Skip to content

Releases: cleancloud-io/cleancloud

v1.31.0

06 May 21:00
35cc09e

Choose a tag to compare

What's Changed

  • Added missing aws.ec2.gpu.idle spec and minor fixes to gcp.vertex.workbench.idle rule by @javvaji-devops in #172

Full Changelog: v1.30.0...v1.31.0

🐳 Docker Image

# AWS
docker run --rm -e AWS_ACCESS_KEY_ID -e AWS_SECRET_ACCESS_KEY -e AWS_SESSION_TOKEN -e AWS_REGION getcleancloud/cleancloud scan --provider aws --all-regions

# Azure
docker run --rm -e AZURE_CLIENT_ID -e AZURE_TENANT_ID -e AZURE_SUBSCRIPTION_ID -e AZURE_FEDERATED_TOKEN_FILE -v "${AZURE_FEDERATED_TOKEN_FILE}:${AZURE_FEDERATED_TOKEN_FILE}:ro" getcleancloud/cleancloud scan --provider azure

# GCP (WIF or service account key)
docker run --rm -e GOOGLE_APPLICATION_CREDENTIALS=/gcp-creds.json -v "${GOOGLE_APPLICATION_CREDENTIALS}:/gcp-creds.json:ro" getcleancloud/cleancloud scan --provider gcp --all-projects

📦 Pull: docker pull getcleancloud/cleancloud:1.31.0
🔗 Docker Hub: https://hub.docker.com/r/getcleancloud/cleancloud
🔏 Digest: sha256:a2192c047c06171a477d14b8f77e2d9ab85898949ea14bb8189332cf9d454fd1

v1.30.0

06 May 14:24
72e5f4c

Choose a tag to compare

What's Changed

Full Changelog: v1.29.0...v1.30.0

🐳 Docker Image

# AWS
docker run --rm -e AWS_ACCESS_KEY_ID -e AWS_SECRET_ACCESS_KEY -e AWS_SESSION_TOKEN -e AWS_REGION getcleancloud/cleancloud scan --provider aws --all-regions

# Azure
docker run --rm -e AZURE_CLIENT_ID -e AZURE_TENANT_ID -e AZURE_SUBSCRIPTION_ID -e AZURE_FEDERATED_TOKEN_FILE -v "${AZURE_FEDERATED_TOKEN_FILE}:${AZURE_FEDERATED_TOKEN_FILE}:ro" getcleancloud/cleancloud scan --provider azure

# GCP (WIF or service account key)
docker run --rm -e GOOGLE_APPLICATION_CREDENTIALS=/gcp-creds.json -v "${GOOGLE_APPLICATION_CREDENTIALS}:/gcp-creds.json:ro" getcleancloud/cleancloud scan --provider gcp --all-projects

📦 Pull: docker pull getcleancloud/cleancloud:1.30.0
🔗 Docker Hub: https://hub.docker.com/r/getcleancloud/cleancloud
🔏 Digest: sha256:963af807fe46e7d58093c74b42483356caf59f532c01e30e4420ee6c200c5a1d

v1.29.0

28 Apr 22:22
55ccba4

Choose a tag to compare

What's Changed

Full Changelog: v1.28.0...v1.29.0

🐳 Docker Image

# AWS
docker run --rm -e AWS_ACCESS_KEY_ID -e AWS_SECRET_ACCESS_KEY -e AWS_SESSION_TOKEN -e AWS_REGION getcleancloud/cleancloud scan --provider aws --all-regions

# Azure
docker run --rm -e AZURE_CLIENT_ID -e AZURE_TENANT_ID -e AZURE_SUBSCRIPTION_ID -e AZURE_FEDERATED_TOKEN_FILE -v "${AZURE_FEDERATED_TOKEN_FILE}:${AZURE_FEDERATED_TOKEN_FILE}:ro" getcleancloud/cleancloud scan --provider azure

# GCP (WIF or service account key)
docker run --rm -e GOOGLE_APPLICATION_CREDENTIALS=/gcp-creds.json -v "${GOOGLE_APPLICATION_CREDENTIALS}:/gcp-creds.json:ro" getcleancloud/cleancloud scan --provider gcp --all-projects

📦 Pull: docker pull getcleancloud/cleancloud:1.29.0
🔗 Docker Hub: https://hub.docker.com/r/getcleancloud/cleancloud
🔏 Digest: sha256:c26ccd8dfe8633c57d1d1e1ad80693dc9d1f65bffc702175aec7010bc77fa284

v1.28.0

27 Apr 07:55
9e6f60f

Choose a tag to compare

What's Changed

Full Changelog: v1.27.0...v1.28.0

🐳 Docker Image

# AWS
docker run --rm -e AWS_ACCESS_KEY_ID -e AWS_SECRET_ACCESS_KEY -e AWS_SESSION_TOKEN -e AWS_REGION getcleancloud/cleancloud scan --provider aws --all-regions

