Releases: cycodehq/cycode-cli
Release - 1.2.0
What's Changed
- Add
--no-restore
flag for SCA by @PelegCycode in #154 - Add signing of Windows CLI executables by @MarshalX in #158
- Fix setting of logger level from environment variable by @MarshalX in #162
- Fix stream of loggers (
--verbose
flag). It usesstderr
instead ofstdout
now by @MarshalX in #162 - Bump gitpython from 3.1.31 to 3.1.35 by @dependabot in #155 and #163
Full Changelog: v1.1.0...v1.2.0
Release - 1.1.0
What's Changed
Add support of Terraform Plan scans by @EfratIsrael in #153
New Contributors
- @EfratIsrael made their first contribution in #153
Full Changelog: v1.0.0...v1.1.0
Release - 1.0.0
Breaking Changes
- Drop support of the old position of
--output
option by @MarshalX in #148 - Drop support of
--version
option by @MarshalX in #147
The new --output
position is right after "cycode". Example: cycode -o table
.
Instead of cycode --version
use cycode version
.
What's Changed
- Disable Cimon fail-on-error flag by @MarshalX in #126
- Sign and notarize the macOS CLI executable by @MarshalX in #124
- Add dependency paths column on SCA table output by @morsa4406 in #127
- Improve README by @anna-aleksandrowicz in #125
- Fix dependency paths to add continuation dependencies sign for the list greater than 2 by @morsa4406 in #131
- Support scan in batches with progress bar by @MarshalX in #129
- Integrate Black code formatter by @MarshalX in #133
- Integrate Ruff linter by @MarshalX in #134
- CLI pre-commit hook can't be installed properly by @MarshalX in #135
- Improve type annotations by @MarshalX in #137
- Hide sensitive API responses from debug logs by @MarshalX in #138
- Update package description by @MarshalX in #139
- Add short alias for the output option by @MarshalX in #140
- Optimize the local files collection and improve the progress bar stage by @MarshalX in #141
- Add version command that supports TEXT and JSON output formats by @MarshalX in #142
- Fix list modification while in a for loop by @MarshalX in #143
- Improve version managing of pre-commit hook by @MarshalX in #144
- Add Poetry installation cache by @MarshalX in #145
- Migrate SCA tables to the new table management system by @MarshalX in #146
- Improve text messages by @MarshalX in #149
- Fix relative paths; fix validations of paths by @MarshalX in #150
- Implement proper handling of errors in printers by @MarshalX in #151
- Lock urllib3 v1 by @MarshalX in #152
New Contributors
- @anna-aleksandrowicz made their first contribution in #125
Full Changelog: v0.2.5...v1.0.0
Release - 0.2.5
What's Changed
- Skip on collect node_modules folder for SCA npm by @PelegCycode in #119
- Bump requests from 2.30.0 to 2.31.0 by @dependabot in #117
- Add "user-agent" global option to CLI by @MarshalX in #118
- Failed to print table results for License Compliance by @morsa4406 in #120
- Integrate Cimon by @MarshalX in #121
- Run Cimon in "prevent" mode for build_executable workflow by @MarshalX in #123
- Add table output for all scan types by @MarshalX in #122
New Contributors
- @dependabot made their first contribution in #117
Full Changelog: v0.2.4...v0.2.5
Release - 0.2.4
What's Changed
- Add severity of detections to JSON output by @MarshalX in #100
- Add unit tests coverage by @MarshalX in #103
- Add JSON output format for scan errors by @MarshalX in #102
- Add "auth check" command by @MarshalX in #101
- Migrate to Poetry; fix package structure; use dynamic versioning from Git Tags by @MarshalX in #105
- Setup pre-release flow by @MarshalX in #106
- Add a new release workflow that works with Poetry and uses OIDC for PyPI by @MarshalX in #107
- Make dynamic versioning compatible with PyPI by @MarshalX in #108
- Add CVE column to result table by @PelegCycode in #109
- Add CODEOWNERS by @MarshalX in #111
- Build CLI executable by @MarshalX in #112
- Format auth command output to JSON by @MarshalX in #104
- Update README for release; fix image links by @MarshalX in #113
- Fix is_sub_path function for different drivers by @MarshalX in #115
- Fix concat_unique_id on Windows by @MarshalX in #116
- Add GHA Workflow to run tests on each supported Python version and OS by @MarshalX in #114
New Contributors
- @MarshalX made their first contribution in #100
- @PelegCycode made their first contribution in #109
Full Changelog: v0.2.3...v0.2.4
Release - 0.2.3
Announcing the latest release of Cycode CLI, version 0.2.3.
This version introduces the SCA scanning option.
With the new SCA scanning option, you can scan your code dependencies for security vulnerabilities and license compliance issues.
To start with the new SCA scanning option, pass the sca
value to the CLI command --scan-type
parameter.
For example:
$ cycode scan --scan-type sca repository ~/home/git/codebase
All scanning options are available in the documentation.
Release - 0.2.2
- fix for commit range scan slowness issue
Release - 0.2.1
added pre receive hook installation instructions
Release - 0.2.0
New Features
- Support for secrets scan in pre-receive hook: With this feature, you can now scan your code for sensitive information, such as passwords and API keys, before it is committed to your repository. This helps you catch potential security vulnerabilities early in the development process.
- SCA scanning beta: We're introducing support for Software Composition Analysis (SCA) scanning. With SCA scanning, you can detect and manage open-source components and their licenses in your codebase, ensuring compliance with legal and security requirements.
- SAST scanning beta: We're also introducing support for Static Application Security Testing (SAST) scanning. SAST scans analyze your code for security vulnerabilities, including common coding errors and potential attack vectors.
- Dependency vulnerabilities fixes: We've fixed several dependency vulnerabilities to improve the security and stability.
Bug Fixes
- We've addressed several issues reported by our users.
Release - 0.1.7
- Support SCA scan
- Improve the scan report