What's Changed

⚠️ Upgrade Notes

This release contains a minor addition (suspend field) to the Custom Resource Definitions (CRDs), Helm does not update CRDs after the initial installation. If you are planning on using the suspend field make sure that your CRDs are up to date.
To upgrade the CRDs you can run the following script or grab the latest CRDs from the git repo at the v5.6.0 tag:

kubectl apply -f https://raw.githubusercontent.com/secureCodeBox/secureCodeBox/v5.6.0/operator/crds/execution.securecodebox.io_scans.yaml	
kubectl apply -f https://raw.githubusercontent.com/secureCodeBox/secureCodeBox/v5.6.0/operator/crds/execution.securecodebox.io_scheduledscans.yaml

🚀 Features

• Add suspend functionality to Scan and ScheduledScan resources by @J12934 in Add suspend functionality to Scan and ScheduledScan resources #3504
• Allow extra volumes and volume mounts for CSI secrets and other volumes by @mazmar in feat: allow extra volumes and volume mounts for CSI secrets and other volumes #3485

🚓 Security Scanner

• Upgraded nuclei from v3.6.2 to v3.7.0 @secureCodeBoxBot ([SCB-Bot] Upgraded nuclei from v3.6.2 to v3.7.0 #3486)
• Upgraded semgrep from 1.147.0 to 1.151.0 @secureCodeBoxBot ([SCB-Bot] Upgraded semgrep from 1.147.0 to 1.148.0 #3465, [SCB-Bot] Upgraded semgrep from 1.148.0 to 1.149.0 #3477, [SCB-Bot] Upgraded semgrep from 1.149.0 to 1.151.0 #3498)
• Upgraded trivy from 0.68.2 to 0.69.1 @secureCodeBoxBot ([SCB-Bot] Upgraded trivy from 0.68.2 to 0.69.1 #3501)
• Upgraded trivy-sbom from 0.68.2 to 0.69.1 @secureCodeBoxBot ([SCB-Bot] Upgraded trivy-sbom from 0.68.2 to 0.69.1 #3502)

🐛 Bug Fixes

• Fix Bug with Subfinder Parser includeTargetDomain flag for empty results by @J12934 in Fix Bug with Subfinder Parser includeTargetDomain flag for empty results #3506

