Version 0.8.0

• Added the ability to specify custom rules.json path

Version 0.7.0

• Fixes #356
• PSRule update with new security rules for improved coverage
• Upgrade to .net8
• Bicep dependency update
• ARM template processor dependency update

Version 0.6.0

This release has an issue: #356. A new release will contain a fix.
 

• Upgrade to .NET 7
• Bicep dependency update
• Support for specifying only partial set of parameters
• Small bug fix and optimization

Version 0.5.2

• Updated Azure.Deployments.* and Microsoft.PowerShell.SDK dependencies for CVE-2023-29331

Version 0.5.1

• Records correct rule severity in scan results when outputting to SARIF (in "level" property), which was previously always set to "Error".

Version 0.5.0

• Tool rename to "Template Analyzer"
• Adds support for recursively scanning Bicep modules, keeping context from results in referenced templates
• Updates to console and SARIF output to show results in the file of origination
• Adds seven new built-in rules for Azure API Management (APIM)
• Improvements to the documentation
• Various bug fixes and refactoring improvements

Version 0.4

• Adds support for inline nested templates
• Implements auto-discovery of parameters files using Microsoft naming conventions
• Adds two rules: ClassicCompute.MigrateToARM and ClassicStorage.MigrateToARM
• Reduces noise in the console output of the CLI and other improvements to logging
• Adds rule names and short descriptions to the SARIF output
• Improvements to the documentation and rules information

Version 0.3.1

• Bug fixes, mostly related to the PowerShell execution

Version 0.3.0

• Replaces TTK for PSRule as the core of our PowerShell engine
• Improves the documentation
• Improves the console output of the CLI

Version 0.2.0

• Adds support for scanning Bicep template files
• Adds rule severity, filtering rules based on severity, and changing built-in severity
• Adds CLI verbose option
• Bug fixes, optimizations, and improvements including:
  • Update to .NET 6
  • CLI returns error codes
  • Improved CLI analysis output
  • Logs execution errors as SARIF tool notifications