Releases: minvws/nl-kat-coordination
v1.7.0rc1
Summary
This is the first release from the new "monorepo" which means that instead of having different repositories for all microservices, we now have on repo with all microservices in it. This means that, for example, new OOIs which have new boefjes, new bits, and new findings now need only one PR instead of PRs in different repos that need to be merged chronologically. The way KAT is released and deployed is not changed! Artifacts are still created per service!
What's Changed
- Update index.rst by @ring-ring-ring in #124
- updated links to brochures by @ring-ring-ring in #135
- small update in toc by @ring-ring-ring in #141
- Add postgresql database for scheduler by @jpbruinsslot in #133
- Add pre-commit monorepo config by @dekkers in #132
- added extra lines for better layout by @ring-ring-ring in #147
- small clarification by @ring-ring-ring in #148
- Add note about supported Debian and Ubuntu versions by @Darwinkel in #159
- Modified security headers by @ITNerdbox in #160
- Chore/makefile and make clean by @Donnype in #149
- Monorepo merge into main by @sigio in #164
- Fix conflicting requirements and precommit by @dekkers in #172
- Fix make kat by @dekkers in #174
- Add models for ADR-validator boefje by @hugoboos in #181
- Fix github workflows by @dekkers in #270
- Bytes: Add better API feedback. by @Donnype in #178
- 8443 by @ring-ring-ring in #274
- Only push container image when allowed by @dekkers in #276
- documentation update: made some stuff more consistent/concise/precise by @psy0rz in #269
- Fix quotes in container workflow by @dekkers in #279
- Added raw file upload page including tests. by @Donnype in #175
- Replace
flake8
withruff
by @Darwinkel in #267 - Update PR template and development docs by @Darwinkel in #281
- [Mula] Feature/mula test coverage by @jpbruinsslot in #180
- Delete old .pre-commit-config.yaml files by @dekkers in #176
- ✏️ make findings more informative by @zcrt in #266
- Reduce information lookups by @noamblitz in #290
- Remove unused
roeltje
folder (contains Cypress) by @Darwinkel in #289 - download raw of failed job by @noamblitz in #299
- small update by @ring-ring-ring in #306
- Bump drf-standardized-errors from 0.12.4 to 0.12.5 by @dependabot in #169
- Bump certifi from 2022.9.24 to 2022.12.7 in /keiko by @dependabot in #166
- Bump django-markdownify from 0.9.1 to 0.9.2 by @dependabot in #167
- Bump markdown-it-py from 2.1.0 to 2.2.0 in /octopoes by @dependabot in #308
- Fix 404 page and add tests for it by @dekkers in #307
- monorepo by @ring-ring-ring in #300
- Remove unused fields by @jpbruinsslot in #287
- Feature/burpsuite normalizer by @noamblitz in #286
- Normalizers comsume own mimetype by @noamblitz in #311
- Add active language styling to language.scss by @TwistMeister in #355
- Bump platformdirs from 2.5.4 to 3.0.0 by @dependabot in #314
- Update default
KAT_VERSION
to recent release by @olafz in #310 - monorepo by @ring-ring-ring in #301
- Add locking functionality to the priority queue by @jpbruinsslot in #293
- Bump mypy from 0.991 to 1.0.1 by @dependabot in #284
- Set OOIs to inherit clearance level by @Rieven in #282
- Feature/json settings katalogus by @Donnype in #280
- [Mula] Remove tasks status updates in normalizer scheduler by @jpbruinsslot in #177
- updates using cool suggestions from @RobboRob by @ring-ring-ring in #397
- clarification internal/external in introduction by @ring-ring-ring in #154
- 🐛 fix certificate normalizer openssl rsa by @zcrt in #292
- show id instead of boefje name by @noamblitz in #404
- Feature/add verified status to organization members list by @TwistMeister in #403
- retrigger bit on update by @noamblitz in #406
- Change default to xtdb-multinode for the debian packages by @Donnype in #417
- fix expiring cert bit by @noamblitz in #444
New Contributors
- @jpbruinsslot made their first contribution in #133
- @ITNerdbox made their first contribution in #160
- @sigio made their first contribution in #164
- @hugoboos made their first contribution in #181
- @psy0rz made their first contribution in #269
- @dependabot made their first contribution in #169
- @olafz made their first contribution in #310
- First test by @TwistMeister
Full Changelog: v1.6.0...v1.7.0rc1
v1.6.2
v1.6.1
v1.6.0
Add Debian install guide (#125) Co-authored-by: ring-ring-ring <[email protected]>
v1.6.0rc3
- Fixed parsing of concatenated SPF records
- Specify correct netblock types in kat_nmap_ip_range boefje
- Fix timezone issue in scheduler
- Fix missing file in rocky Debian package
- Make it possible to download raw of failed task
- Bump Django version to latest 3.2 release.
