What's Changed
- formatters/trivy:fix - find correct line of dependency by @ne0z in https://github.com/ZupIT/horusec/pull/882
- images:fix - upgrade Ruby Docker image by @matheusalcantarazup in https://github.com/ZupIT/horusec/pull/892
- brakeman:fix - search for Gemfile's before start analysis by @matheusalcantarazup in https://github.com/ZupIT/horusec/pull/877
- deps:chore - update module github.com/spf13/cobra to v1.3.0 by @renovate-bot in https://github.com/ZupIT/horusec/pull/890
- deps:chore - update elixir Docker tag to v1.13.1 by @renovate-bot in https://github.com/ZupIT/horusec/pull/884
- deps:chore - update zricethezav/gitleaks Docker tag to v8.2.4 by @renovate-bot in https://github.com/ZupIT/horusec/pull/887
- language_detect:chore - remove redundant code by @matheusalcantarazup in https://github.com/ZupIT/horusec/pull/893
- dependency_check:chore - improve tests and code cleaning by @matheusalcantarazup in https://github.com/ZupIT/horusec/pull/895
- deps:chore - update module github.com/spf13/viper to v1.10.1 by @renovate-bot in https://github.com/ZupIT/horusec/pull/885
- deps:chore - update php Docker tag to v8.1.1 by @renovate-bot in https://github.com/ZupIT/horusec/pull/886
- deps:chore - update Node.js to v17.3.0 by @renovate-bot in https://github.com/ZupIT/horusec/pull/903
- deps:chore - update module github.com/magefile/mage to v1.12.1 by @renovate-bot in https://github.com/ZupIT/horusec/pull/889
- deps:chore - update module github.com/briandowns/spinner to v1.18.0 by @renovate-bot in https://github.com/ZupIT/horusec/pull/888
- docker:chore - rename SetData method of AnalysisData by @matheusalcantarazup in https://github.com/ZupIT/horusec/pull/896
- mixaudit:chore - improve tests and code cleaning by @matheusalcantarazup in https://github.com/ZupIT/horusec/pull/897
- sobelow:chore - improve tests and code cleaning by @matheusalcantarazup in https://github.com/ZupIT/horusec/pull/898
- trivy:chore - improve tests and code cleaning by @matheusalcantarazup in https://github.com/ZupIT/horusec/pull/899
- checkov:chore - improve tests and code cleaning by @matheusalcantarazup in https://github.com/ZupIT/horusec/pull/900
- tfsec:chore - improve tests and code cleaning by @matheusalcantarazup in https://github.com/ZupIT/horusec/pull/901
- npmaudit:chore - improve tests and code cleaning by @matheusalcantarazup in https://github.com/ZupIT/horusec/pull/902
- workflows:feature - add go mod tidy check by @iancardosozup in https://github.com/ZupIT/horusec/pull/904
- log4j:chore - update log4j min version to 2.17.1 by @iancardosozup in https://github.com/ZupIT/horusec/pull/907
- nancy:chore - Error not handled by Horusec in Nancy tool by @wiliansilvazup in https://github.com/ZupIT/horusec/pull/906
- bundler:fix - correctly parse output error by @matheusalcantarazup [#921]
- engine/java:chore - add CVE-2021-44832 detail to the description of the HS-JAVA-150 rule by @dearrudam [#916]
- nancy:chore - remove logs when running without GITHUB_TOKEN env by @matheusalcantarazup [#922]
- install/sh:bugfix - updating install sh to install latest if more recent by @nathanmartinszup [#913]
- phpcs:chore - Update PHP_CodeSniffer to show severity and code (#935) @wiliansilvazup
- formatters/tfsec:bugfix - vulnerabilities were being ignored due missing severity (#934) @nathanmartinszup
- engine/swift:bugfix - improving HS-SWIFT-24 rule to avoid false positives (#930) @nathanmartinszup
- trivy:bugfix - adding func to avoid hash changes in trivy formatter (#929) @nathanmartinszup
- formatters:fix - not show which tool generate the error (#932) @matheusalcantarazup
- bundler:chore - improve tests and code cleaning (#925) @matheusalcantarazup
Docker images
docker pull horuszup/horusec-cli:v2.7.0
docker pull horuszup/horusec-cli:v2
docker pull horuszup/horusec-cli:v2.7
New Contributors
- @ne0z made their first contribution in https://github.com/ZupIT/horusec/pull/882
Full Changelog: https://github.com/ZupIT/horusec/compare/v2.6.9...v2.7.0