v0.15.7

Changelog

• 37af6ba Adding existing starboard license in ubi image (#1238)
• 73f3be9 chore(deps): bump kube-bench from v0.6.6 to v0.6.9 (#1240)
• c5dc4c9 fix: fix goreleaser to include LICENSE (#1242)

v0.15.6

Changelog

v0.15.4

Changelog

• 7d53816 feat(trivy): configure --db-repository to get advisory database from OCI registry (#1064)
• 07818de chore(ci): fix release snapshot workflow (#1124)
• 6abccd0 chore(ci): grant contents permission in docs publishing workflow (#1121)
• 09a1a9b chore(deps): bump actions/setup-go from 2 to 3 (#1130)
• fe0c18f chore(deps): bump actions/setup-python from 3.1.0 to 3.1.2 (#1129)
• 9519929 chore(deps): bump codecov/codecov-action from 2 to 3 (#1128)
• d3072b5 chore(deps): bump github.com/emirpasic/gods from 1.12.0 to 1.15.0 (#1132)
• 7562f68 chore: build operator images based on UBI 8 Minimal (#1127)
• 254d1c0 chore: fix Go code formatting (#1137)
• 92124cd fix: GoReleaser manifest (#1135)

Docker Images

• docker pull docker.io/aquasec/starboard:0.15.4
• docker pull docker.io/aquasec/starboard-scanner-aqua:0.15.4
• docker pull docker.io/aquasec/starboard-operator:0.15.4
• docker pull docker.io/aquasec/starboard-operator:0.15.4-ubi8

v0.15.3

Changes

• 8995fb7 fix: critial is a typo (#1117)
• cb5f3b3 fix: limit the num of failure entries in compliance detail report (#1108)
• 4ab64f9 chore(ci): cancel any in-flight jobs for the same PR branch (#1116)
• f3408a9 chore(ci): set permissions granted to the GITHUB_TOKEN (#1119)
• c2d206a chore(deps): bump actions/setup-python from 3.0.0 to 3.1.0 (#1109)
• 38a0b16 chore(deps): bump github.com/open-policy-agent/opa from 0.38.1 to 0.39.0 (#1111)
• c314e34 chore(deps): bump sigs.k8s.io/controller-runtime from 0.11.1 to 0.11.2 (#1110)

Docker Images

• docker pull docker.io/aquasec/starboard:0.15.3
• docker pull docker.io/aquasec/starboard-scanner-aqua:0.15.3
• docker pull docker.io/aquasec/starboard-operator:0.15.3

v0.15.2

Changes

• cb5f3b3 fix: limit the num of failure entries in compliance detail report (#1108)
• c2d206a chore(deps): bump actions/setup-python from 3.0.0 to 3.1.0 (#1109)
• 38a0b16 chore(deps): bump github.com/open-policy-agent/opa from 0.38.1 to 0.39.0 (#1111)
• c314e34 chore(deps): bump sigs.k8s.io/controller-runtime from 0.11.1 to 0.11.2 (#1110)

Docker Images

• docker pull docker.io/aquasec/starboard:0.15.2
• docker pull docker.io/aquasec/starboard-scanner-aqua:0.15.2
• docker pull docker.io/aquasec/starboard-operator:0.15.2

v0.15.1

Changes

• 1c26090 chore: add log context when nsa update fails (#1104)
• 45acabb fix: krew manifest (#1091)
• ac710b6 fix: revert CronJobs to batch/v1beta1 (#1105)

Docker Images

• docker pull docker.io/aquasec/starboard:0.15.1
• docker pull docker.io/aquasec/starboard-scanner-aqua:0.15.1
• docker pull docker.io/aquasec/starboard-operator:0.15.1

v0.15.0

Noteworthy Changes

• New OPA Rego policy-based configuration audit scanner enabled by default
  • The scanner is shipped with Built-in Policies library
  • It also allows Writing Custom Configuration Audit Policies
• Support for NSA, CISA Kubernetes Hardening Guidance
  • New ClusterComplianceReport CRD to define custom compliance reports generated on cron schedule
• Support for ARM architecture

Docker Images

• docker pull docker.io/aquasec/starboard:0.15.0
• docker pull docker.io/aquasec/starboard-scanner-aqua:0.15.0
• docker pull docker.io/aquasec/starboard-operator:0.15.0

New Contributors

• @chen-keinan made their first contribution in #958
• @skuethe made their first contribution in #960
• @jw-s made their first contribution in #956
• @eranshapira made their first contribution in #989
• @dirien made their first contribution in #1003
• @AnaisUrlichs made their first contribution in #1082

Full Changelog: v0.14.1...v0.15.0

v0.15.0-rc7

Docker images

• docker pull docker.io/aquasec/starboard:0.15.0-rc7
• docker pull docker.io/aquasec/starboard-scanner-aqua:0.15.0-rc7
• docker pull docker.io/aquasec/starboard-operator:0.15.0-rc7

v0.15.0-rc6

Docker images

• docker pull docker.io/aquasec/starboard:0.15.0-rc6
• docker pull docker.io/aquasec/starboard-scanner-aqua:0.15.0-rc6
• docker pull docker.io/aquasec/starboard-operator:0.15.0-rc6

v0.14.1

Changelog

• 329c812 fix: handle error when operator cannot start (#930)
• 934e0bd feat: use trivy filesystem scanner (#872)
• e6717c6 chore(deps): bump Go from 1.16 to 1.17 (#928)
• ac8b74c chore(deps): bump Trivy from v0.20.0 to v0.22.0 (#931)
• c18a53e chore(deps): bump controller-runtime from v0.10.0 to v0.11.0 (#927)
• 8cf6936 chore(deps): bump github.com/onsi/gomega from 1.17.0 to 1.18.0 (#920)

Docker images

• docker pull docker.io/aquasec/starboard:0.14.1
• docker pull public.ecr.aws/aquasecurity/starboard:0.14.1
• docker pull docker.io/aquasec/starboard-scanner-aqua:0.14.1
• docker pull public.ecr.aws/aquasecurity/starboard-scanner-aqua:0.14.1
• docker pull docker.io/aquasec/starboard-operator:0.14.1
• docker pull public.ecr.aws/aquasecurity/starboard-operator:0.14.1