CHANGELOG.md

Version 0.27.0 (2023-07-09)

Features and improvements

• [29c135ea] - feat: use official dependency-track client
• [06c17862] - feat: update go-tools

Build and testing

• [7fe6c956] - build: update actions-toolkit

Dependency updates

• [e491299c] - deps: update module golang.org/x/net to v0.12.0
• [aa244d35] - deps: update module github.com/dependencytrack/client-go to v0.11.0
• [1a107386] - deps: update docker docker tag to v24.0.3
• [deeb6c85] - deps: update github.com/ckotzbauer/libk8soci digest to c279efd (#436)
• [54ed91e1] - deps: update github.com/ckotzbauer/libstandard digest to 20f87d3 (#435)
• [8e34a60c] - deps: update golang.org/x/exp digest to 97b1e66 (#432)
• [11077120] - deps: update sigstore/cosign-installer digest to 6e04d22 (#433)
• [93dba90d] - deps: update module github.com/anchore/syft to v0.84.1 (#434)
• [26dc6dd2] - deps: update sigstore/cosign-installer digest to d130283 (#430)
• [b99e9a52] - deps: update module github.com/anchore/syft to v0.84.0
• [912ba564] - deps: update github.com/anchore/stereoscope digest to 8c7173e
• [7516ec79] - deps: update module golang.org/x/net to v0.11.0 (#426)
• [e61c4b21] - deps: update kubernetes versions to v0.27.3 (#423)
• [4f3e03a3] - deps: update module github.com/anchore/syft to v0.83.1 (#424)
• [b744764f] - deps: update module github.com/sylabs/sif/v2 to v2.11.5 (#425)
• [8c7362ee] - deps: update sigstore/cosign-installer digest to ef0e969
• [2c6f994b] - deps: update alpine:3.18 docker digest to 82d1e9d
• [0b32b3be] - deps: update module github.com/anchore/syft to v0.83.0 (#419)
• [0d0d86f9] - deps: update sigstore/cosign-installer digest to 871cdc7
• [b20a967b] - deps: update github.com/anchore/stereoscope digest to 5b5049b
• [be23baf8] - deps: update actions/checkout digest to 96f5310
• [2da28e81] - deps: update module github.com/sirupsen/logrus to v1.9.3 (#413)
• [bbf1da5e] - deps: update github.com/ckotzbauer/libk8soci digest to 127a0e6
• [7e73d0e6] - deps: update github.com/ckotzbauer/libstandard digest to 211d40c
• [6d1ee021] - deps: update sigstore/cosign-installer digest to 1a22e17
• [2c2ca955] - deps: update golang.org/x/exp digest to 2e198f4
• [e4f2e028] - deps: update docker docker tag to v24.0.2
• [00f9a9ad] - deps: update module github.com/anchore/syft to v0.82.0
• [850d6d67] - deps: update module github.com/stretchr/testify to v1.8.3
• [738233a1] - deps: update docker docker tag to v24
• [bc5036c5] - deps: update module github.com/sylabs/sif/v2 to v2.11.4
• [24321261] - deps: update module github.com/sirupsen/logrus to v1.9.2
• [62e53444] - deps: update kubernetes versions to v0.27.2
• [999534e7] - deps: update module github.com/google/go-containerregistry to v0.15.2
• [f0758565] - deps: update codenotary/vcn docker tag to v1.0.5
• [c931506b] - deps: update sigstore/cosign-installer digest to dd6b2e2
• [11dbad2a] - deps: update golang.org/x/exp digest to 03e9162
• [c1699b5e] - deps: update github.com/ckotzbauer/libstandard digest to a8c0d82
• [f51f7f3d] - deps: update github.com/ckotzbauer/libk8soci digest to d9352f8

Common changes

• [c3ce9665] - dtrack: expose mTLS configuration (#427)

Version 0.26.1 (2023-05-13)

Bug fixes

• [ee896258] - fix: update syft

Security

• [816a9ec6] - security: update github.com/docker/distribution

Dependency updates

• [a8815eeb] - deps: update module github.com/cloudflare/circl to v1.3.3 [security]
• [e5f2c5b2] - deps: update sigstore/cosign-installer digest to 84448ba
• [aca57c53] - deps: update docker docker tag to v23.0.6
• [0c91696b] - deps: update alpine docker tag to v3.18
• [545e2529] - deps: update module golang.org/x/net to v0.10.0
• [b0a87eff] - deps: update golang.org/x/exp digest to dd950f8
• [a13f11eb] - deps: update module github.com/anchore/syft to v0.80.0
• [97aaa801] - deps: update module github.com/google/go-containerregistry to v0.15.1
• [b73f8159] - deps: update github.com/ckotzbauer/libstandard digest to 8487cf7
• [e4bf35e5] - deps: update module github.com/sylabs/sif/v2 to v2.11.3
• [49fb6fdc] - deps: update github.com/ckotzbauer/libk8soci digest to 9b1b0c4

