⚡Release highlights and summary⚡
👉 #5724
Changelog
- f2aa9bf chore(deps): bump sigstore/cosign-installer from 4a861528be5e691840a69536975ada1d4c30349d to 1fc5bd396d372bee37d608f955b336615edf79c8 (#5696)
- 6d7e2f8 chore(deps): bump helm/chart-testing-action from 2.4.0 to 2.6.1 (#5694)
- 0ff5f96 feat: filter k8s core components vuln results (#5713)
- a54d1e9 feat(vuln): remove duplicates in Fixed Version (#5596)
- 99c04c4 feat(report): output plugin (#4863)
- 70078b9 chore(deps): bump alpine from 3.18.4 to 3.18.5 (#5700)
- 49e83a6 chore(deps): bump github.com/google/go-containerregistry from 0.16.1 to 0.17.0 (#5704)
- af32cb3 chore(deps): bump github.com/go-git/go-git/v5 from 5.8.1 to 5.10.1 (#5699)
- 1766271 chore(deps): bump actions/github-script from 6 to 7 (#5697)
- 7ee8547 chore(deps): bump easimon/maximize-build-space from 8 to 9 (#5695)
- 654147f docs: typo in modules.md (#5712)
- 2569575 feat: Add flag to configure node-collector image ref (#5710)
- c061009 chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.7.1 to 1.9.0 (#5702)
- aedbd85 chore(deps): bump github.com/alicebob/miniredis/v2 from 2.30.4 to 2.31.0 (#5698)
- e018b9c chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.3.1 to 1.4.0 (#5706)
- b5874e3 feat(misconf): Add
--misconfig-scannersoption (#5670) - 075d8f6 chore: bump Go to 1.21 (#5662)
- 16b757d feat: Packagesprops support (#5605)
- 372efc9 chore(deps): Bump up trivy misconf deps (#5656)
- edad5f6 docs: update adopters discussion template (#5632)
- ed9d340 docs: terraform tutorial links updated to point to correct loc (#5661)
- 8ff574e fix(secret): add
secand space to secret prefix foraws-secret-access-key(#5647) - ad977a4 fix(nodejs): support protocols for dependency section in yarn.lock files (#5612)
- b1dc60b fix(secret): exclude upper case before secret for
alibaba-access-key-id(#5618) - 65351d4 docs: Update Arch Linux package URL in installation.md (#5619)
- c866f1c chore: add prefix to image errors (#5601)
- ed0022b docs(vuln): fix link anchor (#5606)
- 3c81727 docs: Add Dagger integration section and cleanup Ecosystem CICD docs page (#5608)
- 2145464 fix: k8s friendly error messages kbom non cluster scans (#5594)
- 44d0b28 feat: set InstalledFiles for DEB and RPM packages (#5488)
- ae4bcf6 fix(report): use time.Time for CreatedAt (#5598)
- b6fafa0 test: retry containerd initialization (#5597)
- 1336223 feat(misconf): Expose misconf engine debug logs with
--debugoption (#5550) - 7105186 test: mock VM walker (#5589)
- d9d7f3f chore: bump node-collector v0.0.9 (#5591)
- e3c28f8 feat(misconf): Add support for
--cf-paramsfor CFT (#5507) - ac0e327 feat(flag): replace '--slow' with '--parallel' (#5572)
- 5372067 fix(report): add escaping for Sarif format (#5568)
- a389529 chore: show a deprecation notice for
--scanners config(#5587) - f4dd062 feat(report): Add CreatedAt to the JSON report. (#5542) (#5549)
- d005f5a test: mock RPM DB (#5567)
- a96ec35 feat: add aliases to '--scanners' (#5558)
- 950e431 refactor: reintroduce output writer (#5564)
- 2310f0d chore(deps): bump google.golang.org/grpc from 1.58.2 to 1.58.3 (#5543)
- 04b93e9 chore: not load plugins for auto-generating docs (#5569)
- cccaa15 chore: sort supported AWS services (#5570)
- 3891e3d fix: no schedule toleration (#5562)
- 138feb0 fix(cli): set correct
scannersfork8starget (#5561) - cb241a8 fix(sbom): add
FilesAnalyzedandPackageVerificationCodefields for SPDX (#5533) - e7f6a5c refactor(misconf): Update refactored dependencies (#5245)
- 2f5afa5 feat(secret): add built-in rule for JWT tokens (#5480)
- 91fc8da fix: trivy k8s parse ecr image with arn (#5537)
- 05df244 fix: fail k8s resource scanning (#5529)
- a1b4744 refactor(misconf): don't remove Highlighted in json format (#5531)
- 7712f8f docs(k8s): fix link in kubernetes.md (#5524)
- 043fbfc docs(k8s): fix whitespace in list syntax (#5525)