[v16] Backport Secrets scanner #44799

Merged

tigrato merged 26 commits intobranch/v16from

tigrato/sec-scan-v16

Aug 13, 2024

Commits on Jul 30, 2024

Add the device assertion protos (#43804)

codingllama
authored and
tigrato
committed
Add a client-side API to assert devices (#43890)

codingllama
authored and
tigrato
committed
Define server-side device assertion interfaces (#44036)

codingllama
authored and
tigrato
committed
[sec_scan][1] Add `teleport.access_graph.v1.SecretsScannerService` (#43462)
tigrato
committed
[sec_scan][2] expose `ssh_scan_enabled` in `AccessGraphConfig` response (#43467)
tigrato
committed
[sec_scan][3] add `PrivateKey`, `AuthorizedKey` and `Device` to Access Graph resources (#43468)
tigrato
committed
fix: fix `nextKey` values when using multiple prefixes (#43486)
tigrato
committed
[sec_scan][5] add secrets backend service (#43543)
tigrato
committed
[sec_scan][6] add device events (#43905)
tigrato
committed
[sec_scan][7] add authorizedKeys and privateKeys events support (#43906)
tigrato
committed
[sec_scan][9] add `access_graph_settings` protobuf (#44010)
tigrato
committed
[sec_scan][10] add `AccessGraphSettingsUpdate` audit event (#44011)
tigrato
committed
[sec_scan][11] add `AccessGraphSettings` backend service (#44014)
tigrato
committed
[sec_scan][12] add cache and events support for `AccessGraphSettings` (#44016)
tigrato
committed
[sec_scan][13] add `AccessGraphSettings` gRPC implementation (#44021)
tigrato
committed
[sec_scan][14] create `AccessGraphSettings` on first auth init (#44032)
tigrato
committed
[sec_scan][15] add support for edits to `AccessGraphSettings` via `tctl` (#44055)
tigrato
committed
[sec_scan][16] add methods to store/retrieve device assertion functions (#44081)
tigrato
committed
[sec_scan][17] add `AssertDevice` to `FakeDeviceService` (#44159)

tigrato
and
codingllama
committed
[sec_scan][20] add `ReportSecrets` forwarder to proxy's gRPC insecure server (#44324)
tigrato
committed
[sec_scan][19] add `tsh scan keys` implementation (#44220)
tigrato
committed
[sec_scan][22] add authorized keys reporter (#44523)
tigrato
committed
[sec_scan][24] extract AuthorizedKey's comment and type (#44643)
tigrato
committed
fix api module
tigrato
committed

Commits on Aug 8, 2024

[sec_scan][27] add support for LDAP users and macOS (#45109)
tigrato
committed

Commits on Aug 13, 2024

Merge branch 'branch/v16' into tigrato/sec-scan-v16
tigrato
committed