This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+7 more
Affected surfaces
Summary
AI summaryMinor fixes and improvements.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Add Azure technique: Retrieve App Service Publishing Credentials Add Azure technique: Retrieve App Service Publishing Credentials Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
| Feature | Low |
Add controllable logger via pkg/stratus/log Add controllable logger via pkg/stratus/log Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
| Feature | Low |
Add custom-logger example Add custom-logger example Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
| Feature | Low |
Add map-threat-intel-coverage skill Add map-threat-intel-coverage skill Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
| Dependency | Low |
Bump actions/checkout from 6.0.2 to 7.0.0 Bump actions/checkout from 6.0.2 to 7.0.0 Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Dependency | Low |
Bump actions/setup-go from 6.4.0 to 6.5.0 Bump actions/setup-go from 6.4.0 to 6.5.0 Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Dependency | Low |
Bump actions/upload-artifact from 7.0.0 to 7.0.1 Bump actions/upload-artifact from 7.0.0 to 7.0.1 Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Dependency | Low |
Bump alpine from 3.23.3 to 3.23.4 Bump alpine from 3.23.3 to 3.23.4 Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Dependency | Low |
Brew formula update for stratus-red-team version v2.33.0 Brew formula update for stratus-red-team version v2.33.0 Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Dependency | Low |
Bump docker/build-push-action from 7.0.0 to 7.1.0 Bump docker/build-push-action from 7.0.0 to 7.1.0 Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Dependency | Low |
Bump docker/login-action from 4.0.0 to 4.1.0 Bump docker/login-action from 4.0.0 to 4.1.0 Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Dependency | Low |
Bump github/codeql-action from 4.35.1 to 4.35.2 Bump github/codeql-action from 4.35.1 to 4.35.2 Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Dependency | Low |
Bump github/codeql-action/upload-sarif from 4.35.2 to 4.36.2 Bump github/codeql-action/upload-sarif from 4.35.2 to 4.36.2 Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Dependency | Low |
Bump hashicorp/setup-terraform from 4.0.0 to 4.0.1 Bump hashicorp/setup-terraform from 4.0.0 to 4.0.1 Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
| Bugfix | Low |
Fix documentation typos Fix documentation typos Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
Full changelog
Changelog
- fb59bac237a62f94656b720dbc448c02615281b7 ADMS: minor: golang.org/x/crypto, golang.org/x/net, golang.org/x/sys [examples/credential-injection]
- d6a2b28b1b3aefcc1816a8cb0fb116473e50956b ADMS: minor: golang.org/x/crypto, golang.org/x/net, golang.org/x/sys [examples/custom]
- 71826be1d7131125ec6fa526401062298351178d ADMS: minor: golang.org/x/crypto, golang.org/x/net, golang.org/x/sys [examples/custom_expand_cli]
- 4ac105e62b778b7e3627145adbff830704be93ce ADMS: minor: golang.org/x/crypto, golang.org/x/net, golang.org/x/sys [examples/runner-options]
- b571fef10313181fd3c491a97394e5c29c4422e9 ADMS: minor: golang.org/x/crypto, golang.org/x/net, golang.org/x/sys [examples/s3-remote-state]
- 86b4b8581340382e166b5f6efafa4e51d1a15cc6 ADMS: minor: golang.org/x/crypto, golang.org/x/net, golang.org/x/sys [v2]
- f8472ccda816dbe8b11d3f7b820bc41e0f215cf5 ADMS: vuln minor upgrades — 6 packages (minor: 6) [examples/detonate-and-dump-cloudtrail-logs]
- 440cd9b396d70f0dbce99d1585ab57665a41dd2f ADMS: vuln minor upgrades — 8 packages (minor: 8) [examples/basic]
- 5173017f204556cd64f5409e5503637df4518429 Add Azure technique: Retrieve App Service Publishing Credentials (#875)
- 7ab5db4717a283dd8e875d4d30250d73da7f2542 Add controllable logger via pkg/stratus/log
- 4930abc97a74666179094ba7a80ec3ae762f1783 Add custom-logger example
- 3cbc65612fd8cd055aed6ee9b54396d72de96502 Add map-threat-intel-coverage skill (#872)
- e14f2c428bbab3258d894acaf8b37c0176ff65a4 Brew formula update for stratus-red-team version v2.33.0
- 1a497aa4d9492d299404012bf5c496a525f8171f Bump DataDog/dd-octo-sts-action from 1.0.3 to 1.0.4
- d3898152e026614c4e5debf9ef2d7926634b5fd8 Bump actions/checkout from 6.0.2 to 7.0.0
