Skip to content

Releases: ansible/ansible-risk-insight

0.2.9

10 Oct 06:41
f4b2d81
Compare
Choose a tag to compare

What's changed

  • Fix a line number detection bug with empty lines (#259)

Contributors

@hirokuni-kitahara
@yuji-watanabe-jp

0.2.8

02 Sep 02:45
664f2c1
Compare
Choose a tag to compare

What's changed

  • Fix the ARI inline replace functionality issue observed under issue 247(#248)
  • Fix to correctly identify task based on Ansible block and when indentation (#250)
  • Fix line number detection bugs when loading tasks (#254)
  • Fix taskfile/role loading issue when they are under some specific location (#255)

Contributors

@justjais
@yuji-watanabe-jp
@hirokuni-kitahara

0.2.7

13 Jun 05:47
62beb6d
Compare
Choose a tag to compare

What's changed

  • Add --fix option to add inline replace / fix functionality (#238)
  • Fix module_defaults handling (#239)
  • Fix an issue around parameterized module option (#240)
  • Add support for tasks with local_action field (#241)
  • Add --save-only-rule-result option to reduce the result file size (#235)
  • Add --scan-per-target option to enable to save results per scanning target files (#236)

Contributors

@justjais
@yuji-watanabe-jp
@hirokuni-kitahara

0.2.6

07 May 06:48
75bb48b
Compare
Choose a tag to compare

What's changed

  • Remove ansible-core dependency (#230)
  • Enable to pass ARI config path as an env variable (#228)

Contributors

@justjais
@yuji-watanabe-jp
@hirokuni-kitahara

0.2.5

25 Apr 12:56
a3b7ebc
Compare
Choose a tag to compare

What's changed

  • Update / remove some dependencies (#226)
  • Fix path searching issues around project scan (#214, #215, #216)
  • Fix line number detection for task loading (#217)
  • Fix CLI option inconsistency (#225)

Contributors

@yuji-watanabe-jp
@hirokuni-kitahara

0.2.4

16 Nov 03:13
26822c3
Compare
Choose a tag to compare

What's changed

  • Support vars_files block in plays and now ARI can load the vars files specified there as well as include_vars task (#208)
  • Fix module search issue when the module is redirected (#211)
  • Improve play detection logic so that it can handle a playbook with wrong attributes like host instead of hosts (#207)
  • Fix variable type checking in a P-rule for some special builtin modules that accept any form of arguments such as debug or meta (#205)

Contributors

@yuji-watanabe-jp
@hirokuni-kitahara

0.2.3

27 Oct 07:54
90d8601
Compare
Choose a tag to compare

What's changed

  • Add an ARI object model File for loading general files (#202)
    • currently it is used only for variable YAML files that are inside Role / included by include_vars, but this will be extended to support any files in the future
  • Fix yaml parser issue when ARI is concurrently called by using retry (#200)
  • Fix an issue of registered variables that their child elements (like <registered_var>.xxx.yyy) were reported as undefined (#199)
  • Fix download function for external dependencies (#198)

Contributors

@rurikudo
@yuji-watanabe-jp
@hirokuni-kitahara

0.2.2

10 Oct 08:31
9e5ef3d
Compare
Choose a tag to compare

What's changed

  • Enable to load handlers in a play as tasks (#196)
    • handlers is newly added to Play model (Other task-related fields like pre_tasks, tasks, post_tasks and roles are already supported)
    • rules are applied to handlers in playbooks while rule evaluation
    • handler tasks can be found by ARIResult.task(name=xxxx)
  • YAML files for GitHub actions (.github/workflows) are excluded while Ansible YAML file search (#195)
  • Enable to mutate task name by rules (#194)

Contributors

@yuji-watanabe-jp
@hirokuni-kitahara

0.2.1

28 Sep 07:54
6f47237
Compare
Choose a tag to compare

What's changed

  • Improve role name resolution and store the resolved role info appropriately
    • Play.roles_info is moved to RoleInPlay.role_info so that each resolved role info can be easy to use
  • Add RAM-related scripts
    • gen_ram_subset.py to make a subset of an existing RAM data by copying some specified collections only
    • gen_ram_slim.py to reduce data size of an existing RAM data (the generated ram-slim will have only module-related data)
  • Fix issues around RuleResult when multiple nodes have the same name string

Contributors

@rurikudo
@yuji-watanabe-jp
@hirokuni-kitahara

0.2.0

05 Sep 06:14
0616259
Compare
Choose a tag to compare

What's changed

  • Improve ARI scan coverage for various types of Ansible contents
    • Project (Repository): improve project scan by testing with more than 100 projects
    • Role: support scanning for roles with more complex structure like a role with playbooks in molecule dir
    • Collection: fix bugs for collection scanning
  • Support concurrent scanning
  • Enable YAML file labeling in the specified directory (implemented as a utility function)

Contributors

@gebhardtr
@mbwhite
@rurikudo
@yuji-watanabe-jp
@hirokuni-kitahara