threatintel-vuln-v5-2025-02-06_01-30-07

Merge branch 'main' into release-2.5

threatintel-vuln-v5-2025-02-05_13-06-35

Merge branch 'main' into release-2.5

v2.5.3

What's Changed

• Update Jenkins example by @ramanan-ravi in #2401
• Limit resource count for header display to avoid unnecessary large count queries by @manV in #2404
• add database info api by @gnmahanth in #2406
• add communication messages by @noboruma in #2409
• Add ThreatIntel feed info in the settings and banner. by @manV in #2407
• UI support for communication messages by @manV in #2413
• Deepfence communication messages by @ramanan-ravi in #2411
• Update api spec by @manV in #2414
• Update docs by @ramanan-ravi in #2415

Full Changelog: v2.5.2...v2.5.3

v2.5.2

What's Changed

• update docker images and command args for ci-cd intgreations by @gnmahanth in #2382
• Add reference link in malware result by @ramanan-ravi in #2383
• update default toleration of cluster agent to empty array by @gnmahanth in #2386
• Add 'reference' field to Malware detail pages by @manV in #2387
• Set default state of filters to expanded in multiple components by @manV in #2388
• add flag to indicate if resources are active by @gnmahanth in #2389
• Issue detail modals: add inactive indicators for resources by @manV in #2390
• Scheduled scans - resolve cloud accounts in an organization by @ramanan-ravi in #2391
• Optimize filter dropdowns by @manV in #2393
• Add more fields in cloud posture xlsx reports by @ramanan-ravi in #2392
• Add image name in container filter by @ramanan-ravi in #2394
• Add image name in container filter by @ramanan-ravi in #2395
• UI: Container scan comparison by @manV in #2397
• Add custom tags to hosts, containers, pods by @ramanan-ravi in #2398
• Add custom tags to hosts, containers, pods by @ramanan-ravi in #2399
• UI: user defined tags filters by @manV in #2400

Full Changelog: v2.5.1...v2.5.2

v2.5.1

What's Changed

• Update docs - API documentation link by @ramanan-ravi in #2374
• Set license active in api access token #2372 by @ramanan-ravi in #2375
• Append logrotate to existing crontab in agents by @ramanan-ravi in #2377
• Upgrade version to v2.5.1 by @ramanan-ravi in #2378
• Remove folders from logrotate which are handled by shipper by @ramanan-ravi in #2379
• Remove curl binary from fargate build by @ramanan-ravi in #2380
• Elasticsearch integration - try sending individual documents if bulk api fails by @ramanan-ravi in #2381

