Releases: ansible/ansible-risk-insight
Releases · ansible/ansible-risk-insight
0.2.9
0.2.8
What's changed
- Fix the ARI inline replace functionality issue observed under issue 247(#248)
- Fix to correctly identify task based on Ansible block and when indentation (#250)
- Fix line number detection bugs when loading tasks (#254)
- Fix taskfile/role loading issue when they are under some specific location (#255)
Contributors
0.2.7
What's changed
- Add
--fix
option to add inline replace / fix functionality (#238) - Fix
module_defaults
handling (#239) - Fix an issue around parameterized module option (#240)
- Add support for tasks with
local_action
field (#241) - Add
--save-only-rule-result
option to reduce the result file size (#235) - Add
--scan-per-target
option to enable to save results per scanning target files (#236)
Contributors
0.2.6
What's changed
Contributors
0.2.5
0.2.4
What's changed
- Support
vars_files
block in plays and now ARI can load the vars files specified there as well asinclude_vars
task (#208) - Fix module search issue when the module is redirected (#211)
- Improve play detection logic so that it can handle a playbook with wrong attributes like
host
instead ofhosts
(#207) - Fix variable type checking in a P-rule for some special builtin modules that accept any form of arguments such as
debug
ormeta
(#205)
Contributors
0.2.3
What's changed
- Add an ARI object model
File
for loading general files (#202)- currently it is used only for variable YAML files that are inside Role / included by
include_vars
, but this will be extended to support any files in the future
- currently it is used only for variable YAML files that are inside Role / included by
- Fix yaml parser issue when ARI is concurrently called by using retry (#200)
- Fix an issue of registered variables that their child elements (like
<registered_var>.xxx.yyy
) were reported as undefined (#199) - Fix download function for external dependencies (#198)
Contributors
0.2.2
What's changed
- Enable to load
handlers
in a play as tasks (#196)handlers
is newly added toPlay
model (Other task-related fields likepre_tasks
,tasks
,post_tasks
androles
are already supported)- rules are applied to handlers in playbooks while rule evaluation
- handler tasks can be found by
ARIResult.task(name=xxxx)
- YAML files for GitHub actions (.github/workflows) are excluded while Ansible YAML file search (#195)
- Enable to mutate task name by rules (#194)
Contributors
0.2.1
What's changed
- Improve role name resolution and store the resolved role info appropriately
Play.roles_info
is moved toRoleInPlay.role_info
so that each resolved role info can be easy to use
- Add RAM-related scripts
gen_ram_subset.py
to make a subset of an existing RAM data by copying some specified collections onlygen_ram_slim.py
to reduce data size of an existing RAM data (the generated ram-slim will have only module-related data)
- Fix issues around RuleResult when multiple nodes have the same
name
string
Contributors
0.2.0
What's changed
- Improve ARI scan coverage for various types of Ansible contents
- Project (Repository): improve project scan by testing with more than 100 projects
- Role: support scanning for roles with more complex structure like a role with playbooks in molecule dir
- Collection: fix bugs for collection scanning
- Support concurrent scanning
- Enable YAML file labeling in the specified directory (implemented as a utility function)
Contributors
@gebhardtr
@mbwhite
@rurikudo
@yuji-watanabe-jp
@hirokuni-kitahara