⚡Release highlights and summary⚡
👉 #5377
Changelog
- cbbd1ce feat(k8s): add support for vulnerability detection (#5268)
- 24a0d92 fix(python): override BOM in
requirements.txtfiles (#5375) - 0c3e2f0 docs: add kbom documentation (#5363)
- 6c12f04 test: use maximize build space for VM tests (#5362)
- c413422 chore(deps): bump golang.org/x/net from 0.15.0 to 0.17.0 (#5365)
- 20ab703 fix(report): add escaping quotes in misconfig Title for asff template (#5351)
- 91841f5 ci: add workflow to check Go versions of dependencies (#5340)
- 57ba05c chore(deps): Upgrade defsec to v0.93.1 (#5348)
- fef3ed4 chore(deps): bump alpine from 3.18.3 to 3.18.4 (#5300)
- ced54ac fix: Report error when os.CreateTemp fails (to be consistent with other uses) (#5342)
- 2798df9 fix: add config files to FS for post-analyzers (#5333)
- af485b3 fix: fix MIME warnings after updating to Go 1.20 (#5336)
- 008babf build: fix a compile error with Go 1.21 (#5339)
- 00d9c46 feat: added
Metadatainto the k8s resource's scan report (#5322) - 03b6787 ci: check only PR's in
actions/stale(#5337) - e6d5889 chore: update adopters template (#5330)
- 74dbd8a ci: do not trigger tests on the push event (#5313)
- 393bfdc fix(sbom): use PURL or Group and Name in case of Java (#5154)
- 76eb8a5 docs: add buildkite repository to ecosystem page (#5316)
- 6c74ee1 chore(deps): bump docker/setup-qemu-action from 2 to 3 (#5290)
- 6119878 chore(deps): bump docker/setup-buildx-action from 2 to 3 (#5292)
- a346587 chore(deps): bump actions/cache from 3.3.1 to 3.3.2 (#5293)
- 7e613cc chore(deps): bump github.com/google/uuid from 1.3.0 to 1.3.1 (#5286)
- f05bc4b chore(deps): bump github.com/hashicorp/go-getter from 1.7.1 to 1.7.2 (#5289)
- 3be5e6b chore: enable go-critic (#5302)
- f6cd21c chore(deps): bump actions/checkout from 3.6.0 to 4.1.0 (#5288)
- f7b9751 chore(deps): bump github.com/aws/aws-sdk-go from 1.45.3 to 1.45.19 (#5287)
- 18d1687 close java-db client (#5273)
- eb60e9f chore(deps): bump docker/login-action from 2 to 3 (#5291)
- 5a92055 chore(deps): bump github.com/aws/aws-sdk-go-v2/service/sts (#5294)
- 46afe65 chore(deps): bump github.com/sigstore/rekor from 1.2.1 to 1.3.0 (#5304)
- 0bf2a11 chore(deps): bump github.com/opencontainers/image-spec (#5295)
- 23b5fec fix(report): removes git::http from uri in sarif (#5244)
- 4f1d576 Improve the meaning of sentence (#5301)
- 6ab2bdf chore(deps): bump github.com/owenrumney/go-sarif/v2 from 2.2.0 to 2.2.2 (#5297)
- 4217cff chore(deps): bump golang.org/x/term from 0.11.0 to 0.12.0 (#5296)
- 1840584 add app nil check (#5274)
- c5ae9f2 typo: in secret.md (#5281)
- 562723f docs: add info about
githubformat (#5265) - 3dd5b1e feat(dotnet): add license support for NuGet (#5217)
- 5c18475 docs: correctly export variables (#5260)
- 0c08dde chore: Add line numbers for lint output (#5247)
- 0ccbb4f chore(cli): disable java-db flags in server mode (#5263)
- 908a491 feat(db): allow passing registry options (#5226)
- 5b4652d chore(deps): Bump up defsec to v0.93.0 (#5253)
- faf8d49 refactor(purl): use TypeApk from purl (#5232)
- 559c0f3 chore: enable more linters (#5228)
- 2baad46 ci: bump GoReleaser from 1.16.2 to 1.20.0 (#5236)
- df2bff9 Fix typo on ide.md (#5239)
- 44656f2 refactor: use defined types (#5225)
- 37af529 fix(purl): skip local Go packages (#5190)
- eea3320 docs: update info about license scanning in Yarn projects (#5207)
- 2e66620 ci: auto apply labels (#5200)
- 49680dc fix link (#5203)