Releases: cleancloud-io/cleancloud
v1.31.0
What's Changed
- Added missing aws.ec2.gpu.idle spec and minor fixes to gcp.vertex.workbench.idle rule by @javvaji-devops in #172
Full Changelog: v1.30.0...v1.31.0
🐳 Docker Image
# AWS
docker run --rm -e AWS_ACCESS_KEY_ID -e AWS_SECRET_ACCESS_KEY -e AWS_SESSION_TOKEN -e AWS_REGION getcleancloud/cleancloud scan --provider aws --all-regions
# Azure
docker run --rm -e AZURE_CLIENT_ID -e AZURE_TENANT_ID -e AZURE_SUBSCRIPTION_ID -e AZURE_FEDERATED_TOKEN_FILE -v "${AZURE_FEDERATED_TOKEN_FILE}:${AZURE_FEDERATED_TOKEN_FILE}:ro" getcleancloud/cleancloud scan --provider azure
# GCP (WIF or service account key)
docker run --rm -e GOOGLE_APPLICATION_CREDENTIALS=/gcp-creds.json -v "${GOOGLE_APPLICATION_CREDENTIALS}:/gcp-creds.json:ro" getcleancloud/cleancloud scan --provider gcp --all-projects📦 Pull: docker pull getcleancloud/cleancloud:1.31.0
🔗 Docker Hub: https://hub.docker.com/r/getcleancloud/cleancloud
🔏 Digest: sha256:a2192c047c06171a477d14b8f77e2d9ab85898949ea14bb8189332cf9d454fd1
v1.30.0
What's Changed
- Update Readme as per feedback by @sureshcsdp in #170
- GCP AI Rule hardening - final part by @javvaji-devops in #171
Full Changelog: v1.29.0...v1.30.0
🐳 Docker Image
# AWS
docker run --rm -e AWS_ACCESS_KEY_ID -e AWS_SECRET_ACCESS_KEY -e AWS_SESSION_TOKEN -e AWS_REGION getcleancloud/cleancloud scan --provider aws --all-regions
# Azure
docker run --rm -e AZURE_CLIENT_ID -e AZURE_TENANT_ID -e AZURE_SUBSCRIPTION_ID -e AZURE_FEDERATED_TOKEN_FILE -v "${AZURE_FEDERATED_TOKEN_FILE}:${AZURE_FEDERATED_TOKEN_FILE}:ro" getcleancloud/cleancloud scan --provider azure
# GCP (WIF or service account key)
docker run --rm -e GOOGLE_APPLICATION_CREDENTIALS=/gcp-creds.json -v "${GOOGLE_APPLICATION_CREDENTIALS}:/gcp-creds.json:ro" getcleancloud/cleancloud scan --provider gcp --all-projects📦 Pull: docker pull getcleancloud/cleancloud:1.30.0
🔗 Docker Hub: https://hub.docker.com/r/getcleancloud/cleancloud
🔏 Digest: sha256:963af807fe46e7d58093c74b42483356caf59f532c01e30e4420ee6c200c5a1d
v1.29.0
What's Changed
- GCP AI rule hardening - part 1 by @javvaji-devops in #169
Full Changelog: v1.28.0...v1.29.0
🐳 Docker Image
# AWS
docker run --rm -e AWS_ACCESS_KEY_ID -e AWS_SECRET_ACCESS_KEY -e AWS_SESSION_TOKEN -e AWS_REGION getcleancloud/cleancloud scan --provider aws --all-regions
# Azure
docker run --rm -e AZURE_CLIENT_ID -e AZURE_TENANT_ID -e AZURE_SUBSCRIPTION_ID -e AZURE_FEDERATED_TOKEN_FILE -v "${AZURE_FEDERATED_TOKEN_FILE}:${AZURE_FEDERATED_TOKEN_FILE}:ro" getcleancloud/cleancloud scan --provider azure
# GCP (WIF or service account key)
docker run --rm -e GOOGLE_APPLICATION_CREDENTIALS=/gcp-creds.json -v "${GOOGLE_APPLICATION_CREDENTIALS}:/gcp-creds.json:ro" getcleancloud/cleancloud scan --provider gcp --all-projects📦 Pull: docker pull getcleancloud/cleancloud:1.29.0
🔗 Docker Hub: https://hub.docker.com/r/getcleancloud/cleancloud
🔏 Digest: sha256:c26ccd8dfe8633c57d1d1e1ad80693dc9d1f65bffc702175aec7010bc77fa284
v1.28.0
What's Changed
- GCP rule hardening - Part 1 by @sureshcsdp in #168
Full Changelog: v1.27.0...v1.28.0
🐳 Docker Image
# AWS
docker run --rm -e AWS_ACCESS_KEY_ID -e AWS_SECRET_ACCESS_KEY -e AWS_SESSION_TOKEN -e AWS_REGION getcleancloud/cleancloud scan --provider aws --all-regions
