Cfripper

Latest version: v1.15.6

Safety actively analyzes 629639 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 2 of 13

1.13.2

Not secure
Fixes
- Fixes docs formatting with [235](https://github.com/Skyscanner/cfripper/pull/235)

1.13.1

Not secure
Fixes
- Fixes `GenericResourcePartialWildcardPrincipalRule` and `GenericCrossAccountTrustRule` message, since sometimes it was bad-formatted in markdown.

1.13.0

Not secure
Additions
- Default logging level from INFO to WARNING 230
Updates
- `GenericResourceWildcardPrincipalRule` (therefore `GenericResourcePartialWildcardPrincipalRule` and `GenericResourceFullWildcardPrincipalRule` as well) now ignores `AWS::KMS::ReplicaKey`. It as the same use case as a `AWS::KMS::Key`.
Fixes
- Update `GenericWildcardPrincipalRule`, `FullWildcardPrincipalRule`, `GenericResourceWildcardPrincipalRule` and `GenericResourceFullWildcardPrincipalRule` message, since sometimes it was bad-formatted in markdown.

1.12.0

Not secure
Improvements
- Refactored the `KMSKeyWildcardPrincipalRule` rule
Updates
- Update `GenericWildcardPrincipalRule`, `PartialWildcardPrincipalRule` and `GenericResourcePartialWildcardPrincipalRule` message
- Update docs
Fixes
- Fix `GenericWildcardPrincipalRule` that could add a false-positive
- Fix `GenericWildcardPrincipalRule` that wasn't handling canonical IDs
- Fix `REGEX_PARTIAL_WILDCARD_PRINCIPAL` to correctly handle canonical IDs and account IDs
- Fix unit tests

1.11.0

Not secure
Additions
- New regex `REGEX_CONTAINS_WILDCARD` to check for any wildcard
Updates
- `GenericResourceWildcardPolicyRule` now uses `REGEX_CONTAINS_WILDCARD` instead of `REGEX_HAS_STAR_OR_STAR_AFTER_COLON`.
- Bump dev dependency `moto` to `==3.1.9`.

1.10.0

Not secure
Improvements
- `GenericCrossAccountTrustRule` can now scan IAM Roles correctly as `CrossAccountTrustRule` does
Additions
- New rule: `RDSSecurityGroupIngressOpenToWorldRule`
Updates
- Bumped minimum `pycfmodel` version to `0.20.0`

Page 2 of 13

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.