Full Changelog: v2.5.0...v2.5.1

v2.5.0

What's Changed

• Pretty name for registry and role in audit logs table by @milan-deepfence in #2282
• scan history selection improvements by @manV in #2283
• Support order filter in scans list api by @ramanan-ravi in #2281
• Add all vulnerability rules in neo4j by @ramanan-ravi in #2284
• add pod priorityClassName in helm charts by @gnmahanth in #2285
• Vulnerability rule by @noboruma in #2286
• add fields to required for vulnerability by @gnmahanth in #2290
• fix worker scans by @noboruma in #2291
• fix vuln rules apis by @noboruma in #2292
• Add feeds UI by @manV in #2293
• Add EPSS score in lookup vulnerabilities api by @ramanan-ravi in #2294
• Add description in lookup vulnerabilities api by @ramanan-ravi in #2295
• CVE detail modal fields by @manV in #2296
• Remove VulnerabilityStub as extended field of Vulnerability by @ramanan-ravi in #2297
• S3 integration - cross account by @ramanan-ravi in #2298
• remove cgroup settings in boostrapper by @noboruma in #2299
• update cloud scanner docs for using cloud scanner on EKS cluster by @gnmahanth in #2301
• Fix container by @noboruma in #2302
• Update version by @ramanan-ravi in #2305
• update instuctions to run cloud scanner on ec2 by @gnmahanth in #2306
• ECR registry using IAM role in Kubernetes by @ramanan-ravi in #2307
• Combobox, Listbox components refactor by @manV in #2312
• add docs with support for gke and gce vm cloud scanner by @gnmahanth in #2313
• Listbox refactor by @manV in #2315
• Fix deepfence agent privileges on security hardened clusters by @Kajot-dev in #2314
• update docs to support azure aks cluster and azure virtual machine by @gnmahanth in #2317
• remove sensitive contents while logging by @gnmahanth in #2320
• Add refresh status info message for cloud posture accounts by @manV in #2321
• fix vulnerability scan filters not working by @gnmahanth in #2323
• Cloud scanner resources refresh progress by @ramanan-ravi in #2316
• add docs for locating logs in agent by @gnmahanth in #2324
• Update linux agent installation documentation by @ramanan-ravi in #2326
• Most exploitable dashboard changes by @manV in #2327
• Update cloud scanner documentation by @ramanan-ravi in #2329
• Update cloud scanner documentation by @ramanan-ravi in #2330
• Update cloud scanner docs by @ramanan-ravi in #2334
• add proxy support by @noboruma in #2336
• Use globally stacked modals when navigating between different resources by @manV in #2335
• stacked detail modal fixes by @manV in #2339
• Don't ingest all vulnerability rules on startup by @ramanan-ravi in #2341
• Remove vulnerability rules listing page by @manV in #2340
• Update fargate documentation by @ramanan-ravi in #2342
• Add posture controls management settings screens by @manV in #2343
• Add cisa kev and epss score in vulnerability scan result by @ramanan-ravi in #2346
• Changes to fargate entrypoint by @ramanan-ravi in #2347
• Add cvss score in vulnerability node by @ramanan-ravi in #2348
• fix all providers selected for notification by @gnmahanth in #2349
• fix cloud account filter for integration form by @manV in #2351
• Remove dynamically linked file envsubst in fargate by @ramanan-ravi in #2352
• Jira - fix attachment empty when optional custom fields are not set by @ramanan-ravi in #2354
• Fix missing node id in VulnerabilityStub by @ramanan-ravi in #2353
• Bump to golang 1.23 by @noboruma in #2355
• Secrets and Malware dashboard updates by @manV in #2357
• Bump to golang 1.23 by @ramanan-ravi in #2356
• Set steampipe version in Kubernetes cluster agent by @ramanan-ravi in #2358
• Update docs by @ramanan-ravi in #2360
• Add info text on vulnerability dashboard card by @manV in #2361
• Rename secret field 'name' to 'rule_id' by @ramanan-ravi in #2363
• Change secret meta Name to Rule ID by @manV in #2364
• Update AWS cloud scanner docs by @ramanan-ravi in #2365
• UI: add an option for zipped report download by @manV in #2366
• zipped reports download by @gnmahanth in #2359
• change nodeType in report params to string array by @gnmahanth in #2368
• Update reporting spec by @manV in #2370
• Add support for proxy server by @ramanan-ravi in #2371
• add resource_group to azure cloud resources by @gnmahanth in #2369

New Contributors

• @Kajot-dev made their first contribution in #2314

Full Changelog: v2.4.0...v2.5.0

v2.4.0

What's Changed

• add support for TLS redis connection by @finchr in #2308
• Revert "add support for TLS redis connection" by @ramanan-ravi in #2309
• Add support for TLS redis connection by @ramanan-ravi in #2310
• Enforce DEEPFENCE_FILE_SERVER_PORT to be a string by @psych0d0g in #2331
• Remove duplicate app label by @psych0d0g in #2332

New Contributors

• @finchr made their first contribution in #2308
• @psych0d0g made their first contribution in #2331

Full Changelog: v2.3.1...v2.4.0

threatintel-vuln-v3-2024-09-24_00-02-40

Fix deepfence agent privileges on security hardened clusters (#2314)

threatintel-vuln-v3-2024-09-23_00-02-38

ECR registry using IAM role in Kubernetes (#2307)

(cherry picked from commit 0e13f0e5a9bdb82ed1bb79d42b939e9b0b8ea48c)

v2.3.1

What's Changed

• Fix label name by @milan-deepfence in #2280
• remove cgroup settings in boostrapper by @noboruma in #2300

Full Changelog: v2.3.0...v2.3.1