chore(release): 1.18.0

GitGuardian · Aug 16, 2023 · cb8a4e0 · cb8a4e0
1 parent 8cc3a5a
commit cb8a4e0
Show file tree

Hide file tree

Showing 21 changed files with 77 additions and 142 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,78 @@
 # Changelog
 
+<a id='changelog-1.18.0'></a>
+
+## 1.18.0 — 2023-08-16
+
+### Added
+
+#### HMSL
+
+- ggshield gained a new group of commands: `hmsl`, short for "Has My Secret Leaked". These commands make it possible to securely check if secrets have been leaked in a public repository.
+
+#### IaC
+
+- `ggshield iac scan` now provides three new commands for use as Git hooks:
+
+  - `ggshield iac scan pre-commit`
+  - `ggshield iac scan pre-push`
+  - `ggshield iac scan pre-receive`
+
+  They use the same arguments and options as the other `ggshield iac scan` commands.
+
+- The new `ggshield iac scan ci` command can be used to perform IaC scans in CI environments.
+  It supports the same arguments as hook subcommands (in particular, `--all` to scan the whole repository).
+  Supported CIs are:
+
+  - Azure
+  - Bitbucket
+  - CircleCI
+  - Drone
+  - GitHub
+  - GitLab
+  - Jenkins
+  - Travis
+
+#### SCA
+
+- `ggshield sca scan pre-commit` now provides a `--all` option to scan all files.
+
+- The text output of `ggshield sca` scans now includes the identifier of the SCA vulnerability.
+
+- The new `ggshield sca scan diff` command can be used to run custom differential scans.
+
+#### Other
+
+- It is now possible to manipulate the default instance using `ggshield config`:
+
+  - `ggshield config set instance <THE_INSTANCE_URL>` defines the default instance.
+  - `ggshield config unset instance` removes the previously defined instance.
+  - The default instance can be printed with `ggshield config get instance` and `ggshield config list`.
+
+### Changed
+
+- ggshield now requires Python 3.8.
+
+- The IaC Github Action now runs the new `ggshield iac scan ci` command. This means the action only fails if the changes introduce a new vulnerability. To fail if any vulnerability is detected, use the `ggshield iac scan ci --all` command.
+
+### Removed
+
+- The following options have been removed from `ggshield iac scan diff`: `--pre-commit`, `--pre-push` and `--pre-receive`. You can replace them with the new `ggshield iac scan pre-*` commands.
+
+### Fixed
+
+- `ggshield secret scan docker` now runs as many scans in parallel as the other scan commands.
+
+- `ggshield` now provides an easier-to-understand error message for "quota limit reached" errors (#309).
+
+- `ggshield iac scan diff` `--minimum-severity` and `--ignore-policy` options are now correctly processed.
+
+- `ggshield secret scan` no longer tries to scan files longer than the maximum document size (#561).
+
+### Security
+
+- ggshield now depends on cryptography 41.0.3, fixing https://github.com/advisories/GHSA-jm77-qphf-c4w8.
+
 <a id='changelog-1.17.3'></a>
 
 ## 1.17.3 — 2023-07-27

diff --git a/actions/iac/action.yml b/actions/iac/action.yml
@@ -21,7 +21,7 @@ branding:
   color: 'blue'
 runs:
   using: 'docker'
-  image: 'docker://gitguardian/ggshield:v1.17.3'
+  image: 'docker://gitguardian/ggshield:v1.18.0'
   entrypoint: '/app/docker/actions-iac-entrypoint.sh'
   args:
     - ${{ inputs.args }}
diff --git a/actions/sca/action.yml b/actions/sca/action.yml
@@ -19,7 +19,7 @@ branding:
   color: 'blue'
 runs:
   using: 'docker'
-  image: 'docker://gitguardian/ggshield:v1.17.2'
+  image: 'docker://gitguardian/ggshield:v1.18.0'
   entrypoint: '/app/docker/actions-sca-entrypoint.sh'
   args:
     - ${{ inputs.args }}
diff --git a/actions/secret/action.yml b/actions/secret/action.yml
@@ -21,7 +21,7 @@ inputs:
 
 runs:
   using: 'docker'
-  image: 'docker://gitguardian/ggshield:v1.17.3'
+  image: 'docker://gitguardian/ggshield:v1.18.0'
   entrypoint: '/app/docker/actions-secret-entrypoint.sh'
   args:
     - ${{ inputs.args }}
diff --git a/changelog.d/20230704_152111_aurelien.gateau_docker_max_workers.md b/changelog.d/20230704_152111_aurelien.gateau_docker_max_workers.md
diff --git a/....guillaume_scrt_3734_ggshield_improve_handling_of_quota_limit_reached_errors.md b/....guillaume_scrt_3734_ggshield_improve_handling_of_quota_limit_reached_errors.md
diff --git a/changelog.d/20230705_164100_sylvain.baud.ext_iac_scan_parameters_fix.md b/changelog.d/20230705_164100_sylvain.baud.ext_iac_scan_parameters_fix.md
diff --git a/changelog.d/20230705_183308_aurelien.gateau_drop_3_7.md b/changelog.d/20230705_183308_aurelien.gateau_drop_3_7.md
diff --git a/changelog.d/20230707_170027_paul.beslin.ext_refactor_iac_scan_commands.md b/changelog.d/20230707_170027_paul.beslin.ext_refactor_iac_scan_commands.md
diff --git a/changelog.d/20230712_171932_aurelien.gateau_fix_maximum_size_check.md b/changelog.d/20230712_171932_aurelien.gateau_fix_maximum_size_check.md
diff --git a/changelog.d/20230718_171624_paul.beslin.ext_iac_scan_ci_command.md b/changelog.d/20230718_171624_paul.beslin.ext_iac_scan_ci_command.md
diff --git a/changelog.d/20230720_140628_antonin.lacombe_logout_hmsl_when_auth_logout.md b/changelog.d/20230720_140628_antonin.lacombe_logout_hmsl_when_auth_logout.md
diff --git a/changelog.d/20230727_102601_samuel.guillaume_pin_pyyaml_gte_6_0_1.md b/changelog.d/20230727_102601_samuel.guillaume_pin_pyyaml_gte_6_0_1.md
diff --git a/changelog.d/20230727_171745_antonin.lacombe_hmsl_env_files.md b/changelog.d/20230727_171745_antonin.lacombe_hmsl_env_files.md
diff --git a/changelog.d/20230801_183736_henri.hubert_allow_scan_all_pre_commit.md b/changelog.d/20230801_183736_henri.hubert_allow_scan_all_pre_commit.md
diff --git a/changelog.d/20230801_185552_henri.hubert_add_ghsa_id.md b/changelog.d/20230801_185552_henri.hubert_add_ghsa_id.md
diff --git a/changelog.d/20230802_153039_henri.hubert_add_sca_scan_diff.md b/changelog.d/20230802_153039_henri.hubert_add_sca_scan_diff.md
diff --git a/changelog.d/20230807_180315_aurelien.gateau_config_set_instance.md b/changelog.d/20230807_180315_aurelien.gateau_config_set_instance.md
diff --git a/changelog.d/20230808_105814_aurelien.gateau_update_cryptography.md b/changelog.d/20230808_105814_aurelien.gateau_update_cryptography.md
diff --git a/changelog.d/20230811_135805_aurelien.gateau_unhide_hmsl.md b/changelog.d/20230811_135805_aurelien.gateau_unhide_hmsl.md
diff --git a/ggshield/__init__.py b/ggshield/__init__.py
@@ -1 +1 @@
-__version__ = "1.17.3"
+__version__ = "1.18.0"