Whats new?

• Define rate and concurrency limits for plugin execution. (#3746)
• Define multiple instances of a plugin version using a plugin connection config block. (#3807)
• The maximum memory used by plugins and the CLI can now be specified either in plugin instance definitions or the new plugin options block. (#3807)
• New introspection tables steampipe_plugin and steampipe_plugin_limiter containing all configured plugin instances and limiters. (#3746)
• New introspection table steampipe_server_settings populated with server settings data during service startup. (#3462)
• Running plugin install with no arguments installs all referenced plugins. (#3451)
• New --output flag for plugin list cmd allows selection between json and table output. (#3368)
• Each plugin directory ncontains a version.json which can be used to recompose the global plugin versions.json if it is missing or corrupt. (#3492)
• Typing .cache in interactive prompt shows the current value of cache. (#2439)
• Steampipe commands bypass plugin requirement check if installed plugin is locally built. (#3643)
• New skip-config flag disables writing of default plugin config during plugin installation. (#3531, #2206)
• Logs are now written to file instead of console. (#2916)
• When plugin startup fails, report useful message in the CLI. (#3732)
• Users are warned to not have mod.sp files in home directory. (#2321)
• Updated messaging when service is started on an unavailable port. (#623)
• Log files are rotated if the process is active across date boundaries. (#125, #3825)
• Listen hosts may be selected when starting steampipe service. (#3505)
• Initialisation behaviour for the sample options has been changed: always copy a sample file (default.spc.sample), but only overwrite the default.spc file with the sample content if the existing file has not been modified. (#3431)
• Validation for the workspace profile cache settings. (#3646)
• Support OCI registries requiring authentication. (#2819)
• Compiled with Go 1.21. (#3763)

Bug fixes

• Plugin manager shutdown stalling intermittently due to deadlocks. (#3818)
• Temporary tables dropped in interactive prompt when pool connections recycled. (#3781,#3543)
• service start was not listening on network by default. (#3593)
• Multi line logs from plugins not rendered correctly in plugin logs. (#3678)
• .inspect panicking for long column descriptions. (#3709)
• Interactive prompt crashing when there is a code panic. (#3713)
• Incorrect zsh completion instructions.
• Steampipe should not create export files for cancelled control runs. (#3578)
• BuildFullResourceName not validating non empty arguments. (#3601)
• Spinner not showing when exporting check results. (#3577)
• stdin was consumed by query command even if there are arguments. (#1985)
• When exporting multiple benchmarks, results now merged the results into a single export. (#2380)
• Raise warning when pseudo-resources are ignored because of named HCL resources. (#1328)
• Database reinstalled unnecessarily if any FDW files were missing. (#2040)
• Improved error message when steampipe fails to parse a mod definition file because mod block does not exist. (#1198)
• Only install-dir and workspace flags should be global flags. All other flags should only apply to specific command. (#3542)
• Passing an empty list for list variables was not working. (#2094)
• Show deprecation warning for version field in require block of mod definition.
• Temporary directories were not always being cleaned up after plugin commands.
• plugin list returned nothing if no plugins were installed. (#3927)

Deprecations and migrations

• Table steampipe_connection_state renamed to steampipe_connection
• Removed migration and backward compatibility of data files from v0.13.0. (#3517)
• Removed deprecated workspace-chdir flag. (#3925)
• Migrated from cloud.steampipe.io to pipes.turbot.com. (#3724)
• Removed support for plugins which do not support multiple connections (i.e. using SDK < v4.0.0).
• Deprecated terminal options.

All 115 Turbot Steampipe plugins have been updated to use steampipe-plugin-sdk v5.6.1, which adds support for rate and concurrency limiters.

Limiters provide a simple, flexible interface to implement client-site rate limiting and concurrency thresholds at compile time or run time. You can use limiters to:

• Smooth the request rate from Steampipe to reduce load on the remote API or service
• Limit the number of parallel requests to reduce contention for client and network resources
• Avoid hitting server limits and throttling

For more information on getting started, please see Concurrency and Rate Limiting.

Deprecated

• The source_type config argument has been deprecated and will be removed in the next major version. Please use the source_types config argument instead. If both config arguments are set, source_types will take precedence. For backward compatibility, please see below for old and new value equivalents: (#167)
  • source_type = 'all': source_types = ["deployed", "helm", "manifest"]
  • source_type = 'deployed': source_types = ["deployed"]
  • source_type = 'helm': source_types = ["helm"]
  • source_type = 'manifest': source_types = ["manifest"]

What's new?

• Added the source_types config argument, which allows specifying a combination of source types to load per connection. (#167)

What's new?

• Added 350+ new controls across all resource types to the all_controls benchmark. (#64)

Enhancements

• Added path to default set of common_dimensions, so now any file paths will appear by default in the additional dimensions in control results. (#63)
• Added iac category to mod definition.

Dependencies

• Kubernetes plugin v0.23.0 or higher is now required.

Breaking changes

• Removed the output column in the exec_command table. This column has been replaced by the stdout_output and stderr_output columns. (#13)

What's new?

