What's new
- Compiled with Go 1.26.
Dependencies
- Upgrade go and npm dependencies to remediate security vulnerabilities.
Dependencies
- Upgrade go and npm dependencies to remediate security vulnerabilities.
Dependencies
- Upgrade go and npm dependencies to remediate vulnerabilities.
Bug Fixes
- Fix issue where cell controls were not appearing after scrolling. (#956)
- Align dashboard UI tag filters behaviour with CLI. (#969)
Dependencies
- Upgrade
containerd,webpack-dev-server,js-yaml,globpackages to remediate vulnerabilities.
Bug Fixes
- Build: Restored CentOS/RHEL 9 compatibility by pinning the build image to an older libstdc++/GCC baseline. Previous build linked against newer GLIBCXX symbols, causing Powerpipe to fail on CentOS/RHEL 9.
- Improve benchmark/detection summary chart width calculations. (#945)
- Fix filtering by false boolean values in tables. (#946)
What's new
- Updated the
tailpipeconnection to support the new Tailpipe v0.7.0 DuckLake backend. (#889)
Note: When using Powerpipe with Tailpipe v0.7.0, existing Tailpipe data must be migrated to DuckLake before running a dashboard that uses a Tailpipe backend. Data can be migrated by runningtailpipe query. - Updated pipe-fittings to v2.7.0. (#760)
Note: For CentOS/RHEL users, the minimum supported version is now CentOS Stream 10 / RHEL 10 due to
libstdc++library compatibility.
Bug Fixes
- Fix issue where the
databaseargument from a query resource was not respected. (#829) - Fix issue where the default config path was not resolved correctly. The default is the
mod-location, followed by the$POWERPIPE_INSTALL_DIR/config. Also thePOWERPIPE_CONFIG_PATHenvironment variable was not respected. (#898) - Fix issue where
pie/donutcharts were not rendering correctly on boolean values. (#433)
Dependencies
- Upgrade
hashicorp/go-getter,sha.jsandcipher-baseto remediate critical and high vulnerabilities.
Whats new
- Compiled with Go 1.24.
Bug Fixes
- Fix issue where the
--wherearg was not correctly filtering the benchmarks/controls when JSON path expressions were passed. (#740) - Fix error handling for JSON output/export incase of database failures. (#665)
Dependencies
- Upgrade
form-dataandgo-viper/mapstructure/v2packages to remediate critical and high vulnerabilities.
Bug Fixes
- Fix regression where powerpipe was failing to run detections from dependant mods if steampipe service was not running. (#824)
- Fix issue where powerpipe server was failing to resolve the default pipes token. (#818)
- Fix issue where query run snapshot output was returning a 0 exit code even incase of query failures. (#816)
Dependencies
- Upgrade
pbkdf2package to remediate critical vulnerabilities.
Bug Fixes
- Fix issue where powerpipe was exposing the server port to the internet even when listen was local. (#761)
- Fix issue where benchmark/control json output was not printing the complete JSON to stdout. (#791)
- Fix issue where the
fromproperty in Tailpipe connections was getting parsed incorrectly. (#790)
Bug Fixes
- Fix issue where powerpipe was failing to run detections from dependant mods if steampipe service was not running. (#788)
- Fix issue where detection benchmarks were not showing date range selector in powerpipe server. (#789)
- Fix issue where powerpipe was failing to export detection benchmarks. (#796)
Bug Fixes
- Fix the table data cells displaying a vertical scroll in some browsers. (#765)
- Fix issue where setting custom relative duration not shown in presets does not update the relative timestamp. (#769)
Bug Fixes
- Table headers for numeric columns are now right-aligned like the row-level cell content. (#755)
Bug Fixes
- Fix the supported export formats in
powerpipe query runcommand. (#539) - Ensure dashboard UI Table component fetches external link from registry when used rather than during module import. (#720)
Dependencies
- Upgrade
containerdandgolang.org/x/netpackages to remediate moderate vulnerabilities.
Bug Fixes
- When DashboardServer executes a dashboard, ensure search path prefix is respected. (#717)
Bug Fixes
- Fix backend support if the database is specified by a connection string. (#713)
- Improve search path button config popover to handle narrower screens. (#711)
- Dashboard UI sending
changed_inputfield at wrong level ininput_changedevent. (#708)
Whats new
- Add support for
tailpipedetections and detection benchmarks. - Add
tailpipeconnection type. - Add
detectioncommand. - Add default column support for tables. (#567)
- Allow multiple benchmarks/controls to be filtered/grouped on a single dashboard. (#588)
- Add support for equal / not_equal / in / not_in filters. (#594)
- Show documentation in Benchmark UI. (#591)
- Combine snap / open button into single split button. (#606)
- Add table column selection to table panel controls. (#631)
- Add table row view. (#636)
- Add support for draggable split pane for dashboard UI right content section. (#648)
- Update default date_range input to be 7 days. (#641)
- Add cell filtering to tables. (#662)
- Add href support to detection column data. (#642)
- Add table filter side panel for regular tables. (#670)
- Add 500 MB limit for opening snapshots. (#671)
- Add control row detail side panel view. (#672)
- Add heatmap chart. (#673)
Whats new
- Add support for installing mods from GitLab repositories. (#656)
Dependencies
- Upgrade
crypto,netandgo-gitpackages to remediate critical and high vulnerabilities.
