sse-secure-systems/connaisseur v2.7.0

Version 2.7.0

on GitHub

Feat

• Allow configuration of connaisseur's tls certificate
• Support tags and digest simultaneously

Fix

• Allowlist cve-2022-41717
• Revert frozenlist changes
• Don't clear image tag
• Make logging of image consistent across validators
• Cosign changed error code
• Fixes docker build and trivy scan

Refactor

• Isort for package import

Ci

• Change deprecated set-output to github_output variable
• Acquire sa token
• Make coverage upload optional
• Limit github actions token scope

Test

• Add test to confirm image is logged on validation error

Docs

• Add pip update to fix commands for running tests

Update

• Update jsonschema requirement from ~=4.16.0 to ~=4.17.3
• Update pytz requirement from ~=2022.2 to ~=2022.7
• Update pytest-asyncio requirement from ~=0.19.0 to ~=0.20.3
• Update setuptools requirement from ~=65.5.0 to ~=65.6.3
• Update pylint requirement from ~=2.15.3 to ~=2.15.9
• Update pytest-subprocess requirement from ~=1.4.1 to ~=1.4.2
• Update pytest-mock requirement from ~=3.8.2 to ~=3.10.0
• Update pytest-cov requirement from ~=3.0.0 to ~=4.0.0
• Update setuptools requirement from ~=65.3.0 to ~=65.5.0
• Update mkdocs-material requirement from ~=8.5.3 to ~=8.5.8
• Update cosign to 1.13.1

What's Changed

• ci: Limit Github Actions token scope by @Starkteetje in #790
• Fix/fix issues by @phbelitz in #812
• Log image name consistently by @Starkteetje in #814
• update: update mkdocs-material requirement from ~=8.5.3 to ~=8.5.8 by @dependabot in #813
• update: update setuptools requirement from ~=65.3.0 to ~=65.5.0 by @dependabot in #799
• update: update pytest-cov requirement from ~=3.0.0 to ~=4.0.0 by @dependabot in #793
• update: update pytest-mock requirement from ~=3.8.2 to ~=3.10.0 by @dependabot in #798
• update: update pytest-subprocess requirement from ~=1.4.1 to ~=1.4.2 by @dependabot in #796
• ci: temporarily removed old k8s versions by @phbelitz in #831
• ci: Change deprecated set-output to GITHUB_OUTPUT variable and re-enable legacy k8s tests by @Starkteetje in #832
• Don't clear image tag by @richgerrard in #800
• fix: revert frozenlist changes by @phbelitz in #836
• fix: allowlist CVE-2022-41717 by @phbelitz in #839
• update: update pylint requirement from ~=2.15.3 to ~=2.15.9 by @dependabot in #842
• update: update setuptools requirement from ~=65.5.0 to ~=65.6.3 by @dependabot in #830
• update: update pytest-asyncio requirement from ~=0.19.0 to ~=0.20.3 by @dependabot in #838
• update: update pytz requirement from ~=2022.2 to ~=2022.7 by @dependabot in #841
• update: update jsonschema requirement from ~=4.16.0 to ~=4.17.3 by @dependabot in #834
• fix: handle image references with both a tag and digest present by @chgl in #763
• Feat: Allow configuration of Connaisseur TLS certificate by @Starkteetje in #840
• Develop by @phbelitz in #844

New Contributors

• @richgerrard made their first contribution in #800
• @chgl made their first contribution in #763

Full Changelog: v2.6.4...v2.7.0