Release 3.0.1

What’s Changed

• Support checkov 2.0.858 many new terraform rules
• Bump maven-site-plugin from 3.10.0 to 3.11.0 (#502) @dependabot
• Update dependency org.apache.maven.plugins:maven-site-plugin to v3.11.0 (#501) @renovate
• Bump maven-compiler-plugin from 3.9.0 to 3.10.0 (#500) @dependabot
• Bump sonar-analyzer-commons from 1.23.0.957 to 1.24.0.965 (#499) @dependabot
• Update dependency org.sonarsource.analyzer-commons:sonar-analyzer-commons to v1.24.0.965 (#498) @renovate
• Update dependency org.apache.maven.plugins:maven-javadoc-plugin to v3.3.2 (#496) @renovate
• Update dependency org.sonarsource.analyzer-commons:sonar-analyzer-commons to v1.23.0.957 (#497) @renovate
• Update dependency org.sonarsource.sonarqube:sonar-testing-harness to v8.9.7.52159 (#495) @renovate
• Update dependency org.apache.maven.plugins:maven-project-info-reports-plugin to v3.2.1 (#494) @renovate
• Update dependency org.apache.maven.plugins:maven-project-info-reports-plugin to v3.2.0 (#491) @renovate
• Update dependency org.mockito:mockito-core to v4.3.1 (#490) @renovate
• Bump mockito-core from 4.2.0 to 4.3.0 (#489) @dependabot
• Bump versions-maven-plugin from 2.8.1 to 2.9.0 (#488) @dependabot

Download latest release from https://search.maven.org/remotecontent?filepath=com/hack23/sonar/sonar-cloudformation-plugin/3.0.1/sonar-cloudformation-plugin-3.0.1.jar

Release 3.0.0

What’s Changed

• Supports Sonarqube 9.2+ (only), uses built in support for terraform/cloudformation released in 9.2 so no support for earlier versions.
• Support new checkov rules version 2.0.732
• Bump sonar-packaging-maven-plugin from 1.20.0.405 to 1.21.0.505 (#467) @dependabot
• Update dependency com.fasterxml.jackson.core:jackson-databind to v2.13.1 (#452) @renovate

Download latest release from https://search.maven.org/remotecontent?filepath=com/hack23/sonar/sonar-cloudformation-plugin/3.0.0/sonar-cloudformation-plugin-3.0.0.jar

Release 2.1.9

What’s Changed

• Support new checkov rules version 2.0.653 (1 rule for Ensure WAF prevents message lookup in Log4j2. See CVE-2021-44228 aka log4jshell)
• Bump h2 from 1.4.200 to 2.0.202 (#441) @dependabot
• Update dependency org.sonarsource.analyzer-commons:sonar-analyzer-commons to v1.22.0.848 (#431) @renovate
• Update dependency org.mockito:mockito-core to v4.1.0 (#430) @renovate

Download latest release from https://search.maven.org/remotecontent?filepath=com/hack23/sonar/sonar-cloudformation-plugin/2.1.9/sonar-cloudformation-plugin-2.1.9.jar

Release 1.7.3(legacy)

What’s Changed

• Cfn-nag support cfn-nag 0.8.4+ , ignore fields not used by plugin(more failsafe parsing)
• Dependency updates (003cac0)

Download latest release from https://search.maven.org/remotecontent?filepath=com/hack23/sonar/sonar-cloudformation-plugin/1.7.3/sonar-cloudformation-plugin-1.7.3.jar

Release 2.1.8

What’s Changed

• Support checkov 2.0.560 , new rules
• Cleanup cfn-nag impl
• Update dependency org.owasp:dependency-check-maven to v6.5.0 (#424) @renovate
• Update dependency org.sonarsource.analyzer-commons:sonar-analyzer-commons to v1.21.0.829 (#423) @renovate
• Update dependency org.sonarsource.analyzer-commons:sonar-analyzer-commons to v1.20.0.801 (#419) @renovate

Download latest release from https://search.maven.org/remotecontent?filepath=com/hack23/sonar/sonar-cloudformation-plugin/2.1.8/sonar-cloudformation-plugin-2.1.8.jar

Release 2.1.7

What’s Changed

• Update checkov rules to version 2.0.506, support some new rules.
• Update dependency org.owasp:dependency-check-maven to v6.4.1 (#418) @renovate
• Update dependency org.sonarsource.analyzer-commons:sonar-analyzer-commons to v1.19.0.786 (#417) @renovate
• Update dependency org.owasp:dependency-check-maven to v6.4.0 (#416) @renovate