Bug fixes
- Fix minor spelling issue in query help output. (#542)
- Update error message to inform users to run
make dashboard_assetswhen dashboard assets are not present. (#524)
Whats new
connectionresource to manage credentials. Documentation.databaseproperty has been added to mod. A database can be a connection reference, connection string, or Pipes workspace to query.
Deprecations
- Deprecated
databaseCLI arg. See Setting the Database for the new syntax to set the database. - Deprecated
POWERPIPE_DATABASEenv var. See Setting the Database for the new syntax to set the database. - Deprecated
databaseworkspace profile arg. See Setting the Database for the new syntax to set the database.
Bug fixes
- Fixed the issue where the search path setting was not being retained while navigating to a different dashboard. (#325)
Whats new
- Add
jsonextension support for duckdb backends. (#467)
Bug fixes
- Fix incorrect mod name in powerpipe help command output. (#471)
Whats new
- Compiled with Go 1.22. (#448)
Bug fixes
- Fix issue where CLI notifications were interfering with the Powerpipe JSON outputs resulting in invalid JSON outputs. (#452)
- Fix issue where powerpipe crashed when running a benchmark with
--dry-runflag set. (#455)
Bug fixes
- Fix issue where the
--argflag was not working for control and query runs. (#439) - Fix data inconsistency issue in snapshot output when the same control was included in multiple benchmarks. (#436)
Whats new
- Update JSON output to handle duplicate column names - append a unique suffix to duplicate column names. (#375)
- Update snapshot schema and dashboard event schema versions to
20240607. (#406)
Bug fixes
- When generating a snapshot from a benchmark run, the row data is empty any of the rows are in error. (#366)
- Update mod install to only install or update mods which are command targets (and their dependencies). Set default pull mode for install is latest if there is a target, and minimal if no target is given. (#381)
- Fix incorrect help message for output in powerpipe benchmark/control run. (#367)
- Fix issue where
POWERPIPE_PORTenv var was not being honoured. (#362) - Update timing metadata output to rename
durationfield toduration_msfor consistency with steampipe. (#368) - Dashboard graph should not crash if an invalid edge category color is provided. (#364)
- Dashboard flow/hierarchy components should show panel controls. (#363)
Bug fixes
- Respect the app version defined
powerpipeblock of the modrequireblock. (#405) - Dashboard UI should handle graph categories containing
resource_namerather thanname. (#360)
Whats new
- Add support for installing mods from a branch or from the local file system. (#285)
To install from a branch:
powerpipe mod install github.com/turbot/steampipe-mod-aws-well-architected#main
To reference a mod in the local file system:
powerpipe mod install ../mods/local_mod_folder
-
Add
--pullflag tomod,dashboardandbenchmarkcommands to control the mod update strategy. (#352). Possible update strategies are:full- check branch and tags for both latest and accuracylatest- update everything to latest, but only branches - not tags - are commit checked (which is the same as latest)development- update branches and broken constraints to latest, leave satisfied constraints unchangedminimal- only update broken constraints, do not check branches for new commits
Whats new
- It is now possible to set a timeout for benchmark and dashboard execution. These can be set:
- in the workspace using config
dashboard_timeoutandbenchmark_timeout - using the
--dashboard-timeoutflag for the thedashboard runandservercommands - using the
--benchmark-timeoutflag for thebenchmark runcommands. - using the environment variables
POWERPIPE_DASHBOARD_TIMEOUTandPOWERPIPE_BENCHMARK_TIMEOUTrespectively. (#336)
- in the workspace using config
- Support installing private mods using a github app token. (#381).
- Improve layout of filter and grouping components for control tags and dimensions. (#263)
- Remove
dashboard input listanddashboard input showcommands. - Add thousands separator to numeric values in dashboard tables. (#315)
- Only show benchmark cards for statuses that are contained in the current filter and add status to filter on card click. (#322)
Bug fixes
- When calling mod update, respect the argument (if any) and only update specified mods. (#331)
- Fix
mod updatedisplay of updates to transitive dependencies. (#288)
Bug fixes
- When exporting or displaying a check run as a snapshot, ensure the top level panel has a valid summary. (#274)
- Update
mod listoutput to includeresource_nameandmodfields.
Whats new
- Optimize workspace load time for large workspaces with multiple dependent mods. (#365)
Bug fixes
- Fix CLI available version check. (#250)
- Notify when
mod installcreates a default mod. (#246) - Remove newline from end of
mod installoutput. (#247) - Fix issue where
asffoutput was always missing the first row.
Introducing Powerpipe - Dashboards for DevOps.
Benchmarks - 5,000+ open-source controls from CIS, NIST, PCI, HIPAA, FedRamp and more. Run instantly on your machine or as part of your deployment pipeline.
Relationship Diagrams - The only dashboarding tool designed from the ground up to visualize DevOps data. Explore your cloud,understand relationships and drill down to the details.
Dashboards & Reports - High level dashboards provide a quick management view. Reports highlight misconfigurations and attention areas. Filter, pivot and snapshot results.
Code, not clicks - Our dashboards are code. Version controlled, composable, shareable, easy to edit - designed for the way you work. Join our open-source community!
Learn more at:
- Website - https://powerpipe.io
- Docs - https://powerpipe.io/docs
- Hub - https://hub.powerpipe.io
- Introduction - https://powerpipe.io/blog/introducing-powerpipe