Skip to content

Releases: NUWCDIVNPT/stigman-watcher

1.4.6

13 Nov 03:21
7cf9da9
Compare
Choose a tag to compare

What's Changed

  • Update client modules to 1.4.3 for Eval-STIG XCCDF support

Full Changelog: 1.4.5...1.4.6

1.4.5

19 Oct 16:52
dc40ec8
Compare
Choose a tag to compare

What's Changed

  • fix: Remove hard-coded "openid" scope from token request
  • dependency updates

NOTE: This release removes the hard-coded "openid" scope from the Watcher token request, as some OIDC providers will reject a request with this scope when engaged in the Client Credentials flow. If for some reason your OIDC provider requires this scope, it can be specified with the WATCHER_EXTRA_SCOPES envvar or equivalent option.

Full Changelog: 1.4.4...1.4.5

1.4.4

17 Jun 16:53
7d817db
Compare
Choose a tag to compare

What's Changed

  • Enhancement: response timeout to be configurable from environment by @Matte22 in #123
  • feat: concurrent asset fetches by @csmig in #125
  • feat: Add bounds checking for user-specified numerical config options by @cd-rite in #126
  • feat: schedule scan based on queue events by @csmig in #128
  • refactor: alarm handling by @csmig in #130
  • chore: updates for 1.4.4 by @cd-rite in #132

Full Changelog: 1.4.3...1.4.4

1.4.3

02 Apr 02:21
9a63d8b
Compare
Choose a tag to compare

What's Changed

  • feat: handle offline and no grant or token situations with enhanced logging and suspending new file import processing
  • fix: send scopes with client secret authentication
  • feat: added options to specify a scope prefix and extra scopes to token request

Full Changelog: 1.4.2...1.4.3

1.4.2

06 Mar 18:36
6fa33bf
Compare
Choose a tag to compare

Various updates affecting history file handling, incorporating stig-manager-client-modules, testing, workflows, and bugfixes.

What's Changed

  • license included gpl text only relevant to STIGMan OSS by @cd-rite in #86
  • Re: Migrate from CommonJS to ESM by @Matte22 in #88
  • feat: pass filename to parsers as sourceRef by @csmig in #91
  • New history management by @Matte22 in #90
  • test: Create Workflow for unit testing. by @Matte22 in #92
  • feat: in scan mode, migrate addToHistory() calls to the queue handlers by @csmig in #93
  • chore: remove/update dependencies by @csmig in #97
  • CI/CD: Workflow to build and sign binary artifacts by @Matte22 in #100
  • npm publish workflow, updates for upcoming release by @cd-rite in #99
  • Hot fix: Adds ability to process cklb files when in event mode. by @Matte22 in #101

Full Changelog: 1.4.1...1.4.2

1.4.1

24 Jan 17:13
Compare
Choose a tag to compare

What's Changed

  • hotfix: call TaskObject with an option property; bump to 1.4.1 by @csmig in #84

Full Changelog: 1.4.0...1.4.1

1.4.0

24 Jan 14:26
Compare
Choose a tag to compare

What's Changed

  • chore(deps): bump fast-xml-parser from 4.0.12 to 4.2.4 by @dependabot in #56
  • chore(deps): bump semver from 7.3.8 to 7.5.2 by @dependabot in #58
  • chore(deps): bump fast-xml-parser from 4.2.4 to 4.2.5 by @dependabot in #65
  • feat: parse cklb by @csmig in #63
  • refactor: use .well-known/openid-configuration by @Matte22 in #64
  • fix: stats for multi-stig ckl(b) by @csmig in #72
  • Implement SonarCloud Analysis Workflow in GitHub Actions by @Matte22 in #73
  • added self license.md by @Matte22 in #78
  • WATCHER_CARGO_SIZE=1 Error by @Matte22 in #80
  • refactor: require stig-manager-client-modules by @csmig in #81
  • chore: bump version to 1.4.0 by @csmig in #83

New Contributors

Full Changelog: 1.3.0...1.4.0

1.3.0

10 Mar 17:31
b2e262b
Compare
Choose a tag to compare

What's Changed

  • feat: parse and import XCCDF with root-level TestResult by @csmig in #45
  • chore(deps): bump http-cache-semantics from 4.1.0 to 4.1.1 by @dependabot in #46
  • chore(deps): bump jsonwebtoken from 8.5.1 to 9.0.0 by @dependabot in #47
  • feat: build script for executables by @csmig in #48
  • chore: bump version to 1.3.0 by @csmig in #49

New Contributors

Full Changelog: 1.2.8...1.3.0

1.2.8

21 Dec 13:25
15a93ce
Compare
Choose a tag to compare
  • In lib/cargo.js, normalizes the cklWebDb* property values to lowercase when attempting to match an existing Asset.
  • Create revision string only if STIG version and Release info supports it. Otherwise null.

1.2.7

17 Aug 14:31
Compare
Choose a tag to compare

Parser changes

Updates the client import parser with logic specific to test system cpe:/a:nuwcdivnpt:stig-manager:[version].

  • Creates Assets using asset properties/metadata from <TestResult><target-facts>
  • Creates Reviews which include <check-content><sm: [property]> data

Full Changelog: 1.2.6...1.2.7