FairwindsOps/polaris 7.0.2

on GitHub

Changelog

• be45519 Add target PodTemplate which exposes the full Pod (not only the spec) (#801)
• f9e2603 Bump alpine from 3.16.0 to 3.16.1 (#810)
• 7addced Bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0 (#815)
• 76c42c4 Bump github.com/spf13/cobra from 1.4.0 to 1.5.0 (#813)
• 4103032 Bump github.com/stretchr/testify from 1.7.1 to 1.8.0 (#786)
• 65add73 Bump k8s.io/api from 0.24.1 to 0.24.3 (#808)
• af0d548 Bump k8s.io/apimachinery from 0.24.1 to 0.24.3 (#807)
• 3efa3b4 Bump k8s.io/client-go from 0.24.1 to 0.24.3 (#806)
• 7e77350 Bump sigs.k8s.io/controller-runtime from 0.12.1 to 0.12.3 (#814)
• e5b9236 FWI-2476: Add missingNetworkPolicy, automountServiceAccountToken, and linuxHardening checks (#816)
• 2063222 FWI-2509: Add sensitiveContainerEnvVar and sensitiveConfigMapContent checks (#817)
• 50d789f Fix resourceKindMap.addResource() to not assume every Kind has an APIGroup (#805)
• e3a6cb3 Fix namespace checking when validating additional schemas which are not namespaced (#822)
• a0000e1 Suppress empty results when --only-show-failed-tests is passed (#811)
• 25ab600 Update docs to reflect target: PodTemplate RE: PR #801 (#804)
• c3b57bf target: container also populates .Polaris.PodSpec|PodTemplate + a new .Polaris.Container representing the currently checked container, GetPodTemplate serializes data to work around a DeepCopy bug with type int (#812)
• ccaa384 expose Polaris.PodSpec for PodSpec targeted checks (#793)
• b90f091 fix polaris cves (#824)
• 652b65b fix: properly remove emojis in pretty format with no color (#765)

You can verify the signature of the checksums.txt file using cosign.

cosign verify-blob checksums.txt --signature=checksums.txt.sig  --key https://artifacts.fairwinds.com/cosign.pub