Mondoo 11.41 is out!

🥳 Mondoo 11.41 is out! This release includes RDS cluster support, improved asset navigation, new resources, and more!

Get this release: Installation Docs | Package Downloads | Docker Container

---

🧹 IMPROVEMENTS

AWS RDS Cluster support

AWS account scans now include automatic discovery of RDS clusters. Cluster assets appear on the Assets page in a new RDS Clusters group and each asset includes full inventory information.

More view options for asset lists

We've updated the Assets page to make finding and selecting the assets you care about easier than ever. Improved search results show just the asset groups that include results. A new empty state makes it more clear when no assets match your search. New group and list icons let you switch between views: organize by platform groups or display a single list so you can sort and select all assets of a certain asset group at once.

Resource updates

azure.subscription.cloudDefenderService

• New settingsMCAS, settingsWDATP, and settingsSentinel fields using the new azure.subscription.cloudDefenderService.settings resource

azure.subscription.cloudDefenderService.securityContact

• Deprecate alertNotifications in favor of the new notificationSources field

azure.subscription.webService.appsite

• New ftp and scm fields using the new azure.subscription.webService.appsite.basicPublishingCredentialsPolicies resource

microsoft

• New users field using the new microsoft.users resource
• New roles field using the new microsoft.roles resource

sshd.config

• New context field using the new file.context resource

🐛 BUG FIXES AND UPDATES

• Prefer the --token command line flag over the GITHUB_TOKEN environmental variable when both are present.
• Display asset platforms in search results.
• Preselect ticket email recipient values when only a single option exists in the drop down menu.
• When a user selects "Create ticket," don't show the "All Assets" and "Selected Assets" options if there's only one asset.
• Don't show policies or checks counts on third-party integration pages.
• Show a friendly empty state when a filter on the Assets page returns no results.
• Don't show empty asset groups when filtering on the Assets page.
• Display a friendly error if an exception cannot be created.
• Don't require new users in a private instance to activate the region.
• Improve the reliability of AWS region fetching in low-privilege environments.
• Fix risk factors settings in the security model configuration not applying in some cases.
• Adjust score weighting for risk factors to better prioritize findings.
• Don't zip one-file PDF reports so users can open them directly in the browser.
• Improve the reliability of SBOM generation.
• Fix the namespace of PURLs on Red Hat Enterprise Linux systems.
• Improve the reliability of risk factor counts on finding pages.