- [Breaking change] The
delete
function in theChariot
class was renamed todelete_by_key
. Thedelete
function is a new one that takes the more generalbody
andquery
arguments. - [New feature] The
chariot delete file
command was added.
- [Breaking change] The
agent attribution
command is renamed toagent affiliation
command.- See
praetorian chariot agent affiliation --help
for new invocation syntax.
- See
- [New feature] Added asset as an available type for the
affiliation
command.
- [New feature] keychain.ini file is now optional. Users can pass login credentials via in-memory environment variables.
- [Bug fix] Process AI attribution results as plain text
- [New feature] Added support for risk attribution.
- [Breaking change] Risks.delete() now takes an additional status parameter.
- [Breaking change] Risk statuses were updated. See globals.py for new values.
- [Breaking change] The file download API was updated to be easier to use:
- Chariot.download() now returns the bytes of the file. It does not save the file.
- Files.get() now returns the bytes of the file. It does not save the file.
- Files.save() saves the content of Files.get() in a file.
- Change usages of Files.get() to Files.save()
- Change usages of Chariot.download() to Files.save()
- [Breaking change] Asset statuses are changed to A, D, P, F. Scan level is now set globally for all assets in the Settings page in the Web UI.
- [New feature] Added support for listing statistics on risks, assets, jobs, and more.
- [New feature] Added support for seed approval.
- [New feature] Added support for pre-seed approval.
- [New feature] Added support for pulling detailed information on CVEs.
- [New feature] Added support for the discovery-only scan level for attributes.
- [New feature] Added support for the discovery-only scan level for seeds.
- [New feature] Added support for updating attributes.
- [New feature] Added operations for adding, updating, deleting, and retrieving seeds.
- [New feature] Added support for provide username and password using environment
variables --
PRAETORIAN_CLI_USERNAME
,PRAETORIAN_CLI_PASSWORD
.
- [New feature] Added version check. The CLI now prompts the user to upgrade if a newer version is available on PyPI.
- [Bug fix] Pagination when searching for
#seed
is fixed.
- [New feature] Add the option to specify the capabilities to run when adding scan jobs for assets.
- [Bug] Fixed an error with the
list
andsearch
commands. - [Misc] Additional status of 'P', 'PL' have been added for assets.
- [Breaking change] The
D
status for risks is expanded toDE
, DI,
DL,
DM,
DH, and
DCfor the severity levels of exposure, info, low, medium, high, and critical.
D` is no longer a valid status for risks - [Misc] Improved in-app documentation, where the
--help
text includes more example usages.
- [Bug fix] Fixed errors in functions related to principals in the Accounts class
- [Breaking change]
username
,password
,client_id
instance attributes of theKeychain
class are now accessed by functions of the same names, ie,username()
,password()
, andclient_id()
- [Breaking change]
api
instance attribute of theKeychain
class is now accessed by thebase_url()
function - [Breaking change] 'T', 'I', 'R', and 'O' are no longer valid statuses for risks