• Added stdout_output and stderr_output columns to the exec_command table. (#13)
• Added stream column to the exec_command_line table. (#13)
• Added plugin limiter exec_global with MaxConcurrency set to 15 in an effort to reduce abuse reports due to large number of concurrent remote connections. (#13)

Bug fixes

• Results from the exec_command table should now be consistent when using local and remote connections. (#13)

Dependencies

• Recompiled plugin with steampipe-plugin-sdk v5.6.0 which adds support for rate limiters. (#13)
• Recompiled plugin with Go 1.21. (#13)

What's new?

• Added CIS v1.6.0 benchmark (steampipe check docker_compliance.benchmark.cis_v160). (#4)

Enhancements

• Updated the Makefile to build the netgo package only for Darwin systems. (#1918)
• Added the configuration_settings column to aws_elastic_beanstalk_environment table. (#1916)

Bug fixes

• Fixed the table aws_dynamodb_backup to return nil instead of an error when backup does not exist. (#1914)

What's new?

• SetConnectionCacheOptions, a new GRPC endpoint to clear connection cache. (#678)

Enhancements

• Added the last_successful_login_time column to oci_identity_user table. (#547)

Enhancements

• Added the department column to azuread_user table. (#132)

Bug fixes

• Fixed the title column in azuread_device and azuread_user tables to correctly return data instead of null. (#134)

What's new?

• Define rate and concurrency limits for plugin execution. (#623)
• Diagnostics property added to _ctx column, containing information on hydrate calls and rate limiting (enabled by setting env var STEAMPIPE_DIAGNOSTIC_LEVEL=all)
• Support for JSONB operators in List hydrate functions. (#594)
• Type property added to ConnectionConfig protobuf definition to determine if a connection is an aggregator. (#590)
• When plugin startup fails, write a specially formatted string to stdout so plugin manager can parse the output and display a useful message. (#619)
• Support for multi-line log entries. (#612)
• Added Equals function for QualValue. (#646)

What's new?

• New tables added
  • kubernetes_pod_template (#170)

Enhancements

• Added 112 new controls to the All Controls benchmark for the following services: (#59)
  • CronJob
  • DaemonSet
  • Deployment
  • Job
  • Pod
  • ReplicaSet
  • ReplicationController
  • StatefulSet

What's new?

• Added support for querying on-premise Jira instances. This can be done by setting the personal_access_token config argument in the jira.spc file. (#86) (Thanks @juandspy for the contribution!)

Bug fixes

• Empty values will no longer be cached incorrectly for the github_my_repository, github_repository, and github_search_repository tables. (#340)
• Fixed github_team_repository table to include support for dynamic GraphQL queries. (#339)

What's new

• Update github_my_repository, github_repository, and github_search_repository tables to only include requested columns in GraphQL request. This should result in faster queries and large scale queries completing more consistently. (#338)

Dependencies

• Recompiled plugin with Go 1.21. (#338)

Bug fixes

• Fixed github_search_repository table queries failing when selecting the has_downloads, has_pages, hooks, network_count, subscribers_count, or topics columns. (#337)

Bug fixes

• Fixed the invalid memory address or nil pointer dereference errors when querying Terraform configuration or plan or state files that included null valued arguments. (#56)

Enhancements

• Added 90 new controls to the All Controls benchmark for the following services: (#56)
  • CronJob
  • DaemonSet
  • Deployment
  • Job
  • Pod
  • ReplicaSet
  • ReplicationController
  • StatefulSet

Bug fixes

• Fixed the role_with_wildcards_used control to correctly return data instead of an error. (#54)

Bug fixes

• Fixed the plugin to return nil instead of an error when the file/path specified in dockerfile_paths or docker_compose_file_paths config arguments does not exist. (#38)

Bug fixes

• Added the missing resource column in the queries of glue_data_catalog_encryption_settings_metadata_encryption_enabled and glue_data_catalog_encryption_settings_password_encryption_enabled controls. (#715)

Enhancements

• Added the resource_object and object columns to guardrails_notification and guardrails_resource tables respectively. (#7)

Bug fixes

• Added the missing S3 go-getter examples in the docs/index.md file.

Bug fixes

• Fixed the data type of capacity_reservation_specification column of aws_ec2_instance table to be of JSON type instead of STRING. (#1903)

Enhancements

• Added the iam_workload_identity_restricted control to the IAM benchmark. (#38)

Breaking changes

• Removed the dms_s3_endpoint_encryption_in_transit_enabled control from the DMS benchmark. (#84)

Enhancements

• Added the vpc_transfer_server_allows_only_secure_protocols control to the VPC benchmark. (#84)

Deprecations

• Deprecated domain column in net_certificate table, which has been replaced by the address column. Please note that the address column requires a port, e.g., github.com:443. This column will be removed in a future version. (#50)

What's new?

• Added address column to the net_certificate table to allow specifying a port with the domain name. (#50)

Bug fixes

• Updated the bitbucket.spc and index.md files to include details of BITBUCKET_USERNAME, BITBUCKET_PASSWORD, and BITBUCKET_API_BASE_URL environment variables. (#77)