What's Changed

🦺Important Notices

• Minio has unpublished their previous still available official docker images. secureCodeBox 5.9.0 switches the default S3 bucket for the quick start setups to garage for a quick, self hosted S3 bucket in Kubernetes. Setups using a external S3 Buckets e.g. AWS S3, Google Storage, Hetzner Buckets, etc. are unaffected. If you upgrade a instance using the included Minio instance it will be switched to Garage. Any in-progress scans will fail and have to be restarted. Any scans created after the upgrade will then use the new garage bucket. See #3835
• The legacy helm chart registry at charts.securecodebox.io has now been finally shutdown, see #3800
• Telemetry collection was removed from the secureCodeBox Operator in release 5.9.0. The limited use of the collected data did not justify continued data collection or the effort of maintaining the telemetry backend. The telemetry backend is being shut down and the DNS record for telemetry.securecodebox.io will be removed. secureCodeBox operators older than 5.9.0 with telemetry enabled will continue attempting to submit telemetry every 24 hours and log a failed submission after the DNS record is removed. This does not affect scans or the operator's normal operation. Upgrade to 5.9.0 or later to prevent the attempted requests. #3798

The remaining content on this page is retained temporarily as historical documentation and will be removed in a future release.

🚀 Features

• Remove daily telemetry pings from the secureCodeBox operator by @J12934 in #3798
• Add golang based hook-sdk by @J12934 in #3786
• Add retries for the raw result upload from the lurker sidecar by @J12934 in #3785

🚓 Security Scanner

• Upgraded ffuf from v2.1.0 to v2.3.0 @secureCodeBoxBot (#3729, #3829)
• Upgraded nuclei from v3.11.0 to v3.11.1 @secureCodeBoxBot (#3810)
• Upgraded semgrep from 1.168.0 to 1.177.0 @secureCodeBoxBot (#3723, #3732, #3739, #3747, #3808, #3830)
• Upgraded ssh-audit from v3.3.0 to v3.9.0 @secureCodeBoxBot (#3715)
• Upgraded subfinder from v2.14.0 to v2.16.0 @secureCodeBoxBot (#3809)
• Upgraded trivy from 0.72.0 to 0.74.0 @secureCodeBoxBot (#3750, #3806)
• Upgraded trivy-sbom from 0.72.0 to 0.74.0 @secureCodeBoxBot (#3749, #3807)
• Upgraded wpscan from v4.0.0 to v4.1.0 @secureCodeBoxBot (#3722, #3740)

🔧 Maintenance

• Remove publishing to charts.securecodebox.io and remove leftover docs references to it by @J12934 in #3801
• Switch from minio to garage by @J12934 in #3835
• Increase default cpu & memory limits for the operator to 100Mi RAM and 250 milli cores CPU by @J12934 in #3831
• Golang Version Updates and go mod tidies by @J12934 in #3816
• Fix golang renovate dependency updates by @J12934 in #3827

📚 Documentation

• Remove broken star history chart by @J12934 in #3776
• Add documentation for github secrets by @Reet00 in #3796

📌 Dependencies

Full Changelog: v5.8.0...v5.9.0