v0.4.0

[mitchelbaker-cisa]

Major Changes

• Refactor ScubaGoggles to leverage Google’s new Policy API
  • Policy API Integration by @rlxdev in Policy API Integration #499
  • GWS Policy API Updates for Common Controls and Gmail by @rlxdev in GWS Policy API Updates for Common Controls and Gmail  #538
  • Common Controls 12.1: correct Policy API implementation by @rlxdev in Common Controls 12.1: correct Policy API implementation #539
  • Policy API: Use "General Availability" (GA) Release URL by @rlxdev in Policy API: Use "General Availability" (GA) Release URL #535

Learn more about the Cloud Identity Policy API: https://cloud.google.com/identity/docs/concepts/overview-policies

Baseline Updates

• Update DLP Policy to Common Controls by @mdueltgen in Updating DLP Policy to Common Controls #469
• Remove Extra Instructions for Gmail 14.2 by @mdueltgen in Removing Extra Instructions for Gmail 14.2 #488
• Move Common Controls 11.2 to Policy Group 10 by @mdueltgen in Moving Common Controls 11.2 to Policy Group 10 #487
• Change Common Controls 3.1 from SHALL to SHOULD by @mdueltgen in Changing Common Controls 3.1 from SHALL to SHOULD #490
• Remove Groups 7.1 by @mdueltgen in Removing Groups 7.1 #489
• Revise implementation steps for GWS.COMMONCONTROLS.6.1 by @adhilto in Revise implementation steps for GWS.COMMONCONTROLS.6.1 #492
• Add new post-SSO verification control by @adhilto in Add new post-SSO verification control #493
• Update New Disclaimer Language for SCBs by @mdueltgen in Updating New Disclaimer Language for SCBs #496
• Update Rule Instructions for Common Controls 13.1 by @mdueltgen in Updating Rule Instructions for Common Controls 13.1 #497
• Add baselines placeholder in the top-level folder by @adhilto in Add baselines placeholder in the top-level folder #532
• Add in Changes from Initial review of Driftwood Baselines by @mdueltgen in Added in Changes from Initial review of Driftwood Baselines #554
• Update Version Number from 0.3.0 to 0.4.0 (Driftwood) by @rlxdev in Update Version Number from 0.3.0 to 0.4.0 (Driftwood) #567

Other Enhancements

• Implement data processing policy for common controls by @mitchelbaker-cisa in Implement data processing policy for common controls #485
• Implement new password policy by @adhilto in Implement new password policy #478
• Implement Rego check for Common Controls early access app control by @mitchelbaker-cisa in Implement Rego check for Common Controls early access app control  #479
• Add placeholder code for latest baseline changes by @adhilto in Add placeholder code for latest baseline changes #484
• Update sample report for v0.4 by @adhilto in Update sample report for v0.4 #592

Bugs

• Add Workaround for Google's WORKSPACE_ALL_ADMIN_GROUP by @rlxdev in Work Around Google's WORKSPACE_ALL_ADMIN_GROUP #578

Dependency Updates

• Minimum supported Python version is now v3.9x.
• Pandas has been removed as a dependency.
• New OAUTH scope required: https://www.googleapis.com/auth/cloud-identity.policies.readonly

Full Changelog: v0.3.0...v0.4.0

---

This discussion was created from the release v0.4.0.

[kenyonbradley]

Can you help with this please?

ubagoggles>scubagoggles gws
Traceback (most recent call last):
File "", line 198, in _run_module_as_main
File "", line 88, in run_code
File "C:\Users\administrator.xxxx\AppData\Local\Programs\Python\Python312\Scripts\scubagoggles.exe_main.py", line 7, in
File "C:\Users\administrator.xxxx\AppData\Local\Programs\Python\Python312\Lib\site-packages\scubagoggles\main.py", line 477, in dive
args.dispatch(args)
File "C:\Users\administrator.xxxx\AppData\Local\Programs\Python\Python312\Lib\site-packages\scubagoggles\main.py", line 53, in gws_dispatch
Orchestrator(args).start_automation()
File "C:\Users\administrator.xxxx\AppData\Local\Programs\Python\Python312\Lib\site-packages\scubagoggles\orchestrator.py", line 452, in start_automation
self._run_gws_providers()
File "C:\Users\administrator.xxxx\AppData\Local\Programs\Python\Python312\Lib\site-packages\scubagoggles\orchestrator.py", line 101, in _run_gws_providers
provider_dict = provider.call_gws_providers(products, args.quiet)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "C:\Users\administrator.xxxx\AppData\Local\Programs\Python\Python312\Lib\site-packages\scubagoggles\provider.py", line 603, in call_gws_providers
policies = policy_api.get_policies()
^^^^^^^^^^^^^^^^^^^^^^^^^
File "C:\Users\administrator.xxxx\AppData\Local\Programs\Python\Python312\Lib\site-packages\scubagoggles\policy_api.py", line 409, in get_policies
self._reduce(policies)
File "C:\Users\administrator.xxxx\AppData\Local\Programs\Python\Python312\Lib\site-packages\scubagoggles\policy_api.py", line 611, in _reduce
orgunit_id = policy['policyQuery']['orgUnit']
~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^
KeyError: 'orgUnit'

[nuke101]

Glad to see it's not just me, I added a another discussion here #599