Download latest release from https://search.maven.org/remotecontent?filepath=com/hack23/sonar/sonar-cloudformation-plugin/2.1.7/sonar-cloudformation-plugin-2.1.7.jar

Release 2.1.6

What’s Changed

• Update checkov rules to version 2.0.481, support some new rules.
• Update dependency org.mockito:mockito-core to v4 (#415) @renovate
• Update dependency com.fasterxml.jackson.core:jackson-databind to v2.13.0 (#414) @renovate
• Update dependency org.owasp:dependency-check-maven to v6.3.2 (#413) @renovate
• Update dependency org.sonarsource.sonarqube:sonar-testing-harness to v9.1.0.47736 (#412) @renovate

Download latest release from https://search.maven.org/remotecontent?filepath=com/hack23/sonar/sonar-cloudformation-plugin/2.1.6/sonar-cloudformation-plugin-2.1.6.jar

Release 2.1.5

What’s Changed

• Update checkov rules to version 2.0.417, support some new rules
• Update dependency org.apache.maven.scm:maven-scm-provider-svnexe to v1.12.0 (#411) @renovate
• Update dependency org.apache.maven.scm:maven-scm-provider-svn-commons to v1.12.0 (#410) @renovate
• Update dependency org.apache.maven.scm:maven-scm-provider-gitexe to v1.12.0 (#409) @renovate
• Update dependency org.apache.maven.scm:maven-scm-api to v1.12.0 (#408) @renovate
• Update dependency org.sonarsource.analyzer-commons:sonar-analyzer-commons to v1.18.0.756 (#406) @renovate
• Update dependency org.apache.maven.plugins:maven-javadoc-plugin to v3.3.1 (#405) @renovate
• Update dependency org.sonarsource.analyzer-commons:sonar-analyzer-commons to v1.17.0.740 (#404) @renovate
• Update dependency org.cyclonedx:cyclonedx-maven-plugin to v2.5.3 (#403) @renovate
• Update dependency org.owasp:dependency-check-maven to v6.3.1 (#402) @renovate
• Update dependency org.owasp:dependency-check-maven to v6.3.0 (#401) @renovate
• Update dependency org.apache.maven.plugins:maven-source-plugin to v3.2.1 (#400) @renovate
• Update dependency org.codehaus.plexus:plexus-utils to v3.4.1 (#398) @renovate
• Update dependency com.fasterxml.jackson.core:jackson-databind to v2.13.0-rc2 (#397) @renovate
• Update dependency org.mockito:mockito-core to v3.12.4 (#396) @renovate
• Update dependency org.mockito:mockito-core to v3.12.3 (#395) @renovate
• Update dependency org.mockito:mockito-core to v3.12.1 (#394) @renovate
• Update dependency org.cyclonedx:cyclonedx-maven-plugin to v2.5.2 (#392) @renovate
• Update dependency org.mockito:mockito-core to v3.12.0 (#393) @renovate

Download latest release from https://search.maven.org/remotecontent?filepath=com/hack23/sonar/sonar-cloudformation-plugin/2.1.5/sonar-cloudformation-plugin-2.1.5.jar

Release 2.1.4

What’s Changed

• Update checkov rules to version 2.0.359, support some new rules
• Update dependency org.sonarsource.analyzer-commons:sonar-analyzer-commons to v1.16.0.719 (#391) @renovate
• Update dependency org.apache.maven.scm:maven-scm-provider-svnexe to v1.11.3 (#390) @renovate
• Update dependency org.apache.maven.scm:maven-scm-provider-svn-commons to v1.11.3 (#389) @renovate
• Update dependency org.apache.maven.scm:maven-scm-provider-gitexe to v1.11.3 (#388) @renovate
• Update dependency org.apache.maven.scm:maven-scm-api to v1.11.3 (#387) @renovate

Download latest release from https://search.maven.org/remotecontent?filepath=com/hack23/sonar/sonar-cloudformation-plugin/2.1.4/sonar-cloudformation-plugin-2.1.4.jar

Release 2.1.3

What’s Changed

• update checkov rules to version 2.0.337, support some new rules
• Update dependency org.codehaus.plexus:plexus-utils to v3.4.0 (#386) @renovate
• Bump sonar-testing-harness from 7.9.6 to 9.0.1.46107 (#384) @dependabot-preview
• Update dependency org.apache.commons:commons-csv to v1.9.0 (#383) @renovate

Download latest release from https://search.maven.org/remotecontent?filepath=com/hack23/sonar/sonar-cloudformation-plugin/2.1.3/sonar-cloudformation-plugin-2.1.3.jar