Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add 10.6 release notes + simplify deps #8

Merged
merged 22 commits into from
Mar 7, 2024
Merged

Add 10.6 release notes + simplify deps #8

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
22 commits
Select commit Hold shift + click to select a range
cdcf010
Add 10.6 release notes
tas50 Feb 29, 2024
80a9155
Update releases/2024-03-06-mondoo-10.6-is-out.md
misterpantz Mar 7, 2024
932a2ff
Update releases/2024-03-06-mondoo-10.6-is-out.md
misterpantz Mar 7, 2024
5e87e62
Update releases/2024-03-06-mondoo-10.6-is-out.md
misterpantz Mar 7, 2024
d525a06
Update releases/2024-03-06-mondoo-10.6-is-out.md
misterpantz Mar 7, 2024
e261bda
Update releases/2024-03-06-mondoo-10.6-is-out.md
misterpantz Mar 7, 2024
a241029
Update releases/2024-03-06-mondoo-10.6-is-out.md
misterpantz Mar 7, 2024
32a2fbd
Update releases/2024-03-06-mondoo-10.6-is-out.md
misterpantz Mar 7, 2024
cf1c963
Update releases/2024-03-06-mondoo-10.6-is-out.md
misterpantz Mar 7, 2024
2faa562
Update releases/2024-03-06-mondoo-10.6-is-out.md
misterpantz Mar 7, 2024
522d7a7
Update releases/2024-03-06-mondoo-10.6-is-out.md
misterpantz Mar 7, 2024
8b90743
Update releases/2024-03-06-mondoo-10.6-is-out.md
misterpantz Mar 7, 2024
bca4698
Update releases/2024-03-06-mondoo-10.6-is-out.md
misterpantz Mar 7, 2024
266afa3
Update releases/2024-03-06-mondoo-10.6-is-out.md
misterpantz Mar 7, 2024
ff79e01
Update releases/2024-03-06-mondoo-10.6-is-out.md
misterpantz Mar 7, 2024
f15ee35
Describe filtering
tas50 Mar 7, 2024
113f966
Update deps again
tas50 Mar 7, 2024
ba73b16
Describe AWS changes
tas50 Mar 7, 2024
e9f6f3b
Fix typo
tas50 Mar 7, 2024
206406d
Fix the date and add the image
tas50 Mar 7, 2024
34cdd5e
Add gif
tas50 Mar 7, 2024
ea1f415
Update releases/2024-03-05-mondoo-10.6-is-out.md
misterpantz Mar 7, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions .github/actions/spelling/expect.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -90,6 +90,7 @@ dbf
dcea
Ddos
debconf
deliverychannel
dfw
dgrrz
DHE
Expand Down
15 changes: 7 additions & 8 deletions .github/actions/spelling/line_forbidden.patterns
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -182,23 +182,23 @@
\bopenSSL\b

# s.b. CloudBees
\bCloudbees\b
\b[Cc]loudbees\b

# s.b. System76
\bSystem 76\b

# s.b. VirtualBox
\bvirtualbox\b
\bVirtualbox\b
\b[Vv]irtualbox\b
\bVirtual Box\b

# s.b. SentinelOne
\bSentinalOne\b
\bSentinal[Oo]ne\b
\bSentinelone\b
\bSentinal One\b

# s.b. CrowdStrike
\bCrowd Strike\b
\bCrowdstrike\b
\b[Cc]rowdstrike\b

#
# HashiCorp Products
Expand Down Expand Up @@ -307,8 +307,7 @@
\bCloudfront\b

# s.b. CloudHSM
\bCloudHsm\b
\bCloudhsm\b
\bCloud[Hh]sm\b

# s.b. CloudSearch
\bCloudsearch\b
Expand Down Expand Up @@ -346,7 +345,7 @@
\bCodestar\b

# s.b. AWS Config
# \bAWS config\b disabled due to false positives on resource names
\bAWS config\b

# s.b. Copilot
\bCoPilot\b
Expand Down
1 change: 1 addition & 0 deletions .github/actions/spelling/patterns.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -89,3 +89,4 @@ aws_secret_access_key\s+\=(\s+)?.+