📌 Dependencies

• Update golang Docker tag to v1.25.6 by @renovate[bot] in Update golang Docker tag to v1.25.6 #3468
• Update dependency helm/helm to v4.0.5 by @renovate[bot] in Update dependency helm/helm to v4.0.5 #3464
• Bump qs from 6.13.0 to 6.14.1 in /documentation in the npm-security-updates group across 1 directory by @dependabot[bot] in Bump qs from 6.13.0 to 6.14.1 in /documentation in the npm-security-updates group across 1 directory #3463
• Bump @types/node from 25.0.7 to 25.0.9 in /documentation in the npm-version-updates group by @dependabot[bot] in Bump @types/node from 25.0.7 to 25.0.9 in /documentation in the npm-version-updates group #3470
• Bump undici from 6.21.3 to 6.23.0 in /hooks/persistence-elastic/hook by @dependabot[bot] in Bump undici from 6.21.3 to 6.23.0 in /hooks/persistence-elastic/hook #3462
• Bump @types/node from 25.0.7 to 25.0.9 in /hook-sdk/nodejs in the npm-version-updates group across 1 directory by @dependabot[bot] in Bump @types/node from 25.0.7 to 25.0.9 in /hook-sdk/nodejs in the npm-version-updates group across 1 directory #3471
• Bump the go-version-updates group across 3 directories with 2 updates by @dependabot[bot] in Bump the go-version-updates group across 3 directories with 2 updates #3473
• Bump the github-actions-version-updates group across 1 directory with 2 updates by @dependabot[bot] in Bump the github-actions-version-updates group across 1 directory with 2 updates #3472
• Bump the gradle-version-updates group in /hooks/persistence-defectdojo/hook with 2 updates by @dependabot[bot] in Bump the gradle-version-updates group in /hooks/persistence-defectdojo/hook with 2 updates #3469
• Bump lodash from 4.17.21 to 4.17.23 in /documentation in the npm-security-updates group across 1 directory by @dependabot[bot] in Bump lodash from 4.17.21 to 4.17.23 in /documentation in the npm-security-updates group across 1 directory #3476
• Update dependency helm/helm to v4.1.0 by @renovate[bot] in Update dependency helm/helm to v4.1.0 #3475
• Bump the github-actions-version-updates group across 1 directory with 4 updates by @dependabot[bot] in Bump the github-actions-version-updates group across 1 directory with 4 updates #3483
• Bump the go-version-updates group across 3 directories with 1 update by @dependabot[bot] in Bump the go-version-updates group across 3 directories with 1 update #3484
• Update dependency go-task/task to v3.48.0 by @renovate[bot] in Update dependency go-task/task to v3.48.0 #3479
• Bump lodash-es from 4.17.21 to 4.17.23 in /hooks/cascading-scans/hook by @dependabot[bot] in Bump lodash-es from 4.17.21 to 4.17.23 in /hooks/cascading-scans/hook #3474
• Bump @types/node from 25.0.9 to 25.0.10 in /parser-sdk/nodejs in the npm-version-updates group across 1 directory by @dependabot[bot] in Bump @types/node from 25.0.9 to 25.0.10 in /parser-sdk/nodejs in the npm-version-updates group across 1 directory #3482
• Bump the npm-version-updates group in /documentation with 5 updates by @dependabot[bot] in Bump the npm-version-updates group in /documentation with 5 updates #3481
• chore(deps): update golang docker tag to v1.25.7 by @renovate[bot] in chore(deps): update golang docker tag to v1.25.7 #3497
• Bump @isaacs/brace-expansion from 5.0.0 to 5.0.1 in /documentation in the npm-security-updates group across 1 directory by @dependabot[bot] in Bump @isaacs/brace-expansion from 5.0.0 to 5.0.1 in /documentation in the npm-security-updates group across 1 directory #3496
• Bump the go-version-updates group across 3 directories with 2 updates by @dependabot[bot] in Bump the go-version-updates group across 3 directories with 2 updates #3495
• Bump the github-actions-version-updates group across 1 directory with 4 updates by @dependabot[bot] in Bump the github-actions-version-updates group across 1 directory with 4 updates #3494
• Bump webpack from 5.96.1 to 5.105.0 in /documentation in the npm-security-updates group across 1 directory by @dependabot[bot] in Bump webpack from 5.96.1 to 5.105.0 in /documentation in the npm-security-updates group across 1 directory #3503
• Bump @types/node from 25.0.10 to 25.2.0 in /hook-sdk/nodejs in the npm-version-updates group across 1 directory by @dependabot[bot] in Bump @types/node from 25.0.10 to 25.2.0 in /hook-sdk/nodejs in the npm-version-updates group across 1 directory #3493
• Bump github/codeql-action from 4.32.1 to 4.32.2 in /.github/workflows in the github-actions-version-updates group across 1 directory by @dependabot[bot] in Bump github/codeql-action from 4.32.1 to 4.32.2 in /.github/workflows in the github-actions-version-updates group across 1 directory #3508
• Bump the npm-version-updates group across 1 directory with 3 updates by @dependabot[bot] in Bump the npm-version-updates group across 1 directory with 3 updates #3507
• Bump gradle-wrapper from 8.13 to 9.3.0 in /hooks/persistence-defectdojo/hook in the gradle-version-updates group by @dependabot[bot] in Bump gradle-wrapper from 8.13 to 9.3.0 in /hooks/persistence-defectdojo/hook in the gradle-version-updates group #3480

Other Changes

• feat: allow extra volumes and volume mounts for CSI secrets and other volumes by @mazmar in feat: allow extra volumes and volume mounts for CSI secrets and other volumes #3485

New Contributors

• @mazmar made their first contribution in feat: allow extra volumes and volume mounts for CSI secrets and other volumes #3485

Full Changelog: v5.5.0...v5.6.0