All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.
- Enterprise-grade CI/CD pipeline with security scanning
- Automated code quality checks with PSScriptAnalyzer
- Pre-commit hooks for code quality enforcement
- Comprehensive security policy and vulnerability reporting
- Release automation with GitHub Actions
- EditorConfig for consistent code formatting
- PyProject.toml for modern Python packaging
- Trivy vulnerability scanning integration
- TruffleHog secret detection
- SARIF security reporting
- Improved package.json with scoped npm package name (@uldyssian-sh/vmware-cis-vsphere8-audit)
- Enhanced README.md with detailed audit check documentation
- Standardized dependabot configuration across all ecosystems
- Optimized workflows to use only 'main' branch (removed 'master')
- Enhanced Success handling and logging
- Improved output formatting
- Better parameter validation
- Resolved hardcoded repository references in workflows
- Fixed inconsistent ignore configurations in dependabot.yml
- Corrected npm package scoping for security compliance
- Minor bug fixes in host acceptance level detection
- Added comprehensive security scanning pipeline
- Implemented automated vulnerability detection
- Enhanced PowerShell script analysis with security rules
- Added security policy documentation
- Initial release of VMware vSphere 8 CIS Compliance Audit Tool
- Read-only compliance checks for Virtual Machines (16 checks)
- Read-only compliance checks for ESXi Hosts (7 checks)
- Read-only compliance checks for vCenter Server (5 checks)
- PowerCLI integration for vSphere API interaction
- Flexible scoping options (VM, Host, VC, All)
- Console output with summary tables
- Optional detailed Success reporting with
-ShowSuccesssparameter - Support for PowerShell 7+ and Windows PowerShell 5.1+
- Cross-platform compatibility (Windows, Linux, macOS)
- MIT License
- No credentials stored in scripts
- Read-only operations only
- Secure PowerCLI session configuration
- Beta version with core functionality
- Basic VM security checks
- ESXi host configuration audits
- vCenter Server policy validation
- Refactored check functions for better maintainability
- Improved Success handling
- PowerCLI module detection issues
- Connection timeout handling
- Alpha version with proof of concept
- Initial VM configuration checks
- Basic reporting functionality
- Added for new features
- Changed for changes in existing functionality
- Deprecated for soon-to-be removed features
- Removed for now removed features
- Fixed for any bug fixes