# Azure
docker run --rm -e AZURE_CLIENT_ID -e AZURE_TENANT_ID -e AZURE_SUBSCRIPTION_ID -e AZURE_FEDERATED_TOKEN_FILE -v "${AZURE_FEDERATED_TOKEN_FILE}:${AZURE_FEDERATED_TOKEN_FILE}:ro" getcleancloud/cleancloud scan --provider azure
# GCP (WIF or service account key)
docker run --rm -e GOOGLE_APPLICATION_CREDENTIALS=/gcp-creds.json -v "${GOOGLE_APPLICATION_CREDENTIALS}:/gcp-creds.json:ro" getcleancloud/cleancloud scan --provider gcp --all-projects📦 Pull: docker pull getcleancloud/cleancloud:1.28.0
🔗 Docker Hub: https://hub.docker.com/r/getcleancloud/cleancloud
🔏 Digest: sha256:5b641b7036c22f41dd868630a5a452cf3683cfec2cd158871a5301aa3ffe6e55
v1.27.0
What's Changed
- AWS & Azure : fixed issues reported by users by @sureshcsdp in #167
Full Changelog: v1.26.0...v1.27.0
🐳 Docker Image
# AWS
docker run --rm -e AWS_ACCESS_KEY_ID -e AWS_SECRET_ACCESS_KEY -e AWS_SESSION_TOKEN -e AWS_REGION getcleancloud/cleancloud scan --provider aws --all-regions
# Azure
docker run --rm -e AZURE_CLIENT_ID -e AZURE_TENANT_ID -e AZURE_SUBSCRIPTION_ID -e AZURE_FEDERATED_TOKEN_FILE -v "${AZURE_FEDERATED_TOKEN_FILE}:${AZURE_FEDERATED_TOKEN_FILE}:ro" getcleancloud/cleancloud scan --provider azure
# GCP (WIF or service account key)
docker run --rm -e GOOGLE_APPLICATION_CREDENTIALS=/gcp-creds.json -v "${GOOGLE_APPLICATION_CREDENTIALS}:/gcp-creds.json:ro" getcleancloud/cleancloud scan --provider gcp --all-projects📦 Pull: docker pull getcleancloud/cleancloud:1.27.0
🔗 Docker Hub: https://hub.docker.com/r/getcleancloud/cleancloud
🔏 Digest: sha256:f393dcb4c78e1d9969a8030e43dea6392e058b4970520362944ceb973c6fce2d
v1.26.0
What's Changed
- Azure AI rules hardening - final part by @sureshcsdp in #166
Full Changelog: v1.25.0...v1.26.0
🐳 Docker Image
# AWS
docker run --rm -e AWS_ACCESS_KEY_ID -e AWS_SECRET_ACCESS_KEY -e AWS_SESSION_TOKEN -e AWS_REGION getcleancloud/cleancloud scan --provider aws --all-regions
# Azure
docker run --rm -e AZURE_CLIENT_ID -e AZURE_TENANT_ID -e AZURE_SUBSCRIPTION_ID -e AZURE_FEDERATED_TOKEN_FILE -v "${AZURE_FEDERATED_TOKEN_FILE}:${AZURE_FEDERATED_TOKEN_FILE}:ro" getcleancloud/cleancloud scan --provider azure
# GCP (WIF or service account key)
docker run --rm -e GOOGLE_APPLICATION_CREDENTIALS=/gcp-creds.json -v "${GOOGLE_APPLICATION_CREDENTIALS}:/gcp-creds.json:ro" getcleancloud/cleancloud scan --provider gcp --all-projects📦 Pull: docker pull getcleancloud/cleancloud:1.26.0
🔗 Docker Hub: https://hub.docker.com/r/getcleancloud/cleancloud
🔏 Digest: sha256:29d4e857f62019237db4e76da320281572175b6065fd2a4a69ff1371cc8ee162
Release v1.25.0 - Hardened Azure rules - part 3
What's Changed
- Azure rules hardening - part 3 by @sureshcsdp in #165
Full Changelog: v1.24.0...v1.25.0
🐳 Docker Image
# AWS
docker run --rm -e AWS_ACCESS_KEY_ID -e AWS_SECRET_ACCESS_KEY -e AWS_SESSION_TOKEN -e AWS_REGION getcleancloud/cleancloud scan --provider aws --all-regions
# Azure
docker run --rm -e AZURE_CLIENT_ID -e AZURE_TENANT_ID -e AZURE_SUBSCRIPTION_ID -e AZURE_FEDERATED_TOKEN_FILE -v "${AZURE_FEDERATED_TOKEN_FILE}:${AZURE_FEDERATED_TOKEN_FILE}:ro" getcleancloud/cleancloud scan --provider azure