# Azure
docker run --rm -e AZURE_CLIENT_ID -e AZURE_TENANT_ID -e AZURE_SUBSCRIPTION_ID -e AZURE_FEDERATED_TOKEN_FILE -v "${AZURE_FEDERATED_TOKEN_FILE}:${AZURE_FEDERATED_TOKEN_FILE}:ro" getcleancloud/cleancloud scan --provider azure

# GCP (WIF or service account key)
docker run --rm -e GOOGLE_APPLICATION_CREDENTIALS=/gcp-creds.json -v "${GOOGLE_APPLICATION_CREDENTIALS}:/gcp-creds.json:ro" getcleancloud/cleancloud scan --provider gcp --all-projects

📦 Pull: docker pull getcleancloud/cleancloud:1.28.0
🔗 Docker Hub: https://hub.docker.com/r/getcleancloud/cleancloud
🔏 Digest: sha256:5b641b7036c22f41dd868630a5a452cf3683cfec2cd158871a5301aa3ffe6e55

v1.27.0

25 Apr 20:29
a0ee7d2

Choose a tag to compare

What's Changed

Full Changelog: v1.26.0...v1.27.0

🐳 Docker Image

# AWS
docker run --rm -e AWS_ACCESS_KEY_ID -e AWS_SECRET_ACCESS_KEY -e AWS_SESSION_TOKEN -e AWS_REGION getcleancloud/cleancloud scan --provider aws --all-regions

# Azure
docker run --rm -e AZURE_CLIENT_ID -e AZURE_TENANT_ID -e AZURE_SUBSCRIPTION_ID -e AZURE_FEDERATED_TOKEN_FILE -v "${AZURE_FEDERATED_TOKEN_FILE}:${AZURE_FEDERATED_TOKEN_FILE}:ro" getcleancloud/cleancloud scan --provider azure

# GCP (WIF or service account key)
docker run --rm -e GOOGLE_APPLICATION_CREDENTIALS=/gcp-creds.json -v "${GOOGLE_APPLICATION_CREDENTIALS}:/gcp-creds.json:ro" getcleancloud/cleancloud scan --provider gcp --all-projects

📦 Pull: docker pull getcleancloud/cleancloud:1.27.0
🔗 Docker Hub: https://hub.docker.com/r/getcleancloud/cleancloud
🔏 Digest: sha256:f393dcb4c78e1d9969a8030e43dea6392e058b4970520362944ceb973c6fce2d

v1.26.0

25 Apr 15:57
7ac8a6d

Choose a tag to compare

What's Changed

Full Changelog: v1.25.0...v1.26.0

🐳 Docker Image

# AWS
docker run --rm -e AWS_ACCESS_KEY_ID -e AWS_SECRET_ACCESS_KEY -e AWS_SESSION_TOKEN -e AWS_REGION getcleancloud/cleancloud scan --provider aws --all-regions

# Azure
docker run --rm -e AZURE_CLIENT_ID -e AZURE_TENANT_ID -e AZURE_SUBSCRIPTION_ID -e AZURE_FEDERATED_TOKEN_FILE -v "${AZURE_FEDERATED_TOKEN_FILE}:${AZURE_FEDERATED_TOKEN_FILE}:ro" getcleancloud/cleancloud scan --provider azure

# GCP (WIF or service account key)
docker run --rm -e GOOGLE_APPLICATION_CREDENTIALS=/gcp-creds.json -v "${GOOGLE_APPLICATION_CREDENTIALS}:/gcp-creds.json:ro" getcleancloud/cleancloud scan --provider gcp --all-projects

📦 Pull: docker pull getcleancloud/cleancloud:1.26.0
🔗 Docker Hub: https://hub.docker.com/r/getcleancloud/cleancloud
🔏 Digest: sha256:29d4e857f62019237db4e76da320281572175b6065fd2a4a69ff1371cc8ee162

Release v1.25.0 - Hardened Azure rules - part 3

23 Apr 22:41
0b3315f

Choose a tag to compare

What's Changed

Full Changelog: v1.24.0...v1.25.0

🐳 Docker Image

# AWS
docker run --rm -e AWS_ACCESS_KEY_ID -e AWS_SECRET_ACCESS_KEY -e AWS_SESSION_TOKEN -e AWS_REGION getcleancloud/cleancloud scan --provider aws --all-regions

# Azure
docker run --rm -e AZURE_CLIENT_ID -e AZURE_TENANT_ID -e AZURE_SUBSCRIPTION_ID -e AZURE_FEDERATED_TOKEN_FILE -v "${AZURE_FEDERATED_TOKEN_FILE}:${AZURE_FEDERATED_TOKEN_FILE}:ro" getcleancloud/cleancloud scan --provider azure

