https://cybertoolchain.io/tools/slimtoolkit New releases and features in slimtoolkit, tracked by The Cyber Toolchain. en Fri, 02 Feb 2024 13:57:50 GMT https://github.com/slimtoolkit/slim/releases/tag/1.40.11 https://github.com/slimtoolkit/slim/releases/tag/1.40.11 Fri, 02 Feb 2024 13:57:50 GMT slimtoolkit 1.40.11 adds `--include-dir-bins` and `--include-ssh-client` flags to the `build` command and a new `images` listing command. • Introduces the `images` command to list container images Full history on Cyber Toolchain: https://cybertoolchain.io/tools/slimtoolkit https://github.com/slimtoolkit/slim/releases/tag/1.40.9 https://github.com/slimtoolkit/slim/releases/tag/1.40.9 Mon, 15 Jan 2024 21:14:28 GMT slimtoolkit 1.40.9 adds command parameter info to mondel process events • Added command parameter information to process events in `mondel`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/slimtoolkit https://github.com/slimtoolkit/slim/releases/tag/1.40.8 https://github.com/slimtoolkit/slim/releases/tag/1.40.8 Sun, 07 Jan 2024 20:30:47 GMT Slim 1.40.8 adds new `vulnerability`, `registry` and `images` commands with EPSS lookup support • Adds the `vulnerability` command for vulnerability analysis • Adds the `epss` subcommand to lookup EPSS scores for vulnerabilities • Adds the `registry server` command to host a local OCI registry • Adds the `registry push` command to push local images to a registry • Adds the `images` command to list container images Full history on Cyber Toolchain: https://cybertoolchain.io/tools/slimtoolkit https://github.com/slimtoolkit/slim/releases/tag/1.40.7 https://github.com/slimtoolkit/slim/releases/tag/1.40.7 Sun, 10 Dec 2023 18:50:40 GMT Adds `registry image-index-create` and `images` subcommands for creating multi-arch images and listing local images. • Adds `registry image-index-create` command to create multi-architecture images • Adds `images` command to list container images Full history on Cyber Toolchain: https://cybertoolchain.io/tools/slimtoolkit https://github.com/slimtoolkit/slim/releases/tag/1.40.6 https://github.com/slimtoolkit/slim/releases/tag/1.40.6 Thu, 02 Nov 2023 18:22:02 GMT Slim 1.40.6 adds sensor control, identity detection, zoneinfo inclusion, mondel logging and env-file support • Adds `--detect-identities` flag to the `xray` command to detect system identities and their properties. • Adds `--include-zoneinfo` flag to the `build` command to keep OS/libc zoneinfo data in the image. • Adds `--enable-mondel` flag to the main app for Mon Data Event Log support, plus `--mondel`/`-n` flags for sensor monitors. • Adds `--env-file` capability to the `build` and `profile` commands to load environment variables from a file. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/slimtoolkit https://github.com/slimtoolkit/slim/releases/tag/1.40.5 https://github.com/slimtoolkit/slim/releases/tag/1.40.5 Wed, 01 Nov 2023 23:28:49 GMT slimtoolkit v1.40.5 adds sensor `control` commands, `--detect-identities`, `--include-zoneinfo`, and `mondel` logging. • `build`/`profile`: Adds `--enable-mondel` main app flag and `--mondel`/`-n` sensor flags to enable optional Data Event Log for monitoring events • `xray` sensor: Adds `--detect-identities` flag (enabled by default) to detect system identities (users, groups) and their properties • `build`: Adds `--include-zoneinfo` flag (disabled by default) to keep OS/libc zoneinfo data in the output image • Sensor standalone mode: Adds `control` commands, starting with `stop-target-app`, to control sensor execution Full history on Cyber Toolchain: https://cybertoolchain.io/tools/slimtoolkit https://github.com/slimtoolkit/slim/releases/tag/1.40.4 https://github.com/slimtoolkit/slim/releases/tag/1.40.4 Sat, 26 Aug 2023 02:04:53 GMT Adds interactive debug command with terminal sessions and log viewing capabilities • Enables an interactive `debug` command terminal that connects directly to the target image (enabled by default) • Adds basic session management for the `debug` command, including logs viewing via existing flags Full history on Cyber Toolchain: https://cybertoolchain.io/tools/slimtoolkit https://github.com/slimtoolkit/slim/releases/tag/1.40.3 https://github.com/slimtoolkit/slim/releases/tag/1.40.3 Thu, 13 Jul 2023 07:57:30 GMT Adds Kubernetes debug support, new appbom/merge commands, and Docker Desktop socket detection in v1.40.3 • Adds Kubernetes runtime support for the `debug` command • Adds `appbom` command to the main app and `--appbom` flag in the sensor • Adds `merge` command to merge two container images (optimized to merge two minified images) • Adds more `debug` command flags • Enables detection of the Docker Desktop unix socket Full history on Cyber Toolchain: https://cybertoolchain.io/tools/slimtoolkit https://github.com/slimtoolkit/slim/releases/tag/1.40.2 https://github.com/slimtoolkit/slim/releases/tag/1.40.2 Fri, 09 Jun 2023 02:20:17 GMT Adds --obfuscate-metadata flag to slim build to hide vulnerability scanner metadata • Adds `--obfuscate-metadata` to the `slim build` command to