0.8.2 🌈

Changes

• add Python 3.14 support @gruebel (#490)
• Bump the pip group across 1 directory with 16 updates @dependabot[bot] (#480)
• Bump pypa/gh-action-pypi-publish from 1.12.4 to 1.13.0 @dependabot[bot] (#479)
• Bump actions/setup-node from 4.4.0 to 5.0.0 @dependabot[bot] (#476)
• Bump actions/setup-python from 5.6.0 to 6.0.0 @dependabot[bot] (#477)
• Bump trufflesecurity/trufflehog from 3.90.2 to 3.90.8 @dependabot[bot] (#478)
• feat: Add custom guidance and appendices support @leonamagaya (#475)

0.8.1 🌈

Features

• Assume role support @bhendo (#474)

Dependency updates

• Bump actions/checkout from 4.2.2 to 5.0.0 @dependabot[bot] (#472)
• Bump sha.js from 2.4.11 to 2.4.12 @dependabot[bot] (#469)
• Bump cipher-base from 1.0.4 to 1.0.6 @dependabot[bot] (#468)
• Bump the pip group with 10 updates @dependabot[bot] (#464)
• Bump trufflesecurity/trufflehog from 3.89.2 to 3.90.2 @dependabot[bot] (#463)
• Bump on-headers, compression and express-session @dependabot[bot] (#461)
• Bump trufflesecurity/trufflehog from 3.88.35 to 3.89.2 @dependabot[bot] (#458)
• Bump the pip group with 11 updates @dependabot[bot] (#459)
• Bump pbkdf2 from 3.1.2 to 3.1.3 @dependabot[bot] (#457)
• Bump trufflesecurity/trufflehog from 3.88.26 to 3.88.35 @dependabot[bot] (#455)
• Bump the pip group with 9 updates @dependabot[bot] (#456)
• Bump peter-evans/create-pull-request from 7.0.7 to 7.0.8 @dependabot[bot] (#443)
• Bump actions/setup-python from 5.5.0 to 5.6.0 @dependabot[bot] (#450)
• Bump the pip group with 8 updates @dependabot[bot] (#453)
• Bump actions/setup-node from 4.3.0 to 4.4.0 @dependabot[bot] (#451)
• Bump trufflesecurity/trufflehog from 3.88.20 to 3.88.26 @dependabot[bot] (#452)
• Bump the pip group across 1 directory with 16 updates @dependabot[bot] (#447)
• Bump actions/setup-node from 4.2.0 to 4.3.0 @dependabot[bot] (#444)
• Bump trufflesecurity/trufflehog from 3.88.14 to 3.88.20 @dependabot[bot] (#445)
• Bump actions/setup-python from 5.4.0 to 5.5.0 @dependabot[bot] (#446)
• Bump peter-evans/create-pull-request from 7.0.6 to 7.0.7 @dependabot[bot] (#438)
• Bump elliptic from 6.6.0 to 6.6.1 @dependabot[bot] (#440)
• Bump trufflesecurity/trufflehog from 3.88.4 to 3.88.14 @dependabot[bot] (#439)
• update pre-commit hooks @gruebel (#436)
• Bump the pip group with 11 updates @dependabot[bot] (#435)
• Bump pypa/gh-action-pypi-publish from 1.12.3 to 1.12.4 @dependabot[bot] (#430)
• Bump trufflesecurity/trufflehog from 3.88.0 to 3.88.4 @dependabot[bot] (#431)
• Bump actions/setup-node from 4.1.0 to 4.2.0 @dependabot[bot] (#432)
• Bump release-drafter/release-drafter from 6.0.0 to 6.1.0 @dependabot[bot] (#434)
• Bump actions/setup-python from 5.3.0 to 5.4.0 @dependabot[bot] (#433)
• Bump peter-evans/create-pull-request from 7.0.5 to 7.0.6 @dependabot[bot] (#426)

0.8.0 🌈

⚠️ Breaking

• drop Python 3.8 support @gruebel (#429)