# GCP (WIF or service account key)
docker run --rm -e GOOGLE_APPLICATION_CREDENTIALS=/gcp-creds.json -v "${GOOGLE_APPLICATION_CREDENTIALS}:/gcp-creds.json:ro" getcleancloud/cleancloud scan --provider gcp --all-projects

📦 Pull: docker pull getcleancloud/cleancloud:1.25.0
🔗 Docker Hub: https://hub.docker.com/r/getcleancloud/cleancloud
🔏 Digest: sha256:eaab7c242c905b9d423025118368b25ec56898bcf0061e2ccf2e56275d8e0039

Release v1.24.0 - Hardened Azure rules - part 2

23 Apr 19:24
82a4e62

Choose a tag to compare

What's Changed

Full Changelog: v1.23.0...v1.24.0

🐳 Docker Image

# AWS
docker run --rm -e AWS_ACCESS_KEY_ID -e AWS_SECRET_ACCESS_KEY -e AWS_SESSION_TOKEN -e AWS_REGION getcleancloud/cleancloud scan --provider aws --all-regions

# Azure
docker run --rm -e AZURE_CLIENT_ID -e AZURE_TENANT_ID -e AZURE_SUBSCRIPTION_ID -e AZURE_FEDERATED_TOKEN_FILE -v "${AZURE_FEDERATED_TOKEN_FILE}:${AZURE_FEDERATED_TOKEN_FILE}:ro" getcleancloud/cleancloud scan --provider azure

# GCP (WIF or service account key)
docker run --rm -e GOOGLE_APPLICATION_CREDENTIALS=/gcp-creds.json -v "${GOOGLE_APPLICATION_CREDENTIALS}:/gcp-creds.json:ro" getcleancloud/cleancloud scan --provider gcp --all-projects

📦 Pull: docker pull getcleancloud/cleancloud:1.24.0
🔗 Docker Hub: https://hub.docker.com/r/getcleancloud/cleancloud
🔏 Digest: sha256:e8295789eae591ffb0d3f0c782343d65b451e80369c3febfde03d128be2b1b99

Release v1.23.0 - Hardened Azure rules

22 Apr 21:45
0d48944

Choose a tag to compare

What's Changed

Full Changelog: v1.22.0...v1.23.0

🐳 Docker Image

# AWS
docker run --rm -e AWS_ACCESS_KEY_ID -e AWS_SECRET_ACCESS_KEY -e AWS_SESSION_TOKEN -e AWS_REGION getcleancloud/cleancloud scan --provider aws --all-regions

# Azure
docker run --rm -e AZURE_CLIENT_ID -e AZURE_TENANT_ID -e AZURE_SUBSCRIPTION_ID -e AZURE_FEDERATED_TOKEN_FILE -v "${AZURE_FEDERATED_TOKEN_FILE}:${AZURE_FEDERATED_TOKEN_FILE}:ro" getcleancloud/cleancloud scan --provider azure

# GCP (WIF or service account key)
docker run --rm -e GOOGLE_APPLICATION_CREDENTIALS=/gcp-creds.json -v "${GOOGLE_APPLICATION_CREDENTIALS}:/gcp-creds.json:ro" getcleancloud/cleancloud scan --provider gcp --all-projects

📦 Pull: docker pull getcleancloud/cleancloud:1.23.0
🔗 Docker Hub: https://hub.docker.com/r/getcleancloud/cleancloud
🔏 Digest: sha256:0fbf7d7e95a0fc5fcb7b44e079f1a674a588dd3bcb65ab5ea28175bdd93dcfe9

Release v1.22.0 - AWS rule hardening

21 Apr 22:05
7e53636

Choose a tag to compare

What's Changed

Full Changelog: v1.21.0...v1.22.0

🐳 Docker Image

# AWS
docker run --rm -e AWS_ACCESS_KEY_ID -e AWS_SECRET_ACCESS_KEY -e AWS_SESSION_TOKEN -e AWS_REGION getcleancloud/cleancloud scan --provider aws --all-regions

# Azure
docker run --rm -e AZURE_CLIENT_ID -e AZURE_TENANT_ID -e AZURE_SUBSCRIPTION_ID -e AZURE_FEDERATED_TOKEN_FILE -v "${AZURE_FEDERATED_TOKEN_FILE}:${AZURE_FEDERATED_TOKEN_FILE}:ro" getcleancloud/cleancloud scan --provider azure

# GCP (WIF or service account key)
docker run --rm -e GOOGLE_APPLICATION_CREDENTIALS=/gcp-creds.json -v "${GOOGLE_APPLICATION_CREDENTIALS}:/gcp-creds.json:ro" getcleancloud/cleancloud scan --provider gcp --all-projects

📦 Pull: docker pull getcleancloud/cleancloud:1.22.0
🔗 Docker Hub: https://hub.docker.com/r/getcleancloud/cleancloud
🔏 Digest: sha256:99d4f1a980511f33228678eaa3c3abda6e8425f76442b041b893e0d6f2556c35