Skip to content

Releases: cartography-cncf/cartography

0.9.0

19 Aug 21:57
cf7c79c
Compare
Choose a tag to compare
  • Added new lines to end of test files for Drift Detection tests are no longer inconsistent
  • Drift Detection: refactored reporting to use lists instead of dicts to maintain result order
  • Move GCP unit tests to tests/unit/cartography/intel
  • Add support for AWS EC2 key pairs
  • Fixed issue #123 - logic bug in import crxcavator extensions
  • Sorted collect values in boltstatementrecords to enforce consistency with each database pull

0.8.0

05 Aug 17:21
e8f1728
Compare
Choose a tag to compare
  • Added pre-commit linting
  • Drift detection: allow add_shortcuts() to have shortcuts as arguments
  • Fixed #49 - Warn and return None when a NoSuchBucket error is caught from get_bucket_acl()
  • Added CRXcavator intel module to ingest Chrome extension data
  • Fixed #104 - Drift Detection CLI failed occasionally
  • Fixed #99 - improved how AWS ELBs are determined to be internet exposed
  • IAM: fixed UnboundLocalError and added support for AWS IAM Federated Principals
  • Added Drift Detection feature to track graph changes over time

0.7.0

13 Jun 22:01
563bbfd
Compare
Choose a tag to compare
  • GCP instances that are exposed to the internet via firewall rules are now marked with exposed_internet: True

0.6.0

11 Jun 20:12
b2a25f0
Compare
Choose a tag to compare
  • Add GCP firewalls, firewall allow and deny rules, network tags, connect firewall rules to IP ranges, GCP VPCs, subnets, network interfaces, NIC access configs
  • Use partial_uri as unique identifier on GCP instances
  • Add AWSPrincipal nodes to represent the root identity of each AWS account being synced
  • Fix IAM statement parsing bug which would cause single-statement policies to crash sync
  • Use policyuniverse to parse IAM statements and find role assumption permissions
  • Ingest Global Secondary Indexes and more DynamoDB properties
  • Change relationship between AWSPrincipal and AWSRole nodes to clarify the distinction between trust and permission relationships
  • Add AWSPrincipal label to AWSRole nodes
  • Integration tests are now configurable

0.5.0

23 May 22:16
8dfcdf7
Compare
Choose a tag to compare
  • Ingest Google Cloud Platform organizations, projects, folders, and compute instance objects.

0.4.0

02 May 22:15
9da0dff
Compare
Choose a tag to compare
  • Added (:AWSRole)-[:STS_ASSUMEROLE_ALLOW]->(:AWSRole) relationship ingestion.
  • Fixed #60

0.3.0

23 Apr 19:37
0f562a5
Compare
Choose a tag to compare
  • Added VPC peering to the graph
  • Fix #31, #34, #41, #55, #51
  • Added docs on manual testing

0.3.0rc2

22 Apr 20:25
c934491
Compare
Choose a tag to compare
0.3.0rc2 Pre-release
Pre-release

Including Sacha's fix for #55.

0.3.0rc1

12 Apr 23:55
b6acd97
Compare
Choose a tag to compare
0.3.0rc1 Pre-release
Pre-release
  • Add VPC peering
  • Fix bug in STS_ASSUMEROLE_ALLOW (see #51)

0.2.3rc3

04 Apr 23:20
2f1b7bd
Compare
Choose a tag to compare
0.2.3rc3 Pre-release
Pre-release

Fix #31