1.20.0-rc.1

Merge pull request #328 from iriusrisk/feature/OPT-1018

[feature-OPT-1018] to dev

1.19.0

Released on 2023-10-05

New features

IaC endpoints (Terraform Plan, Terraform and Cloudformation)

• Support default and custom mapping files in StartLeft IaC endpoint

Microsoft Threat Modeling Tool (MTMT)

• Map TrustZones by type or name in MTMT

Fixes

• Fixed: [GH PR#306] Docs: MacOS steps to fix missing graphviz compliation headers (external contribution by @yilmi )
• Fixed: fix version of setuptools-scm

Others

• SAST semgrep report
• Reorganize StartLeft workflows and actions
• some dependencies updated

1.19.0-rc.1

[feature/OPT-792] to dev (#303)

* [OPT-933] Add default_mapping_file and custom_mapping_file body params to iac endpoint.
Keep mapping_file for retrocompatibility, it will be removed.
Fix unit test, add new test cases.

* [OPT-933] Update IaC endpoint definition. mapping_file property marked as deprecated.

* [OPT-935] Add default_mapping_file and custom_mapping_file to iac references. Remove mapping_file and mark as deprecated in API usage.

* [OPT-933] Add unit test for determine_source_file. Fix parametrize test cases.

* [OPT-933] Remove test case for visio files because is an edge case not working in windows.

* [OPT-934]Remove mapping file parameter in CLI parse command

* [OPT-934] Replace mandatory field with required field.

* [OPT-935] Add required field to --default-mapping-file param.

* [OPT-935] Fix typo in shell example.

---------

Co-authored-by: xoan <108399255+jmgarcia-iriusrisk@users.noreply.github.com>
Co-authored-by: Santi Manero <smanero@iriusrisk.com>
Co-authored-by: Santi Manero <100587318+smaneroiriusrisk@users.noreply.github.com>
Co-authored-by: PacoCid <117292868+PacoCid@users.noreply.github.com>

1.18.0

Released on 2023-09-07

New features

Microsoft Threat Modeling Tool (MTMT)

• Prune hanging Dataflows in MTMT

Visio

• Refactor slp_visio strategies

Fixes

• Fixed: Wrong version when cloning StartLeft by tag
• Fixed: Error 500 processing MTMT file

Others

• Update otm_schema.json in StartLeft project

1.18.0-rc.1

Merge pull request #282 from iriusrisk/feature/OPT-963

[feature/OPT-963] to dev

1.17.0

Released on 2023-08-09

New features

Terraform plan

• Calculate attack surface in tfplan SLP

Lucidchart

• Remove ImageSearchBlock2 in Lucid Default Mapper
• Add new capabilities to Lucid and Visio mapping file

Visio

• Support Components in Complex Azure Visio

Security

• Avoid capturing groups into regex to mitigate a ReDoS
• Update PyYAML library to 6.0.1
• Update binutils in StartLeft container

Others

• Various libraries updated: mkdocs-material, tox, coverage
• Fix Startleft semgrep action issue

1.17.0-rc.1

Merge pull request #275 from iriusrisk/feature/OPT-794

[feature/OPT-794] to dev

1.16.0

Released on 2023-07-13

New features

Terraform plan

• Create new simplified mapping format for tfplan
• Refactor DataflowCreator in tfplan SLP

Lucidchart

• Make Lucidchart agnostic to Library Year for AWS Stencils

OTM

• Move OTM schema into OTM repository

Others

• various libraries updated: mkdocs-material, tox, coverage

1.16.0-rc.1

Merge pull request #256 from iriusrisk/feature/OPT-881

[feature/OPT-881] to dev

1.15.0

Released on 2023-06-15

New features

CloudFormation Template

• Reduce the file size limit for CloudFormation Template to 1MB

Microsoft Visio

• Extract current strategy mapping dataflows
• Extract current strategy mapping components

Fixes

• Fix graphviz version in windows
• Fix OTM schema inconsistencies
• Fix dockerfile.docs

Others

• Launch SonarCloud analysis on push in dev branch
• various libraries updated
• various test libraries updated