prevent vulnerability scanners from discovering metadata needed to identify vulnerabilities Full history on Cyber Toolchain: https://cybertoolchain.io/tools/slimtoolkit https://github.com/slimtoolkit/slim/releases/tag/1.40.1 https://github.com/slimtoolkit/slim/releases/tag/1.40.1 Thu, 06 Apr 2023 01:04:44 GMT Adds `--include-workdir` flag to `build` command • `build` gains a new `--include-workdir` flag Full history on Cyber Toolchain: https://cybertoolchain.io/tools/slimtoolkit https://github.com/slimtoolkit/slim/releases/tag/1.40.0 https://github.com/slimtoolkit/slim/releases/tag/1.40.0 Thu, 26 Jan 2023 06:47:28 GMT slimtoolkit 1.40.0 adds xray base image metadata and multi-engine build support via --image-build-engine • `--image-build-engine` parameter added to specify the container image build engine (e.g., buildkit, docker) for slimming operations. • `--image-build-arch` parameter added to specify the target architecture when using multiple image build engines. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/slimtoolkit https://github.com/slimtoolkit/slim/releases/tag/1.38.0 https://github.com/slimtoolkit/slim/releases/tag/1.38.0 Sat, 10 Sep 2022 05:34:30 GMT Slim v1.38.0 adds experimental `debug` CLI command and JSON console output format • `debug`, an experimental subcommand for interactive troubleshooting. • JSON console output format for structured logging. Breaking changes: • `http-probe-exec` is renamed to `host-exec`. Update scripts using the old name. • `http-probe-exec-file` is renamed to `host-exec-file`. Update scripts using the old name. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/slimtoolkit https://github.com/slimtoolkit/slim/releases/tag/1.37.5 https://github.com/slimtoolkit/slim/releases/tag/1.37.5 Mon, 21 Mar 2022 19:32:22 GMT slimtoolkit 1.37.5 adds experimental --include-node-package, --include-app-next-*, --include-app-nuxt-* flags and --rta-source-ptrace • Adds `--include-node-package` flag to selectively include Node.js packages in the slimmed image. • Adds `--include-app-next-*` flags to support Next.js (React.js) application inclusion patterns. • Adds `--include-app-nuxt-*` flags to support Nuxt.js (Vue.js) application inclusion patterns. • Adds `--rta-source-ptrace` flag to disable the ptrace data source during runtime analysis. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/slimtoolkit https://github.com/slimtoolkit/slim/releases/tag/1.37.4 https://github.com/slimtoolkit/slim/releases/tag/1.37.4 Mon, 28 Feb 2022 06:27:53 GMT slimtoolkit 1.37.4 adds container probing, registry command, and --include-new flag • `--container-probe-compose-svc` flag and `continue-after: probe` mode enable testing containers via compose services • `registry` command with `pull` subcommand for managing container images • `--target-compose-svc-image` flag to override the image used when probing a compose service • `--http-probe-start-wait` flag to add a delay before HTTP probes execute • `--compose-svc-start-wait` flag to add a delay before starting compose services • FastCGI protocol support in HTTP probes • `--include-new` build flag to retain files created by the target during dynamic analysis • Global parameters can now be stored in `slim.config.json` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/slimtoolkit https://github.com/slimtoolkit/slim/releases/tag/1.37.3 https://github.com/slimtoolkit/slim/releases/tag/1.37.3 Sun, 12 Dec 2021 03:15:25 GMT Adds `install` command and docker cli plugin install option • Adds `install` command to allow installation as a Docker CLI plugin (preview) Full history on Cyber Toolchain: https://cybertoolchain.io/tools/slimtoolkit https://github.com/slimtoolkit/slim/releases/tag/1.37.2 https://github.com/slimtoolkit/slim/releases/tag/1.37.2 Mon, 08 Nov 2021 06:39:52 GMT New flags for private registry auth (`--registry-account`, etc.), compose env/project support, and `delete-generated-fat-image` cleanup. • Adds `--registry-account`, `--registry-secret`, and `--docker-config-path` flags to pull images from private registries • Adds `dep-include-target-compose-svc-deps`, `compose-env-nohost`, `compose-env-file`, `compose-workdir`, and `compose-project-name` flags for compose • Adds variable substitution support in compose • Enables detecting duplicates by default in xray • Adds `delete-generated-fat-image` flag to remove non-optimized images when building from source/Dockerfile Full history on Cyber Toolchain: https://cybertoolchain.io/tools/slimtoolkit https://github.com/slimtoolkit/slim/blob/master/CHANGELOG.md https://github.com/slimtoolkit/slim/blob/master/CHANGELOG.md Sun, 07 Nov 2021 00:00:00 GMT slimtoolkit 1.37.1 adds private registry pull support and compose variable substitution. • Adds `--registry-account`, `--registry-secret`, and `--docker-config-path` flags to enable pulling images from private registries • Adds `delete-generated-fat-image` flag to cleanup non-optimized images when building from source or Dockerfile Full history on Cyber Toolchain: https://cybertoolchain.io/tools/slimtoolkit