- 4a72f366206ce4b8b7f7f732ead8738141ec6c2c Bump actions/setup-go from 6.4.0 to 6.5.0
- 0d7a0e4e18c6c1d8d3b2bf23e2319c7cf9decfa3 Bump actions/upload-artifact from 7.0.0 to 7.0.1
- 651b0267b099b53b9c91969bead12b5eaeea30bc Bump alpine from 3.23.3 to 3.23.4
- e080f86b7043cb4bc68628e41f892c7fed834e9e Bump alpine from 3.23.4 to 3.24.1
- 58e1b3d04c51cf6deb8308bf60eeff1293d2a7d3 Bump docker/build-push-action from 7.0.0 to 7.1.0
- da946860b1af53934779797dce3f6767883dbf92 Bump docker/build-push-action from 7.1.0 to 7.2.0
- 335318d22a040007e71f714a1e4cfbe2bb9532c7 Bump docker/login-action from 4.0.0 to 4.1.0
- 85a18ebe6dab5507c8934da881c061f39dbffb37 Bump github/codeql-action from 4.35.1 to 4.35.2
- 3b0e99b175620ffb0cfdee62d4f604f61baf1311 Bump github/codeql-action/upload-sarif from 4.35.2 to 4.36.2
- 1925a15214fa49267b7b57ec7b47ee68e1480d02 Bump hashicorp/setup-terraform from 4.0.0 to 4.0.1
- 5c5375d9b8c81cd81d0fe183fe52ecf18107c023 Fix documentation typos (#896)
- a5497fd2b549550b7e907bd6f152a1be8afe7f50 Merge pull request #846 from DataDog/dependabot/github_actions/DataDog/dd-octo-sts-action-1.0.4
- 208ead00f6560b345f065774068805856a816b94 Merge pull request #847 from DataDog/dependabot/github_actions/docker/build-push-action-7.1.0
- c27da677f56b1a7e4410cd811b622949b68fb395 Merge pull request #848 from DataDog/dependabot/github_actions/github/codeql-action-4.35.2
- 8e01ab9287465fff0466fc82fca28bad61e43128 Merge pull request #849 from DataDog/dependabot/github_actions/actions/upload-artifact-7.0.1
- 4fe649d76676a71eb4a43357c37d883bfd3cdc45 Merge pull request #850 from DataDog/dependabot/github_actions/docker/login-action-4.1.0
- 0d33fb7eb8b6d20e2da1f41bc8fb7a68d291df36 Merge pull request #873 from DataDog/dependabot/docker/alpine-3.23.4
- 9e3eeaa057b098712104fe5ee2c47d7a73dc6a91 Merge pull request #876 from DataDog/homebrew-update-2.33.0
- 25f9ddb47e8391ef0e7c1a9c7e1695d17e818957 Merge pull request #877 from DataDog/engraver-auto-version-upgrade/minorpatch/go/credential-injection/6-1781535197
- 5acd4361aedeb354cae02709e600cf660ba3332b Merge pull request #878 from DataDog/engraver-auto-version-upgrade/minorpatch/go/runner-options/3-1781535197
- 1a52faf0a1ae13f0eb65bb3f616e0c1d4fd444ae Merge pull request #879 from DataDog/engraver-auto-version-upgrade/minorpatch/go/custom_expand_cli/4-1781535197
- cee939eb2f744924985dba38db6f68a953ad11a3 Merge pull request #880 from DataDog/engraver-auto-version-upgrade/minorpatch/go/s3-remote-state/5-1781535197
- 4e15e03187b8f5969e045ace93330b18c4639057 Merge pull request #881 from DataDog/engraver-auto-version-upgrade/minorpatch/go/custom/2-1781535197
- 068482dce623e2772c7e40093c8f77b3c945ee8a Merge pull request #882 from DataDog/engraver-auto-version-upgrade/minorpatch/go/v2/7-1781535197
- d8db43fc5d766ceef0bf472cef878c08660553d0 Merge pull request #883 from DataDog/engraver-auto-version-upgrade/minorpatch/go/basic/0-1781535197
- c0e7fbf0cb5e74d244fad7c2485b403f6bc12e5d Merge pull request #884 from DataDog/engraver-auto-version-upgrade/minorpatch/go/detonate-and-dump-cloudtrail-logs/1-1781535197
- 60d260ea4be224ad1fbfc423ee370f1be100ae98 Merge pull request #887 from DataDog/minosity/controllable-logger
- 003477ac86646c95b282eb768c00b23e0e3a5e2e Merge pull request #890 from DataDog/dependabot/docker/alpine-3.24.1
- 7d7f987ba37a1e80e5f17b47730f7c38c79774dd Merge pull request #891 from DataDog/dependabot/github_actions/docker/build-push-action-7.2.0
- 5c1326ac0a8af8fb3db8734567368b8c74173eae Merge pull request #892 from DataDog/dependabot/github_actions/actions/checkout-7.0.0
- 5c973817cdc48bf76ae2dd82e3c30bc3a8ccb460 Merge pull request #893 from DataDog/dependabot/github_actions/github/codeql-action/upload-sarif-4.36.2
- c0e00ade36a0fc9a99e9f5466712d1e20a19745c Merge pull request #894 from DataDog/dependabot/github_actions/hashicorp/setup-terraform-4.0.1
- 95c98bd716c5728ed99e20e284838973103150bc Merge pull request #895 from DataDog/dependabot/github_actions/actions/setup-go-6.5.0
- 9bd24cb6c94a332f73085f590bdedf8139efac23 Reduce LLM comments verbosity
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Stratus Red Team | DataDog
cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud
Related context
Related tools
Beta — feedback welcome: [email protected]