v1.6.0rc2
v1.6.0rc1
Full Changelog
OpenKAT 1.6: email security and ease of use
The main new feature of OpenKAT 1.6 is email security with dkim, dmarc and spf being added to the datamodel, boefjes and bits. This release also offers a lot of smaller improvements, in installation, interface, maintenance and documentation.
- Organisation settings can now be pushed to other organisations, allowing you to copy from one to another. This has been built in such a way that we can add bulk actions in the near future.
- Uploaded documents are added to Bytes, hashed and timestamped just like all other raw data, which gives gives you the certainty about the date time of upload and the consistency of the document at a later stage - just like with all data included in Bytes.
- A new look for OpenKAT might not be visible right away but the development of 'manon' for the interface allows you to personalize OpenKAT with ease.
- The revamped documentation is not a feature of the software per se but nice to have for sure. Check out the docs at https://docs.openkat.nl.
Coordination
What's Changed
- Create README.rst by @ring-ring-ring in #112
- Add Figma references to the documentation by @Darwinkel in #111
- Fix installation of nodejs in Debian build docker image by @dekkers in #114
- Run apt-get upgrade with -y in Dockerfile by @dekkers in #119
- Add 1.5 release notes by @dekkers in #120
- update link to docs by @ring-ring-ring in #122
- Change Docker instructions by @marjoleintamis in #113
- Add Debian install guide by @dekkers in #125
New Contributors
- @marjoleintamis made their first contribution in #113
Full Changelog: v1.5.0...v1.6.0rc1
Octopoes
What's Changed
- release-1.5 -> Main by @Lisser in minvws/nl-kat-octopoes#63
- Disable mypy, pylint and pydocstyle for now by @Lisser in minvws/nl-kat-octopoes#65
- [OpenKAT v1.6] Declarations from Boefjes by @Donnype in minvws/nl-kat-octopoes#23
- Bump packaging from 21.3 to 23.0 by @dependabot in minvws/nl-kat-octopoes#36
- Remove optional type to overwrite None and fix Origin creation by @Donnype in minvws/nl-kat-octopoes#73
- Allow null in json for task_id and method by @Donnype in minvws/nl-kat-octopoes#74
- [OpenKAT v1.6] Add email security oois by @noamblitz in minvws/nl-kat-octopoes#15
New Contributors
- @dependabot made their first contribution in minvws/nl-kat-octopoes#36
Full Changelog: minvws/nl-kat-octopoes@v1.5.0rc2...v1.6.0rc1
Bytes
What's Changed
- Updated dependabot config by @ammar92 in minvws/nl-kat-bytes#32
- Bump platformdirs from 2.5.2 to 2.5.4 by @dependabot in minvws/nl-kat-bytes#37
- Bump python-dotenv from 0.21.0 to 0.21.1 by @dependabot in minvws/nl-kat-bytes#34
- Bump zipp from 3.8.0 to 3.8.1 by @dependabot in minvws/nl-kat-bytes#33
- Bump pytest from 7.2.0 to 7.2.1 by @dependabot in minvws/nl-kat-bytes#35
- Bump packaging from 21.3 to 23.0 by @dependabot in minvws/nl-kat-bytes#29
- Fix: increase organization_id length by @Donnype in minvws/nl-kat-bytes#44
- Bump cryptography from 38.0.4 to 39.0.0 by @dependabot in minvws/nl-kat-bytes#42
- Bump urllib3 from 1.26.9 to 1.26.14 by @dependabot in minvws/nl-kat-bytes#38
- Bump anyio from 3.6.1 to 3.6.2 by @dependabot in minvws/nl-kat-bytes#40
- Bump cffi from 1.15.0 to 1.15.1 by @dependabot in minvws/nl-kat-bytes#39
- Bump ecdsa from 0.18.0b2 to 0.18.0 by @dependabot in minvws/nl-kat-bytes#41
New Contributors
- @ammar92 made their first contribution in minvws/nl-kat-bytes#32
Full Changelog: minvws/nl-kat-bytes@v1.5.0rc2...v1.6.0rc1
Boefjes