Changes

• Bump pypa/gh-action-pypi-publish from 1.12.2 to 1.12.3 @dependabot (#425)
• Bump the pip group with 8 updates @dependabot (#427)
• Bump trufflesecurity/trufflehog from 3.84.1 to 3.88.0 @dependabot (#424)
• Bump trufflesecurity/trufflehog from 3.83.6 to 3.84.1 @dependabot (#421)
• Bump actions/setup-python from 5.2.0 to 5.3.0 @dependabot (#422)
• Bump the pip group with 6 updates @dependabot (#423)
• Bump cookie, express, cookie-parser and express-session @dependabot (#399)
• update GHA versions and adjust update interval @gruebel (#417)
• Bump elliptic from 6.5.7 to 6.6.0 @dependabot (#410)
• Bump the pip group across 1 directory with 5 updates @dependabot (#414)
• Bump the pip group with 5 updates @dependabot (#409)
• Bump the pip group across 1 directory with 6 updates @dependabot (#403)
• Bump trufflesecurity/trufflehog from 3.82.6 to 3.82.8 @dependabot (#401)
• Bump the pip group across 1 directory with 5 updates @dependabot (#394)
• Bump actions/checkout from 4.1.7 to 4.2.0 @dependabot (#392)
• switch trufflehog action to official one @gruebel (#393)
• Bump the pip group across 1 directory with 8 updates @dependabot (#390)

📝 Documentation

• update shell completion docs @gruebel (#419)

0.7.0 🌈

Changes

• update JS dependencies @gruebel (#383)
• Bump peter-evans/create-pull-request from 6.1.0 to 7.0.1 @dependabot (#377)
• Bump pypa/gh-action-pypi-publish from 1.10.0 to 1.10.1 @dependabot (#378)
• Bump the pip group across 1 directory with 6 updates @dependabot (#376)
• update mkdocs @gruebel (#374)
• Bump actions/setup-python from 5.1.1 to 5.2.0 @dependabot (#373)
• Bump pypa/gh-action-pypi-publish from 1.9.0 to 1.10.0 @dependabot (#372)
• drop node 16 support @gruebel (#365)
• pin Python version to 3.8 for dependabot @gruebel (#357)
• group pip updates @gruebel (#353)
• Bump release-drafter/release-drafter from 5.24.0 to 6.0.0 @dependabot (#341)
• Bump peter-evans/create-pull-request from 5.0.2 to 6.1.0 @dependabot (#344)
• Bump actions/setup-node from 3.8.1 to 4.0.3 @dependabot (#346)
• Bump pypa/gh-action-pypi-publish from 1.8.10 to 1.9.0 @dependabot (#342)
• Bump ws from 6.2.2 to 6.2.3 @dependabot (#338)
• add pre-commit and replace black with ruff-format @gruebel (#339)
• update JS and Python dependencies @gruebel (#322)
• drop Python 3.7 support @gruebel (#336)

🚀 Features

• small performance improvements @gruebel (#362)
• add Python 3.13 support @gruebel (#337)

🧰 Maintenance

• leverage new type syntax @gruebel (#355)
• switch to ruff for linting @gruebel (#340)

0.6.3 🌈

Changes

• update deps and upper bound policy_sentry @gruebel (#335)

0.6.2 🌈

Changes

• Revert "[SCM ADMIN] Adding/Updating GUS aware code owners info @W-13958158" @svc-scm (#316)
• Update dependencies @gruebel (#312)

🚀 Features

• create ResourcePolicyDocument with internet reachable check @gruebel (#321)
• extend list of actions exposing credentials @gruebel (#315)

🐛 Bug Fixes

• properly handle missing managed policies @gruebel (#319)

0.6.1 🌈

Changes

• update GHA workflows and add python version test jobs @gruebel (#309)
• bump pyyaml to 6.0.1 @nitrocode (#310)
• [SCM ADMIN] Adding/Updating GUS aware code owners info @W-13958158 @svc-scm (#308)
• update dependencies and fix mypy and pylint issues @gruebel (#307)
• Suppress findings when conditions exist, except when --flag-all-risky-actions flag is included @jacobappleton-orbis (#303)
• Support federated principals @gruebel (#304)

0.6.0 🌈

Changes

• Feature/added filter by severity option @melaniap-codsec (#295)

0.5.1 🌈

Changes

• More gamelift cred vending actions @iann0036 (#286)
• Update Python dependencies @kmcquade (#266)
• #277 broken link fixed. @amityadav2026 (#280)

0.5.0 🌈

Changes

• Optionally allow noisy results to flag risky actions regardless of resource constraints or conditions usage @kmcquade (#257)

🐛 Bug Fixes

• Fix #242 - print Infra modification findings only if they exist @kmcquade (#259)

📝 Documentation

• Update example report to the latest version @kmcquade (#253)