1.4.0
Released on 2022-08-04
Terraform
Create a threat model from a Terraform file equivalent to another from Cloudformation
- Build Terraform mapping definitions using $altsource action: Adding altsource components to Terraform and aligning the number of components between Cloudformation and Terraform
- Build Terraform mapping definitions for security groups using $hub and $ip actions: Adding security groups and dataflows support to Terraform
- Created multinetwork_security_groups_with_lb terraform equivalent
- Fixed aws_ecs_service task_definition
Fix error when a terraform file has no resources at all
Visio
Implement boundary based trustzones processing in Visio
- Refactored Visio parser and factories to support different component representation calculations
- Boundray trustzones processed with no total precision yet
- Fixed previous problems with trustzone processing and parent calculation
- Support for unbounded Visio diagrams
- Refactored zone components representations
- Added some diagram to otm integration tests
- Added more diagram to otm tests
- Added simple_component_representer unit tests
- Fixed minor problem for corner cases in parent calculator
More components for Visio
- Add to visio default mapping file the AWS stencils that match AWS IriusRisk components
Error when processing diagram with incomplete connectors
Code refactor
Make the URL for the OTM standard in the wiki link to the OTM project README instead of the wiki
Fixes
Startleft control unexpected errors on building OTM steps don't return OTM_BUILDING_ERROR
Fix error importing NeoLoad visio file
Other tasks
Set version to all libraries defined in setup.py available in Startleft
Improve error processing in Startleft to avoid generic 500 errors
- Removed unnecessary exception handlers
- Default str method for enum and adding return statement
Integration tests for Startleft CLI
- Initial Bitbucket Pipelines configuration
- bitbucket-pipelines.yml edited online with Bitbucket
- Added deepdiff new lib to setup.py
- Revert added deepdiff Modified pipeline to install extras_require
- Modified pipeline to install extras_require
- Modified pipeline. Added deepdiff manually
- Create use cases for integration tests in Startleft CLI
Update startleft library lxml from 4.8.0 to 4.9.1