v1.2.0: Bug Hardening

Highlights

Hardening pass on silent-failure paths: Effect field validation, CJI detection moved from fragile substrings to configurable regex, and CI fixes.

Features

• Validate Effect field in policy statements (#47)
• Case-insensitive Effect comparison (#51)
• Configurable regex patterns for CJI detection (#52)

Bug Fixes

• Replace || true with continue-on-error in CI workflow (#48)
• Pin pytest version via requirements-dev.txt (#49)

v1.1.0: CJIS + CI/CD

Highlights

Adds CJIS v6.0 checks (MFA, cross-account, NotAction/NotResource/NotPrincipal, Principal "*" on CJI resources) and a GitHub Actions workflow for CI-integrated policy scanning.

Features

• CJIS v6.0 MFA and cross-account checks (#15)
• GitHub Actions CI workflow for policy scanning (#11)
• Detect NotAction, NotResource, NotPrincipal fields (#45)

Bug Fixes

• Flag Principal "*" as public access on CJI resources (#46)
• Support BoolIfExists and Null operators for MFA check (#44)

Documentation

• README expanded with FedRAMP 20x and CJIS v6.0 (#16)

v1.0.0: Core Scanner

Highlights

Initial release. CLI-driven IAM policy scanner that flags overly permissive statements, maps findings to NIST 800-53 controls, and produces JSON evidence output.

Features

• CLI argument parsing for policy filename (#20)
• Wildcard detection in Action/Resource, string and list forms (#17, #23)
• Non-zero exit codes for CI/CD integration (#21)
• JSON evidence output format (#25)
• Unit test suite (#24)
• Compliance control mappings in README (#9)

Bug Fixes

• Skip Deny statements in wildcard detection (#18)
• Error handling for file I/O and JSON parsing (#19)