Skip to main content

Mondoo 11.38 is out!

ยท 3 min read
Tim Smith
Tim Smith
Mondoo Core Team

๐Ÿฅณ Mondoo 11.38 is out! This release includes improved workspaces filtering, new resources, and more!โ€‹

Get this release: Installation Docs | Package Downloads | Docker Container


๐ŸŽ‰ NEW FEATURESโ€‹

Create workspaces based on asset technologyโ€‹

Design your perfect workspace without all the clicking! Now Mondoo can dynamically include assets in (or exclude assets from) workspaces based on their general technologies, such as cloud families (AWS, Azure, GCP...) or functions (network, infrastructure as code, operating systems...). This lets you target assets in a general group without selecting each individual platform.

For example, previously to create a workspace made up of all your GCP assets, you individually specified 11 platforms: BigQuery Dataset, Compute Firewall, Compute Image, and so on. Now it's as easy as selecting one technology: GCP!

Workspaces selection using platform

๐Ÿงน IMPROVEMENTSโ€‹

Quickly jump to integrations from an assetโ€‹

Quickly dive into integration configuration directly from scanned assets. A new link in each asset scan overview takes you to the integration that added the asset.

Integration link

Resource updatesโ€‹

microsoft.applicationโ€‹

Query Microsoft 365 applications by ID or name:

microsoft.application(id: "2efd0330-112c-4971-ab20-eaa54c.....") { * }
microsoft.application(name: "nametest") { * }

terraform.planโ€‹

  • New applyable field
  • New errored field
  • New variables field using the new terraform.plan.variable resource

๐Ÿ› BUG FIXES AND UPDATESโ€‹

  • Include additional information on the query when cnquery or cnspec fails to compile a query.
  • Display policy names in check exceptions.
  • Display correct keyboard navigation tips in the workspaces asset selection filter menus.
  • Improve rendering of the workspace asset selection process.
  • Allow organization and space IDs to start with a number and be up to 50 characters long.
  • Update the "Ensure that 'Java version' is currently supported" check in the CIS Azure Foundations policy to support LTS releases of Java 17 and 11.
  • Stop the CIS GitLab Level 2 policy from applying to non-GitLab assets.
  • Improve error messages when data export integrations fail.
  • Ensure gcp.project.cloudRun.services fetches data from all available regions.
  • Fix failures fetching the traffic field in the gcp.project.cloudRun.services resource.
  • Improve the reliability of the CIS Azure Foundations policy's "Ensure IAM policies that allow full ":" administrative privileges are not attached" check.
  • Improve rendering of remediation steps in the Mondoo AWS Security policy.
  • Allow excluding users from the Mondoo Linux Security policy's "Ensure SSH Idle Timeout Interval is configured" check using a property.