v5.9.0 #3837

What's Changed

🦺Important Notices

• Minio has unpublished their previous still available official docker images. secureCodeBox 5.9.0 switches the default S3 bucket for the quick start setups to garage for a quick, self hosted S3 bucket in Kubernetes. Setups using a external S3 Buckets e.g. AWS S3, Google Storage, Hetzner Buckets, etc. are unaffected. If you upgrade a instance using the included Minio instance it will be switched to Garage. Any in-progress scans will fail and have to be restarted. Any scans created after the upgrade will then use the new garage bucket. See Switch from minio to garage #3835
• The legacy helm chart registry at charts.securecodebox.io has now been finally shutdown, see Shutdown of depracated helm chart registry at charts.securecodebox.io #3800

🚀 Features

• Remove daily telemetry pings from the secureCodeBox operator by @J12934 in Remove daily telemetry pings from the secureCodeBox operator #3798
• Add golang based hook-sdk by @J12934 in Add golang based hook-sdk #3786
• Add retries for the raw result upload from the lurker sidecar by @J12934 in Add retries for the raw result upload from the lurker sidecar #3785

🚓 Security Scanner

• Upgraded ffuf from v2.1.0 to v2.3.0 @secureCodeBoxBot ([SCB-Bot] Upgraded ffuf from v2.1.0 to v2.2.1 #3729, [SCB-Bot] Upgraded ffuf from v2.2.1 to v2.3.0 #3829)
• Upgraded nuclei from v3.11.0 to v3.11.1 @secureCodeBoxBot ([SCB-Bot] Upgraded nuclei from v3.11.0 to v3.11.1 #3810)
• Upgraded semgrep from 1.168.0 to 1.177.0 @secureCodeBoxBot ([SCB-Bot] Upgraded semgrep from 1.168.0 to 1.169.0 #3723, [SCB-Bot] Upgraded semgrep from 1.169.0 to 1.170.0 #3732, [SCB-Bot] Upgraded semgrep from 1.170.0 to 1.171.0 #3739, [SCB-Bot] Upgraded semgrep from 1.171.0 to 1.172.0 #3747, [SCB-Bot] Upgraded semgrep from 1.172.0 to 1.176.0 #3808, [SCB-Bot] Upgraded semgrep from 1.176.0 to 1.177.0 #3830)
• Upgraded ssh-audit from v3.3.0 to v3.9.0 @secureCodeBoxBot ([SCB-Bot] Upgraded ssh-audit from v3.3.0 to v3.9.0 #3715)
• Upgraded subfinder from v2.14.0 to v2.16.0 @secureCodeBoxBot ([SCB-Bot] Upgraded subfinder from v2.14.0 to v2.16.0 #3809)
• Upgraded trivy from 0.72.0 to 0.74.0 @secureCodeBoxBot ([SCB-Bot] Upgraded trivy from 0.72.0 to 0.73.0 #3750, [SCB-Bot] Upgraded trivy from 0.73.0 to 0.74.0 #3806)
• Upgraded trivy-sbom from 0.72.0 to 0.74.0 @secureCodeBoxBot ([SCB-Bot] Upgraded trivy-sbom from 0.72.0 to 0.73.0 #3749, [SCB-Bot] Upgraded trivy-sbom from 0.73.0 to 0.74.0 #3807)
• Upgraded wpscan from v4.0.0 to v4.1.0 @secureCodeBoxBot ([SCB-Bot] Upgraded wpscan from v4.0.0 to v4.0.1 #3722, [SCB-Bot] Upgraded wpscan from v4.0.1 to v4.1.0 #3740)

🔧 Maintenance

• Remove publishing to charts.securecodebox.io and remove leftover docs references to it by @J12934 in Remove publishing to charts.securecodebox.io and remove leftover docs references to it #3801
• Switch from minio to garage by @J12934 in Switch from minio to garage #3835
• Increase default cpu & memory limits for the operator to 100Mi RAM and 250 milli cores CPU by @J12934 in Increase default cpu/memory limits for the operator #3831
• Golang Version Updates and go mod tidies by @J12934 in Golang Version Updates and go mod tidies #3816
• Fix golang renovate dependency updates by @J12934 in Fix golang renovate dependency updates #3827

📚 Documentation

• Remove broken star history chart by @J12934 in Remove broken star history chart #3776
• Add documentation for github secrets by @Reet00 in Add documentation for github secrets #3796

📌 Dependencies

Full Changelog: v5.8.0...v5.9.0