# score score is valid in MQL docs
score score

7 changes: 4 additions & 3 deletions docs/mql/resources/aws-pack/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -44,9 +44,10 @@ In this pack:
| [aws.cloudwatch.metricstatistics](aws.cloudwatch.metricstatistics.md) | Amazon CloudWatch metric statistics |
| [aws.codebuild](aws.codebuild.md) | AWS CodeBuild for building and testing code |
| [aws.codebuild.project](aws.codebuild.project.md) | AWS CodeBuild project |
| [aws.config](aws.config.md) | AWS config |
| [aws.config.recorder](aws.config.recorder.md) | AWS config recorder |
| [aws.config.rule](aws.config.rule.md) | AWS config rule |
| [aws.config](aws.config.md) | AWS Config |
| [aws.config.deliverychannel](aws.config.deliverychannel.md) | AWS Config delivery channel |
| [aws.config.recorder](aws.config.recorder.md) | AWS Config recorder |
| [aws.config.rule](aws.config.rule.md) | AWS Config rule |
| [aws.dms](aws.dms.md) | AWS Database Migration Service (DMS) |
| [aws.dynamodb](aws.dynamodb.md) | Amazon DynamoDB |
| [aws.dynamodb.globaltable](aws.dynamodb.globaltable.md) | Amazon DynamoDB global table |
Expand Down
29 changes: 29 additions & 0 deletions docs/mql/resources/aws-pack/aws.config.deliverychannel.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,29 @@
---
title: aws.config.deliverychannel
id: aws.config.deliverychannel
sidebar_label: aws.config.deliverychannel
displayed_sidebar: MQL
description: AWS Config delivery channel
---

# aws.config.deliverychannel

**Supported platform**

- aws

**Description**

AWS Config delivery channel

The `aws.config.deliverychannel` resource provides fields representing an individual AWS Config delivery channel configured within an account. For usage, read the `aws.config` resource documentation.

**Fields**

| ID | TYPE | DESCRIPTION |
| ------------ | ------ | -------------------------------------------------------------------- |
| name | string | Name of the delivery channel |
| s3BucketName | string | S3 bucket name where configuration snapshots are delivered |
| s3KeyPrefix | string | Prefix for the S3 bucket where configuration snapshots are delivered |
| snsTopicARN | string | ARN of the SNS topic that AWS Config delivers notifications to |
| region | string | Region for the delivery channel |
9 changes: 5 additions & 4 deletions docs/mql/resources/aws-pack/aws.config.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,10 +20,11 @@ Use the `aws.config` resource to assess the configuration of the AWS Config serv

**Fields**

| ID | TYPE | DESCRIPTION |
| --------- | ------------------------------------------------------- | -------------------------------------------------------------- |
| recorders | [][aws.config.recorder](aws.config.recorder.md) | List of configuration recorders for each region in the account |
| rules | [][aws.config.rule](aws.config.rule.md) | List of AWS Config rules |
| ID | TYPE | DESCRIPTION |
| ---------------- | --------------------------------------------------------------------- | -------------------------------------------------------------- |
| recorders | [][aws.config.recorder](aws.config.recorder.md) | List of configuration recorders for each region in the account |
| rules | [][aws.config.rule](aws.config.rule.md) | List of AWS Config rules |
| deliveryChannels | [][aws.config.deliverychannel](aws.config.deliverychannel.md) | List of delivery channels for each region in the account |

**Examples**

Expand Down
17 changes: 9 additions & 8 deletions docs/mql/resources/aws-pack/aws.iam.role.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,11 +20,12 @@ The `aws.iam.role` provides fields for assessing the configuration of individual

