plugin-sdk v5.6.2, which prevents nil pointer reference errors for implicit hydrate configs.

Bug fixes

• Fixed queries to correctly return data for connection_name and tags dimensions instead of an error. (#73)

Enhancements

• Updated the following queries to use url as the resource column: (#35)
  • default_branch_all_build_steps_as_code
  • default_branch_pipeline_locks_external_dependencies_for_build_process
  • default_branch_pipeline_must_have_jobs_with_sbom_generation
  • default_branch_pipelines_scan_for_vulnerabilities
  • default_branch_pipelines_scanners_set_to_prevent_sensitive_data
  • org_member_mfa_enabled
  • repo_inactive_members_review
  • repo_deletion_limited_to_trusted_users
  • repo_issue_deletion_limited_to_trusted_users
  • repo_webhook_package_registery_security_settings_enabled

What's new?

• New tables added
  • gcp_artifact_registry_repository (#496)
  • gcp_cloud_run_service (#497)

The following 21 Turbot Steampipe plugins have been updated to use steampipe-plugin-sdk v5.6.2, which prevents nil pointer reference errors for implicit hydrate configs:

• Alibaba Cloud
• AWS CloudFormation
• Azure
• Azure Active Directory
• CSV
• DigitalOcean
• Docker
• Docker Hub
• Exec
• GCP
• GitHub
• IBM Cloud
• Jira
• Microsoft 365
• Net
• Okta
• OpenShift
• Oracle Cloud Infrastructure
• Salesforce
• Turbot Pipes
• Zoom

Breaking changes

• Removed instances column from terraform_resource table. (#64)
• All arguments and lifecycle columns now return null instead of {} if empty. (#64)

Enhancements

• Added address, attributes, and attributes_std columns to terraform_resource table. (#64)

Bug fixes

• Fixed the start_line, end_line and source column values in the terraform_resource table to return correct values regardless of file indentation. (#64)
• Fixed the plugin to check all files even if a non-existent file name is provided in any file_paths config arg. (#67)

Enhancements

• Updated the queries to use the attributes_std and address columns from the terraform_resource table instead of arguments, type and name columns for better support of terraform state files. (#34)

Dependencies

• Terraform plugin v0.10.0 or higher is now required. (#34)

Enhancements

• Updated the queries to use the attributes_std and address columns from the terraform_resource table instead of arguments, type and name columns for better support of terraform state files. (#42)

Dependencies

• Terraform plugin v0.10.0 or higher is now required. (#42)

Enhancements

• Updated the queries to use the attributes_std and address columns from the terraform_resource table instead of arguments, type and name columns for better support of terraform state files. (#35)

Dependencies

• Terraform plugin v0.10.0 or higher is now required. (#35)

Enhancements

• Updated the queries to use the attributes_std and address columns from the terraform_resource table instead of arguments, type and name columns for better support of terraform state files. (#90)

Dependencies

• Terraform plugin v0.10.0 or higher is now required. (#90)

Bug fixes

• Fixed the plugin to prevent crashes when source_types config argument contains manifest but manifest_file_paths is not defined. (#177)

What's new?

• Added 39 new controls for the ClusterRoleBinding, CronJob, DaemonSet, Ingress, Job, Pod resource types to the all_controls benchmark. (#68)

Bug fixes

• Fixed the source_account_id column of aws_securityhub_finding table to correctly return data instead of null. (#1927) (Thanks @gabrielsoltz for the contribution!)
• Fixed the members column of aws_rds_db_cluster table to correctly return data instead of null. (#1926)

Bug fixes

• Added support for the missing mod-location flag to the steampipe variable list command. (#3942)

Bug fixes

• The initialise function is now being called for implicit hydrate configs (i.e. hydrate functions without explicit config), thereby preventing nil pointer reference errors when the hydrate function returns an error. (#683)