Merge pull request #162 from jonrau1/auditors_jun_2023

AWS CIS Benchmark 1.5 & AWS Auditor Expansion

.github/workflows/sbom-vulns.yml

@@ -34,7 +34,7 @@ jobs:
 
       # Scan the CDX SBOM with Grype
       - name: Grype Scan SBOM
-        uses: anchore/[email protected].5
+        uses: anchore/[email protected].6
         id: scan
         with:
           output-format: sarif

Dockerfile

@@ -18,10 +18,10 @@
 #specific language governing permissions and limitations
 #under the License.
 
-# latest hash as of 5 JUNE 2023 - Alpine 3.18.0 / alpine:latest
-# https://hub.docker.com/layers/library/alpine/3.18.0/images/sha256-02bb6f428431fbc2809c5d1b41eab5a68350194fb508869a33cb1af4444c9b11?context=explore
+# latest hash as of 15 JUNE 2023 - Alpine 3.18.0 / alpine:latest
+# https://hub.docker.com/layers/library/alpine/3.18.0/images/sha256-25fad2a32ad1f6f510e528448ae1ec69a28ef81916a004d3629874104f8a7f70?context=explore
 # use as builder image to pull in required deps
-FROM alpine@sha256:02bb6f428431fbc2809c5d1b41eab5a68350194fb508869a33cb1af4444c9b11 AS builder
+FROM alpine@sha256:25fad2a32ad1f6f510e528448ae1ec69a28ef81916a004d3629874104f8a7f70 AS builder
 
 LABEL org.opencontainers.image.source="https://github.com/alpinelinux/docker-alpine"
 
@@ -41,9 +41,9 @@ RUN \
     rm -rf /tmp/* && \
     rm -f /var/cache/apk/*
 
-# latest hash as of 5 JUNE 2023 - Alpine 3.18.0 / alpine:latest
-# https://hub.docker.com/layers/library/alpine/3.18.0/images/sha256-02bb6f428431fbc2809c5d1b41eab5a68350194fb508869a33cb1af4444c9b11?context=explore
-FROM alpine@sha256:02bb6f428431fbc2809c5d1b41eab5a68350194fb508869a33cb1af4444c9b11 as electriceye
+# latest hash as of 15 JUNE 2023 - Alpine 3.18.0 / alpine:latest
+# https://hub.docker.com/layers/library/alpine/3.18.0/images/sha256-25fad2a32ad1f6f510e528448ae1ec69a28ef81916a004d3629874104f8a7f70?context=explore
+FROM alpine@sha256:25fad2a32ad1f6f510e528448ae1ec69a28ef81916a004d3629874104f8a7f70 as electriceye
 
 COPY --from=builder /usr /usr
 

README.md

@@ -258,9 +258,9 @@ In total there are:
 
 - **3** Supported Public CSPs: `AWS`, `GCP`, `OCI`
 - **2** Supported SaaS Provider: `ServiceNow`, `M365`
-- **972** ElectricEye Checks
-- **140** Supported CSP & SaaS Asset Components across all Services
-- **112** ElectricEye Auditors
+- **1037** ElectricEye Checks
+- **156** Supported CSP & SaaS Asset Components across all Services
+- **117** ElectricEye Auditors
 
 The tables of supported Services and Checks have been migrated to the respective per-Provider setup documentation linked above in [Configuring ElectricEye](#configuring-electriceye).