**Fields**

| ID | TYPE | DESCRIPTION |
| ----------- | ----------------- | ------------------------------ |
| arn | string | ARN of the role |
| id | string | ID of the role |
| name | string | Name of the role |
| description | string | Description of the role |
| tags | map[string]string | Tags associated with the role |
| createDate | time | Time when the role was created |
| ID | TYPE | DESCRIPTION |
| ------------------------ | ----------------- | ----------------------------------------------------------------------- |
| arn | string | ARN of the role |
| id | string | ID of the role |
| name | string | Name of the role |
| description | string | Description of the role |
| tags | map[string]string | Tags associated with the role |
| createDate | time | Time when the role was created |
| assumeRolePolicyDocument | dict | The policy document that grants an entity permission to assume the role |
6 changes: 3 additions & 3 deletions docs/mql/resources/gcp-pack/gcp.project.bigqueryservice.dataset.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -31,9 +31,9 @@ GCP BigQuery dataset
| tags | map[string]string | Tags associated with this dataset |
| kmsName | string | Cloud KMS encryption key that will be used to protect BigQuery table |
| access | [][gcp.project.bigqueryService.dataset.accessEntry](gcp.project.bigqueryservice.dataset.accessentry.md) | Access permissions |
| tables | [][gcp.project.bigqueryService.table](gcp.project.bigqueryservice.table.md) | Returns tables in the Dataset |
| models | [][gcp.project.bigqueryService.model](gcp.project.bigqueryservice.model.md) | Returns models in the Dataset |
| routines | [][gcp.project.bigqueryService.routine](gcp.project.bigqueryservice.routine.md) | Returns routines in the Dataset |
| tables | [][gcp.project.bigqueryService.table](gcp.project.bigqueryservice.table.md) | Returns tables in the dataset |
| models | [][gcp.project.bigqueryService.model](gcp.project.bigqueryservice.model.md) | Returns models in the dataset |
| routines | [][gcp.project.bigqueryService.routine](gcp.project.bigqueryservice.routine.md) | Returns routines in the dataset |

**References**

Expand Down
32 changes: 16 additions & 16 deletions docs/mql/resources/os-pack/package.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,19 +18,19 @@ package(name string)

**Fields**

| ID | TYPE | DESCRIPTION |
| ----------- | --------------------------------------- | ------------------------------------------------- |
| name | string | Name of the package |
| description | string | Package description |
| version | string | Current version of the package |
| arch | string | Architecture of this package |
| epoch | string | Epoch of this package |
| format | string | Format of this package (e.g., rpm, deb) |
| status | string | Status of this package (e.g., if it is needed) |
| purl | string | Package URL |
| cpes | []core.cpe | Common Platform Enumeration (CPE) for the package |
| origin | string | Package origin (optional) |
| available | string | Available version |
| installed | bool | Whether the package is installed |
| outdated | bool | Whether the package is outdated |
| files | [][pkgFileInfo](pkgfileinfo.md) | Package files |
| ID | TYPE | DESCRIPTION |
| ----------- | --------------------------------------- | ----------------------------------------------------------- |
| name | string | Name of the package |
| description | string | Package description |
| version | string | Current version of the package |
| arch | string | Architecture of this package |
| epoch | string | Epoch of this package |
| format | string | Format of this package (e.g., rpm, deb) |
| status | string | Status of this package (e.g., if it is needed) |
| purl | string | Package URL |
| cpes | []core.cpe | Common Platform Enumeration (CPE) for the package |
| origin | string | Package origin, may include version if available (optional) |
| available | string | Available version |
| installed | bool | Whether the package is installed |
| outdated | bool | Whether the package is outdated |
| files | [][pkgFileInfo](pkgfileinfo.md) | Package files |
2 changes: 0 additions & 2 deletions package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -40,7 +40,6 @@
"react-loadable": "^5.5.0",
"search-insights": "^2.13.0",
"terser": "5.29.1",
"trim": "^1.0.1",
"url-loader": "^4.1.1",
"webpack": "^5.90.3",
"ws": "^8.16.0"
Expand All @@ -58,7 +57,6 @@
]
},
"devDependencies": {
"@docusaurus/module-type-aliases": "^3.1.1",
"@tsconfig/docusaurus": "^2.0.1",
"@types/react": "^18.2.64",
"@types/react-helmet": "^6.1.11",
Expand Down
122 changes: 122 additions & 0 deletions releases/2024-03-05-mondoo-10.6-is-out.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,122 @@
---
slug: mondoo-10.6-is-out/
title: Mondoo 10.6 is out!
author: Tim Smith
author_title: Mondoo Core Team
author_url: https://github.com/tas50
tags: [release, mondoo]
---

## 🥳 Mondoo 10.6 is out! This release includes a new EDR policy, policy filtering, additional MQL capabilities, and more!