What's Changed
- release-1.5 -> main by @Lisser in minvws/nl-kat-boefjes#72
- [OpenKAT v1.6] Feature/multipart download by @Donnype in minvws/nl-kat-boefjes#61
- [OpenKAT v1.7] Optional input_ooi by @Donnype in minvws/nl-kat-boefjes#39
- Fix/unit-tests by @Donnype in minvws/nl-kat-boefjes#74
- Feature/clone organization settings by @Donnype in minvws/nl-kat-boefjes#75
- Add manual normalizers for csv and declarations by @Donnype in minvws/nl-kat-boefjes#79
- Added dkim and dmarc to dns boefje by @noamblitz in minvws/nl-kat-boefjes#21
- update scan levels by @noamblitz in minvws/nl-kat-boefjes#80
- Overwrite settings when cloning by @Donnype in minvws/nl-kat-boefjes#81
- fix boefje dns tests by @noamblitz in minvws/nl-kat-boefjes#82
Full Changelog: minvws/nl-kat-boefjes@v1.5.0rc3...v1.6.0rc1
Rocky
What's Changed
- feat: Branding fonts by @HeleenSG in minvws/nl-kat-rocky#150
- Merge fixes on release branch 1.5 back to main by @TwistMeister in minvws/nl-kat-rocky#188
- Chore/many new object and finding tests by @Donnype in minvws/nl-kat-rocky#173
- Fix: return True when status_code is not 404 by @Donnype in minvws/nl-kat-rocky#191
- [OpenKAT v1.6] Make input oois optional by @Donnype in minvws/nl-kat-rocky#84
- chore: delete empty file "findings_add.py" by @TwistMeister in minvws/nl-kat-rocky#190
- Bump typing-extensions from 3.10.0.0 to 4.4.0 by @dependabot in minvws/nl-kat-rocky#77
- Bump chardet from 4.0.0 to 5.1.0 by @dependabot in minvws/nl-kat-rocky#78
- Bump robotframework-tidy from 3.3.2 to 3.3.3 by @dependabot in minvws/nl-kat-rocky#183
- Fix nav and breadcrumbs for objects, findings and tasks by @TwistMeister in minvws/nl-kat-rocky#197
- Removed old references to miauw and signal by @ammar92 in minvws/nl-kat-rocky#179
- Improve filter component implementation by @TwistMeister in minvws/nl-kat-rocky#201
- Bump lxml from 4.9.1 to 4.9.2 by @dependabot in minvws/nl-kat-rocky#206
- [OpenKAT v1.6] Some input validation by @ammar92 in minvws/nl-kat-rocky#160
- Add proofs to bytes for oois, findings and csv files by @Donnype in minvws/nl-kat-rocky#192
- add invalid spf finding type by @noamblitz in minvws/nl-kat-rocky#214
- Use Django settings in the correct way by @dekkers in minvws/nl-kat-rocky#213
- Added fredoka instead of fredoka one. by @HeleenSG in minvws/nl-kat-rocky#209
- Feature/copy settings organizations by @Donnype in minvws/nl-kat-rocky#212
- Chore: Update to manon v1.1.8 by @HeleenSG in minvws/nl-kat-rocky#217
- Fix delete finding view by @dekkers in minvws/nl-kat-rocky#220
Full Changelog: minvws/nl-kat-rocky@v1.5.0rc2...v1.6.0rc1
Mula
What's Changed
- Updated dependabot config by @ammar92 in minvws/nl-kat-mula#46
- [OpenKAT v1.6] Start with refactor based on feature/scheduled-jobs-rebase by @jpbruinsslot in minvws/nl-kat-mula#34
- Add better logging for info log level by @jpbruinsslot in minvws/nl-kat-mula#53
New Contributors
- @ammar92 made their first contribution in minvws/nl-kat-mula#46
Full Changelog: minvws/nl-kat-mula@v1.5.0rc2...v1.6.0rc1
v1.5.2: documentation update: introduction into OpenKAT (#103)
- Fix missing file in rocky Debian package
- Fix timezone issue in scheduler
v1.5.1
v1.5.0
https://docs.openkat.nl/release_notes/1.5.html
OpenKAT 1.5: multi organization support
The main feature of the 1.5 release of OpenKAT is the ability to scan multiple organizations from one OpenKAT instance and manage the data and users for each of them. It comes with an API to automatically deploy organizations and users from an external source.