# GCP (WIF or service account key)
docker run --rm -e GOOGLE_APPLICATION_CREDENTIALS=/gcp-creds.json -v "${GOOGLE_APPLICATION_CREDENTIALS}:/gcp-creds.json:ro" getcleancloud/cleancloud scan --provider gcp --all-projects📦 Pull: docker pull getcleancloud/cleancloud:1.25.0
🔗 Docker Hub: https://hub.docker.com/r/getcleancloud/cleancloud
🔏 Digest: sha256:eaab7c242c905b9d423025118368b25ec56898bcf0061e2ccf2e56275d8e0039
Release v1.24.0 - Hardened Azure rules - part 2
What's Changed
- Azure rules hardening - Part 2 by @sureshcsdp in #164
Full Changelog: v1.23.0...v1.24.0
🐳 Docker Image
# AWS
docker run --rm -e AWS_ACCESS_KEY_ID -e AWS_SECRET_ACCESS_KEY -e AWS_SESSION_TOKEN -e AWS_REGION getcleancloud/cleancloud scan --provider aws --all-regions
# Azure
docker run --rm -e AZURE_CLIENT_ID -e AZURE_TENANT_ID -e AZURE_SUBSCRIPTION_ID -e AZURE_FEDERATED_TOKEN_FILE -v "${AZURE_FEDERATED_TOKEN_FILE}:${AZURE_FEDERATED_TOKEN_FILE}:ro" getcleancloud/cleancloud scan --provider azure
# GCP (WIF or service account key)
docker run --rm -e GOOGLE_APPLICATION_CREDENTIALS=/gcp-creds.json -v "${GOOGLE_APPLICATION_CREDENTIALS}:/gcp-creds.json:ro" getcleancloud/cleancloud scan --provider gcp --all-projects📦 Pull: docker pull getcleancloud/cleancloud:1.24.0
🔗 Docker Hub: https://hub.docker.com/r/getcleancloud/cleancloud
🔏 Digest: sha256:e8295789eae591ffb0d3f0c782343d65b451e80369c3febfde03d128be2b1b99
Release v1.23.0 - Hardened Azure rules
What's Changed
- Azure rule hardening - Part 1 by @sureshcsdp in #162
- Azure rule hardening - Part 2 by @sureshcsdp in #163
Full Changelog: v1.22.0...v1.23.0
🐳 Docker Image
# AWS
docker run --rm -e AWS_ACCESS_KEY_ID -e AWS_SECRET_ACCESS_KEY -e AWS_SESSION_TOKEN -e AWS_REGION getcleancloud/cleancloud scan --provider aws --all-regions
# Azure
docker run --rm -e AZURE_CLIENT_ID -e AZURE_TENANT_ID -e AZURE_SUBSCRIPTION_ID -e AZURE_FEDERATED_TOKEN_FILE -v "${AZURE_FEDERATED_TOKEN_FILE}:${AZURE_FEDERATED_TOKEN_FILE}:ro" getcleancloud/cleancloud scan --provider azure
# GCP (WIF or service account key)
docker run --rm -e GOOGLE_APPLICATION_CREDENTIALS=/gcp-creds.json -v "${GOOGLE_APPLICATION_CREDENTIALS}:/gcp-creds.json:ro" getcleancloud/cleancloud scan --provider gcp --all-projects📦 Pull: docker pull getcleancloud/cleancloud:1.23.0
🔗 Docker Hub: https://hub.docker.com/r/getcleancloud/cleancloud
🔏 Digest: sha256:0fbf7d7e95a0fc5fcb7b44e079f1a674a588dd3bcb65ab5ea28175bdd93dcfe9
Release v1.22.0 - AWS rule hardening
What's Changed
- AWS Rule hardening - final part by @sureshcsdp in #161
Full Changelog: v1.21.0...v1.22.0
🐳 Docker Image
# AWS
docker run --rm -e AWS_ACCESS_KEY_ID -e AWS_SECRET_ACCESS_KEY -e AWS_SESSION_TOKEN -e AWS_REGION getcleancloud/cleancloud scan --provider aws --all-regions
# Azure
docker run --rm -e AZURE_CLIENT_ID -e AZURE_TENANT_ID -e AZURE_SUBSCRIPTION_ID -e AZURE_FEDERATED_TOKEN_FILE -v "${AZURE_FEDERATED_TOKEN_FILE}:${AZURE_FEDERATED_TOKEN_FILE}:ro" getcleancloud/cleancloud scan --provider azure
# GCP (WIF or service account key)
docker run --rm -e GOOGLE_APPLICATION_CREDENTIALS=/gcp-creds.json -v "${GOOGLE_APPLICATION_CREDENTIALS}:/gcp-creds.json:ro" getcleancloud/cleancloud scan --provider gcp --all-projects📦 Pull: docker pull getcleancloud/cleancloud:1.22.0
🔗 Docker Hub: https://hub.docker.com/r/getcleancloud/cleancloud
🔏 Digest: sha256:99d4f1a980511f33228678eaa3c3abda6e8425f76442b041b893e0d6f2556c35