Make the kosli-dev/setup-cli-action verified in the GitHub Marketplace
Kosli has become an official GitHub Technology Partner. As part of this partnership, our setup-kosli-cli
GitHub Action has been verified by GitHub, providing users with additional confidence when incorporating Kosli into their GitHub workflows.
You can find our verified setup-kosli-cli action in the GitHub Marketplace, ready to help you integrate Kosli’s continuous compliance capabilities into your GitHub workflows.
Include Jira fields in Jira Ticket attestation
In the Kosli CLI, the jira attestation command now accepts a --jira-issue-fields
flag, which allows you to attach additional information provided by the Jira API. It is a comma-separated list, and *all can be used to include all fields. It defaults to no fields.
kosli attest jira yourDockerImageName \
...
--jira-base-url https://kosli.atlassian.net \
--jira-username user@domain.com \
--jira-api-token yourJiraAPIToken \
--api-token yourAPIToken \
--jira-issue-fields title,description,summary
You can find out more in the Kosli docs.
Kosli terraform Reporter Update: Multi-Environment Reporting Made Simple
We’ve made a useful improvement to our kosli-reporter terraform module. You can now track multiple environments using a single reporter lambda function, making it easier and more efficient to monitor your AWS infrastructure.
Previously, you needed to set up separate reporters for each environment you wanted to track. With this update, one reporter can keep an eye on your ECS clusters, S3 buckets, and Lambda functions all at once. This means less infrastructure to manage and a simpler setup process.
Here’s a quick example of how you can track multiple environments:
environments = [
{
kosli_environment_name = "staging-ecs"
kosli_environment_type = "ecs"
},
{
kosli_environment_name = "staging-s3"
kosli_environment_type = "s3"
reported_aws_resource_name = "my-bucket"
},
{
kosli_environment_name = "staging-lambda"
kosli_environment_type = "lambda"
}
]
Check out the documentation to get started with the new multi-environment reporting feature!
Service account for webhooks
When a webhook is created in Kosli, a service account is now automatically created and associated with the webhook. This service account cannot be modified by a user. It will be removed if the webhook is deleted.
More –debug logging for CLI http-retries
The Kosli CLI has a built-in http-retry mechanism which can be set with the --max-api-retries
(defaulting to 3). A call to a Kosli API end-point, made by a CLI command with the --debug
flag set now prints diagnostic messages for each individual http call that fails.
$ kosli tag flow differ-ci --org=cyber-dojo --set=url=https://... --debug
[debug] processing config file [kosli]
[debug] config file [kosli] not found. Skipping.
https://xapp.kosli.com/api/v2/tags/cyber-dojo/flow/differ-ci
2025/01/31 10:40:01 [ERR] PATCH https://xapp.kosli.com/api/v2/tags/cyber-dojo/flow/differ-ci request failed: Patch "https://xapp.kosli.com/api/v2/tags/cyber-dojo/flow/differ-ci": dial tcp: lookup xapp.kosli.com: no such host
https://xapp.kosli.com/api/v2/tags/cyber-dojo/flow/differ-ci: retrying in 1s (3 left)
2025/01/31 10:40:02 [ERR] PATCH https://xapp.kosli.com/api/v2/tags/cyber-dojo/flow/differ-ci request failed: Patch "https://xapp.kosli.com/api/v2/tags/cyber-dojo/flow/differ-ci": dial tcp: lookup xapp.kosli.com: no such host
https://xapp.kosli.com/api/v2/tags/cyber-dojo/flow/differ-ci: retrying in 2s (2 left)
2025/01/31 10:40:04 [ERR] PATCH https://xapp.kosli.com/api/v2/tags/cyber-dojo/flow/differ-ci request failed: Patch "https://a.b.c/api/v2/tags/cyber-dojo/flow/differ-ci": dial tcp: lookup xapp.kosli.com: no such host
https://xapp.kosli.com/api/v2/tags/cyber-dojo/flow/differ-ci: retrying in 4s (1 left)
2025/01/31 10:40:08 [ERR] PATCH https://xapp.kosli.com/api/v2/tags/cyber-dojo/flow/differ-ci request failed: Patch "https://xapp.kosli.com/api/v2/tags/cyber-dojo/flow/differ-ci": dial tcp: lookup xapp.kosli.com: no such host
Error: Patch "https://xapp.kosli.com/api/v2/tags/cyber-dojo/flow/differ-ci": PATCH https://xapp.kosli.com/api/v2/tags/cyber-dojo/flow/differ-ci giving up after 4 attempt(s): Patch "https://xapp.kosli.com/api/v2/tags/cyber-dojo/flow/differ-ci": dial tcp: lookup xapp.kosli.com: no such host