This gives you the ability to manage OpenKAT for a large group of organizations while maintaining the separation of data and users for each of them. It also allows you to supply credentials to users within those organizations and to give them access to their own data, make reports etc.
In addition to this several other features have been added that support this use case, such as the ability to filter and manage and add objects in bulk and add scanning and inheritance of scan levels from a higher level. They were requested by some of our large scale partners and we will continue working on such features in the forthcoming releases.
Features:
- Most importantly, this is the first version of KAT that offers fully implemented multi-organization support. New organizations can be added in the Rocky admin interface (/admin), after which databases in xtdb and KAT-alogus will be automatically added. Clients can be added for each organization that cannot view data of other organizations
- Certificates can now be created without having a relation to a website
- IPAddresses now inherit a scan level from a netblock if that netblock is known
- NMAP can now scan ip ranges
- Rocky now offers bulk actions for the deletion of OOIs and giving clearance levels to OOIs
- Rocky now offers filtering options based on clearance levels and clearance level types
IMPORTANT
This feature includes a new version of XTDB. Therefore, the env setting XTDB_TYPE has to be set to xtdb-multinode. Also, all data in xtdb will be lost and cannot be moved to this version. If you use a locally installed version, you can change to the xtdb version in this repo: https://github.com/dekkers/xtdb-http-multinode.
Full Changelog
Coordination
What's Changed
- Dynamically checkout the latest release tag with
clone-stable
by @Darwinkel in #96 - Give CREATEDB rights to rocky db user by @dekkers in #98
- Update Sphinx docs by @Darwinkel in #97
- Set KAT_VERSION in .env-dist to v1.4.0 by @dekkers in #104
- Enable auto-reload of code for all services by @dekkers in #99
- Passing over xtdb work from Jeroen by @Rieven in #92
- documentation update: introduction into OpenKAT by @ring-ring-ring in #103
New Contributors
Full Changelog: v1.4.0rc1...v1.5.0rc2
Octopoes
What's Changed
- Release 1.4 by @dekkers in minvws/nl-kat-octopoes#31
- Feature/scan level filtering by @Lisser in minvws/nl-kat-octopoes#21
- Update
Certificate
model by @ammar92 in minvws/nl-kat-octopoes#25 - Feature/scan profile filtering by @Lisser in minvws/nl-kat-octopoes#22
- Add Python 3.11 to the unit test matrix by @Darwinkel in minvws/nl-kat-octopoes#29
- [OpenKAT v1.5] Support multinode XTDB by @Rieven in minvws/nl-kat-octopoes#20
- Add image meta data model v1 by @Donnype in minvws/nl-kat-octopoes#38
- implement by @Lisser in minvws/nl-kat-octopoes#59
- Updated dependabot config by @ammar92 in minvws/nl-kat-octopoes#60
New Contributors
- @Lisser made their first contribution in minvws/nl-kat-octopoes#21
- @ammar92 made their first contribution in minvws/nl-kat-octopoes#25
- @Darwinkel made their first contribution in minvws/nl-kat-octopoes#29
- @Rieven made their first contribution in minvws/nl-kat-octopoes#20
- @Donnype made their first contribution in minvws/nl-kat-octopoes#38
Full Changelog: minvws/nl-kat-octopoes@v1.4.0rc1...v1.5.0rc2
Bytes
What's Changed
- Release 1.4 by @dekkers in minvws/nl-kat-bytes#28
- Test multiple Python versions through Docker and Makefile build arg by @Darwinkel in minvws/nl-kat-bytes#25
- Bump setuptools from 62.3.2 to 65.6.3 by @dependabot in minvws/nl-kat-bytes#27
- Optional input_ooi by @Donnype in minvws/nl-kat-bytes#20
New Contributors
