Changelog
- af89249 refactor(k8s): custom reports (#3076)
- f4e970f fix(misconf): Bump in-toto-golang with correct CycloneDX predicate (#3068)
- 8ae4627 feat(image): add support for passing architecture and OS (#3012)
- 0501e70 test: disable containerd integration tests for non-amd64 arch (#3073)
- a377c8d feat(server): Add support for client/server mode to rootfs command (#3021)
- 02a73f0 feat(vuln): support non-packaged binaries (#3019)
- 18581f3 feat: compliance reports (#2951)
- 63b8e4d fix(flag): disable flag parsing for each plugin command (#3074)
- cbedd71 feat(nodejs): add support dependency location for yarn.lock files (#3016)
- b22e37e chore: Switch github.com/liamg dependencies to github.com/aquasecurity (#3069)
- 9b0e979 feat: add k8s components (#2589)
- 5e25182 fix(secret): update the regex for secrets scanning (#2964)
- 9947e51 chore(deps): bump github.com/samber/lo from 1.27.1 to 1.28.2 (#2979)
- d2a15a7 fix: bump trivy-kubernetes (#3064)
- f2efc9c docs: fix missing 'image' subcommand (#3051)
- 34653c7 chore: Patch golang x/text vulnerability (#3046)
- e252ea8 chore: add licensed project logo (#3058)
- 439d216 feat(ubuntu): set Ubuntu 22.10 EOL (#3054)
- 9f5113a refactor(analyzer): use strings.TrimSuffix instead of strings.HasSuffix (#3028)
- c1e24d5 feat(report): Use understandable value for shortDescription in SARIF reports (#3009)
- 212af07 docs(misconf): fix typo (#3043)
- 68f374a feat: add support for scanning azure ARM (#3011)
- d35c668 feat(report): add location.message to SARIF output (#3002) (#3003)
- 2150ffc chore(deps): bump github.com/aws/aws-sdk-go from 1.44.95 to 1.44.109 (#2980)
- ca434f7 feat(nodejs): add dependency line numbers for npm lock files (#2932)
- a8ff5f0 test(fs): add
--skip-files
,--skip-dirs
(#2984) - 561b2e7 docs: add Woodpecker CI integrations example (#2823)
- 4a3583d chore(deps): bump github.com/sigstore/rekor from 0.12.0 to 0.12.2 (#2981)
- 4be9eeb chore(deps): bump github.com/liamg/memoryfs from 1.4.2 to 1.4.3 (#2976)
- a260d35 chore(deps): bump github.com/spf13/viper from 1.12.0 to 1.13.0 (#2975)
- 558189f chore(deps): bump github.com/caarlos0/env/v6 from 6.10.0 to 6.10.1 (#2982)
- c2eb6ee fix(sbom): ref generation if serialNumber is empty when input is cyclonedx file (#3000)
- 68f7952 fix(java): don't stop parsing jar file when wrong inner jar is found (#2989)
- be78da6 fix(sbom): use nuget purl type for dotnet-core (#2990)
- 92b5a19 perf: retrieve rekor entries in bulk (#2987)
- babd7e7 feat(aws): Custom rego policies for AWS scanning (#2994)
- 8ad9b8a docs: jq cli formatting (#2881)
- a78684c docs(repo): troubleshooting $TMPDIR customization (#2985)
- 7309ed0 chore(deps): bump actions/cache from 3.0.8 to 3.0.9 (#2969)
- 9515a5c chore(deps): bump actions/stale from 5 to 6 (#2970)
- 955aff6 chore(deps): bump sigstore/cosign-installer from 2.5.1 to 2.7.0 (#2971)
- db56d23 chore(deps): bump helm/chart-testing-action from 2.3.0 to 2.3.1 (#2972)
- 05a7232 chore(deps): bump helm/kind-action from 1.3.0 to 1.4.0 (#2973)
- 2c39d47 chore: run
go fmt
(#2897) - 16a7dc1 chore(go): updates wazero to 1.0.0-pre.2 (#2955)
- ce4ba7c fix(aws): Less function for slice sorting always returns false #2967
- 4ffe746 fix(java): fix unmarshal pom exclusions (#2936)