Get this release: [Installation Docs](https://mondoo.com/docs/cnspec/) | [Package Downloads](https://releases.mondoo.com/cnspec/) | [Docker Container](https://hub.docker.com/r/mondoo/cnspec)

---

## 🎉 NEW FEATURES

### Filter policies on assets

Asset policy pages now include filtering by policy types and scores so you can see exactly what policies are applied and where failures are occurring.

![Policy filtering](/img/releases/2024-03-05-mondoo-10.6-is-out/filtering.gif)

### Data type conversion MQL helpers

New MQL helpers allow you to quickly convert data to the right format for your custom checks and data queries.

```coffee
> int(1.23)
1

> bool(1)
true

> float(12)
12

> string(1.89)
"1.89"

> regex("w.r.d") == "world 🌎"
/w.r.d/
```

### Endpoint detection and response (EDR) policy

Ensure critical employee endpoints have endpoint detection and response (EDR) software installed and running with our new Endpoint Detection and Response (EDR) policy. This policy checks to see if SentinelOne or CrowdStrike are installed on macOS, Linux, and Windows systems.

### Open source Mondoo documentation

Do typos in documentation keep you up at night like they do for me? We open sourced our documentation so you can fix that problem and get some sleep.

Check out our new public repo at [github.com/mondoohq/docs](https://github.com/mondoohq/docs) for instructions on how to contribute fixes and improvements.

## 🧹 IMPROVEMENTS

### Resource improvements

#### aws.cloudtrail.trails

- Add support for advanced selectors in the `eventSelectors` field.

#### aws.config

- Add new `deliveryChannels` field.

#### aws.config.deliverychannel

- Add a new resource with fields representing an individual AWS Config delivery channel configured within an account.

#### aws.iam.role

- Add new `assumeRolePolicyDocument` field.

#### package

- Add new `originVersion` field on Debian Linux-based assets.
- Include version data in the `origin` field for source packages on Debian Linux-based assets.

### Filter AWS scans by region

Filter cnspec command line scans by AWS region with new filter options:

```bash
cnquery shell aws --filters all:region=us-east-2
cnquery shell aws --filters region=us-east-2
cnquery shell aws --filters ec2:region=us-east-2
```

Thanks for this great contribution [@montera82](https://github.com/montera82/)!

### Updated policy check impact scores

Prioritize the most important checks first with newly adjusted check priorities for CIS Linux distribution policies. These improved scores ensure that only the most important checks are listed as failures, so you can more easily prioritize critical work.

### Improved AWS policies

Both the CIS AWS Foundations benchmark policy and the various AWS Best Practices policies have seen major refactoring. These changes include improved queries and result output as well as new descriptions and remediation data. Stay tuned for more updates as we refactor all queries in these policies to use the latest MQL resources and helpers.

## 🐛 BUG FIXES AND UPDATES

- Improve reliability of fetching CVE data for assets.
- Only show unresolved CVEs in the asset CVE list.
- Fix package CVE false positives for some Debian packages.
- Fix CVEs not showing after the first asset scan.
- Fix failures scanning a GitHub organization if the supplied token cannot access all repositories.
- Only show the options to add new integrations when the user has the appropriate permissions for the space.
- Change documentation links in the console to go directly to Mondoo Platform documentation.
- Improve how space owners are listed in the Organization dashboard's CVE list.
- Fix policy recommendation during the Kubernetes integration setup.
- Show EPSS scores with a single decimal point in all locations.
- Don't fail scanning if the location of an S3 bucket cannot be determined.
- Return more than 100 Microsoft 365 users in queries.
- Improve output of the "Ensure macOS is up to date" check in the macOS Security policy.
- Distinguish between domain controllers and member servers in Windows Security policy checks.
- Improve empty states for software, CVE, and advisory asset page tabs.
- Improve rendering of columns in the asset page's Advisories tab.
- Enforce a max session time of 1 day in the console for added security.
- Don't include the legacy Platform Vulnerability Policy in asset policy counts.
- Improve wrapping of long asset names on narrow screens.
- Don't include "unknown" integrations in the organization dashboard integrations list.
- Add missing impact scores to the CIS AIX benchmark policies.
Binary file added static/img/releases/2024-03-05-mondoo-10.6-is-out/filtering.gif
View file
Open in desktop
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Loading