Skip to content

Releases: purpleteam-labs/purpleteam-app-scanner

v4.0.0-alpha.3

08 May 21:51
Compare
Choose a tag to compare

All notable changes to this project will be documented here.
The format is based on Keep a Changelog.
Releases follow Semantic Versioning.

Unreleased

v4.0.0-alpha.3...main

Changed

  • Change logger dependency to npm package & fix Dockerfile 1957a2c
  • Change cucumber args to import ESM 8cacc31
  • Fix testPlan to work with cucumber 8.0.0-rc.3 66889f3
  • Upgrade dependencies and migrate CJS to ESM 4337f6e
  • Make zap reports work in cloud env 6d28344
  • Increase padding on log message 47c1894
  • Integrate new Zap reports 31f0af6

v3.1.0-alpha.3...v4.0.0-alpha.3

v3.1.0-alpha.3

27 Dec 07:06
Compare
Choose a tag to compare

Added

  • Add releases badge to README 1812e8f

Changed

  • Update Emissary and nodejs version ffb7613
  • Update github ci action node-version b7ec1b3
  • Change license from agpl-3.0 to bsl 257f2d8

Fixed

  • Fix logic around 12 Test Sessions 71df746

v3.0.0-alpha.3...v3.1.0-alpha.3

v3.0.0-alpha.3

06 Dec 02:52
Compare
Choose a tag to compare

Added

  • Add API scanning 0e4d4ff
    • Add support for OpenApi, GraphQl, SOAP import URL APIs
    • Add authentication support for JWT strategy
    • Add API support to Emissary (zap)
    • Create Cucumber feature file and steps
    • Move existing app feature file and steps
    • Split Cucumber world into BrowserApp and Api
    • Moved percentEncode from browser to strings as Api SUTs also need it

v2.0.0-alpha.3...v3.0.0-alpha.3

v2.0.0-alpha.3

19 Nov 00:55
Compare
Choose a tag to compare

Added

  • Add SUT and Emissary strategies 05216f8
    • SUT and Emissary strategies are executed dynamically based on the new properties in the Job schema definition
    • Created new sUt.js and child classes for browser apps and APIs
    • Moved logic in step file app_scan_steps into strategies to be shared by various step files such as app and API specific
    • A host mounted directory is now required to put ephemeral files such as scripts, and in the future API definitions
    • Remove zaproxy dependency due to functionality now being in zAp Emissary
    • Change test plan (feature file) wording
    • Fix browser.js authenticated function to return false when not authenticated, also provide new function for Link strategy to check if authenticated
  • Add debug logging 21e2932
  • Add reset check 3396c3e
  • Add Tester reset functionality c958266

Changed

  • Make Tweaks for gemini.health around adding retries 3a5b64b
  • Change validation for gemini.health aa9b059
  • Improved webDriver waits b6abf90
  • Rework app models d823e6a

Fixed

  • Fix validation change bf00437
  • Validation changes for job file b58d936

v1.0.0-alpha.3...v2.0.0-alpha.3

v1.0.0-alpha.3

01 Sep 04:19
Compare
Choose a tag to compare

Added

  • Implement Tls Tester 7b67f14
    • Add more logging and change levels
    • Add custom PurpleTeam report styling

Changed

  • Implement Tls Tester 7b67f14

    • Tweak SUT validation
    • Move hard coded timeouts and intervals to configuration (Addressing issue purpleteam-labs/purpleteam#15)
    • Change casing to line-up with Definitions
    • Move module scoped members of app_scan_steps.js, zap.js and sut.js to an internals object
    • Move app_scan_steps.js Zaproxy specific behaviour to zap.js
  • Upgrade aws-sdk from v2 to v3 ec8bbfb

Fixed

  • Fix cucumber get test cases 97f8206

Removed

  • Implement Tls Tester 7b67f14
    • Remove depricated @hapi/good and implement similar functionality in hapiEventHandler.js
    • Remove the ability to specify Tester report formats, we now just provide them all

v0.2.0-alpha.1...v1.0.0-alpha.3

v0.2.0-alpha.1

08 Jun 01:49
Compare
Choose a tag to compare

Changed

  • Add specific config files to package.json files d66f729
  • Update @cucumber/gherkin-streams 06c5148
  • Update cucumber cc49f59
  • Upgrade packages ef34f3c
  • Add details around gherkin tag scenarios that fail 2606756
  • Remove redundant coveralls npm script 89dbf79
  • Update nyc config 7efac0a
  • Add tests for new model methods b792977
  • Swap @hapi/lab for ava with nyc. Remove @hapi/code facd134
  • Remove dependency on depricated gherkin package ee1b972
  • Start working on possible fix to cucumber-redacted 0be3592
  • Increased timeOut for s2 containers to be up 92fca1c
  • Add env details 26a8afe

Fixed

  • Disable new Zap DOM XSS active scanner b11bb24
  • Used stream for cucumberCliStdout 95763d6
  • Remove broken synk badge 351340a
  • Remove possibly misleading comment 58c422b
  • Change directions on configuring directories 819c0e1
  • Fix typo d04c3eb

v0.1.0-alpha.1...v0.2.0-alpha.1

v0.1.0-alpha.1

31 Jan 01:50
Compare
Choose a tag to compare

Added

  • Added copyright & license 0988ae0

Changed

Security

finish-of-major-s2-cloud-changes...v0.1.0-alpha.1