- @Darwinkel made their first contribution in minvws/nl-kat-bytes#25
- @Donnype made their first contribution in minvws/nl-kat-bytes#20
Full Changelog: minvws/nl-kat-bytes@v1.4.0rc1...v1.5.0rc2
Boefjes
What's Changed
- Censys normalizer updates by @ammar92 in minvws/nl-kat-boefjes#26
- [OpenKAT v1.5] make organisation field longer by @Rieven in minvws/nl-kat-boefjes#37
- Release 1.4 by @dekkers in minvws/nl-kat-boefjes#52
- Fix plugins related to
Certificate
by @ammar92 in minvws/nl-kat-boefjes#41 - [Nmap] Introduce Nmap ports boefje by @zcrt in minvws/nl-kat-boefjes#40
- [Nmap] Add settings for top-ports and protocol by @zcrt in minvws/nl-kat-boefjes#43
- [bug] RE: LeakIX handle HTTP 204 response by @zcrt in minvws/nl-kat-boefjes#56
- Change workflow file to test multiple Python versions by @Darwinkel in minvws/nl-kat-boefjes#44
- [Nmap] [NetBlock] ✨ introduce Nmap IP range scanning by @zcrt in minvws/nl-kat-boefjes#58
- Fix nmap schema and add test showing integers are not yet supported by @Donnype in minvws/nl-kat-boefjes#60
- Also fix nmap_ip_range integer by @Donnype in minvws/nl-kat-boefjes#68
- implement connection between ipaddresses and netblocks by @Lisser in minvws/nl-kat-boefjes#69
- [OpenKAT v1.5] Do not create _dev organisation in seed by @dekkers in minvws/nl-kat-boefjes#46
- Updated dependabot config by @ammar92 in minvws/nl-kat-boefjes#70
New Contributors
- @Rieven made their first contribution in minvws/nl-kat-boefjes#37
- @Darwinkel made their first contribution in minvws/nl-kat-boefjes#44
Full Changelog: minvws/nl-kat-boefjes@v1.4.0...v1.5.0rc2
Rocky
What's Changed
- Release 1.4.0 by @noamblitz in minvws/nl-kat-rocky#75
- add missing dmarc, dkim and spf findings by @noamblitz in minvws/nl-kat-rocky#35
- Fix ignored flake8 errors and change tests to pytest by @dekkers in minvws/nl-kat-rocky#87
- fix boefje settings forms for integer fields by @noamblitz in minvws/nl-kat-rocky#91
- untested but adding cached network reference support to csv importer. by @underdarknl in minvws/nl-kat-rocky#95
- fix flake8 error on katalogus forms by @underdarknl in minvws/nl-kat-rocky#99
- Release 1.4 by @dekkers in minvws/nl-kat-rocky#102
- Run pytest in CI by @dekkers in minvws/nl-kat-rocky#113
- Bump json5 from 2.2.1 to 2.2.3 by @dependabot in minvws/nl-kat-rocky#103
- feature(scan level filter): implement by @Lisser in minvws/nl-kat-rocky#82
- CSV import introspection by @ammar92 in minvws/nl-kat-rocky#98
- Change Organization model and add API by @dekkers in minvws/nl-kat-rocky#109
- Feature/scan profile filter by @Lisser in minvws/nl-kat-rocky#83
- [Feature] [#C86] Add certificate expiry check by @zcrt in minvws/nl-kat-rocky#88
- Updated file structure for css files within rocky. by @HeleenSG in minvws/nl-kat-rocky#122
- fix(ooi_report): take description from finding_type if None in Finding by @Lisser in minvws/nl-kat-rocky#118
- Update landing_page.html by @ring-ring-ring in minvws/nl-kat-rocky#124
- Added tag styles and colors. Updated to manon v1.1.5 by @HeleenSG in minvws/nl-kat-rocky#133
- Add support for XTDB multinode by @dekkers in minvws/nl-kat-rocky#123
- Add task list params by @jpbruinsslot in minvws/nl-kat-rocky#89
- Fix scan history template artifact by @jpbruinsslot in minvws/nl-kat-rocky#135
- [OpenKAT v1.5] Fix boefje detail checkboxes function at scan oois by @Rieven in minvws/nl-kat-rocky#111
- Feature/multi select by @Donnype in minvws/nl-kat-rocky#86
- Fix/scan levels by @Donnype in minvws/nl-kat-rocky#154
- [OpenKAT v1.5] Multi XTDB and organizations management through organization code as slug by @Rieven in minvws/nl-kat-rocky#115
- Ignore minor updates by @ammar92 in https://github.com/minvws/nl-kat-rock...