|
| 1 | +## v0.1.0 (2023-06-05) |
| 2 | + |
| 3 | +### Feat |
| 4 | + |
| 5 | +- **release**: generate SLSA provenance for the Docker image (#265) |
| 6 | +- add command-line flag for version (#262) |
| 7 | +- add additional repo finding via parent POMs (#217) |
| 8 | +- add repo finding via scm metadata in artefact poms (#155) |
| 9 | +- run cue validator per analysis target (#90) |
| 10 | +- add python as a supported build tool (#67) |
| 11 | +- support an existing SBOM as input (#105) |
| 12 | +- add check output to database and implement souffle policy engine (#46) |
| 13 | +- add dependency analyzer for Gradle (#57) |
| 14 | + |
| 15 | +### Fix |
| 16 | + |
| 17 | +- **release**: disable SLSA provenance for now (#277) |
| 18 | +- do not skip rootProject in Gradle dependency resolution (#252) |
| 19 | +- create the bin directory for syft (#245) |
| 20 | +- add 'packages: read' permission to release workflow (#241) |
| 21 | +- do not overwrite an existing check relationship when a check has no parent in the Registry (#238) |
| 22 | +- upgrade requests to 2.31.0 to fix CVE-2023-32681 (#236) |
| 23 | +- restore the runner if an uncaught exception happens in a check (#216) |
| 24 | +- return error when defaults.ini provided by user does not exist (#208) |
| 25 | +- fix undefined local variable in build_as_code check (#136) |
| 26 | +- resolve the full name for a repo whose remote origin is a local path (#153) |
| 27 | +- do not pull the latest when analyzing a target with local repo path (#125) |
| 28 | +- do not use download script for Syft (#164) |
| 29 | +- remove the topLevel packages permission (#160) |
| 30 | +- initialize all DependencyInfo attributes (#139) |
| 31 | +- check if build dir contains a valid build (#135) |
| 32 | +- read configuration for recursion through bom file (#130) |
| 33 | +- allow BOM component version and group be empty (#104) |
| 34 | +- do not log check_module object to avoid info leakage (#96) |
| 35 | + |
| 36 | +### Refactor |
| 37 | + |
| 38 | +- run policy engine using macaron entrypoint (#192) |
0 commit comments