Version 0.26.0 (2023-04-29)

Features and improvements

• [4043592f] - feat: updated syft to 0.79.0
• [b463812e] - feat: update go version

Cleanup and refactoring

• [3bb83182] - cleanup: tidy go.sum

Dependency updates

• [d1c1cb0f] - deps: update docker docker tag to v23.0.5
• [5d184a28] - deps: update sigstore/cosign-installer digest to 204a51a
• [efd84188] - deps: update golang.org/x/exp digest to 47ecfdc
• [0340c117] - deps: update docker docker tag to v23.0.4
• [e617c54a] - deps: update sigstore/cosign-installer digest to 66dd3f3
• [7e159b7e] - deps: update golang.org/x/exp digest to 133eef4
• [446ef26c] - deps: update actions/checkout digest to f095bcc
• [cd85539f] - deps: update kubernetes versions to v0.27.1
• [8c25eef9] - deps: update github.com/anchore/stereoscope digest to 8602f1a
• [670b43a4] - deps: update actions/checkout digest to 47fbe2d
• [aa013309] - deps: update module github.com/docker/docker to v23.0.3+incompatible [security]
• [ffe336e7] - deps: update github.com/anchore/stereoscope digest to e95d60a
• [a0fb2b40] - deps: update sigstore/cosign-installer digest to 9e9de22
• [c88983e5] - deps: update docker docker tag to v23.0.3
• [7bb5b767] - deps: update module github.com/spf13/cobra to v1.7.0
• [4a4b7743] - deps: update module golang.org/x/net to v0.9.0
• [f5a5e28f] - deps: update github.com/ckotzbauer/libk8soci digest to cb79f1d
• [e029e71f] - deps: update github.com/ckotzbauer/libk8soci digest to e237187
• [a654b196] - deps: update github.com/ckotzbauer/libstandard digest to b1d9d97
• [35a55601] - deps: update sigstore/cosign-installer digest to 8348525
• [05502adb] - deps: update docker docker tag to v23.0.2
• [41e126ab] - deps: update alpine:3.17 docker digest to 124c7d2
• [f6f108ef] - deps: update module github.com/sylabs/sif/v2 to v2.11.1
• [c633af89] - deps: update sigstore/cosign-installer digest to 00bf136
• [5eee5444] - deps: update golang.org/x/exp digest to 10a5072
• [34f71463] - deps: update github.com/anchore/stereoscope digest to d7551b7
• [9ef835fc] - deps: update actions/checkout digest to 8f4b7f8
• [593a314f] - deps: update kubernetes versions to v0.26.3
• [8c953676] - deps: update module github.com/anchore/syft to v0.75.0
• [c812c421] - deps: update module google.golang.org/protobuf to v1.29.1 [security]
• [f01df595] - deps: update actions/checkout digest to 24cb908
• [74dec4cc] - deps: update module github.com/google/go-containerregistry to v0.14.0
• [ffd2194f] - deps: update ckotzbauer/actions-toolkit action to v0.34.0
• [906ce129] - deps: update sigstore/cosign-installer digest to ca922a5
• [ca7ae1a6] - deps: update golang.org/x/exp digest to 642cace
• [e2230883] - deps: update github.com/anchore/stereoscope digest to 7928713
• [4243cca1] - deps: update alpine:3.17 docker digest to ff6bdca
• [1e0fc782] - deps: update module github.com/sylabs/sif/v2 to v2.11.0
• [20438d64] - deps: update module github.com/emicklei/go-restful/v3 to v3.10.2
• [3b80204f] - deps: update module github.com/anchore/syft to v0.74.1
• [a5d99e63] - deps: update sigstore/cosign-installer digest to bd2d118
• [bd0d0045] - deps: update golang.org/x/exp digest to 522b1b5
• [0a416c02] - deps: update actions/checkout digest to 27135e3

Version 0.25.0 (2023-03-05)

Build and testing

• [6724b80c] - build: add cosign-flaf
• [d066802d] - build: update tools
• [4c2d5da5] - build: update to go@1.20.1

Documentation

• [6fb60dee] - doc: update release-table

Security

• [733a2109] - security: small code-improvements

Dependency updates

• [88280ea7] - deps: update ckotzbauer/actions-toolkit action to v0.33.3
• [2a1cbaf1] - deps: update module golang.org/x/net to v0.8.0
• [94a1190e] - deps: update ckotzbauer/actions-toolkit action to v0.33.1
• [2d334767] - deps: update golang.org/x/exp digest to 9ff063c
• [8eeb384c] - deps: update github.com/ckotzbauer/libk8soci digest to 5a495f2
• [9f6eb68d] - deps: update golang.org/x/exp digest to 44a13b0
• [f3f3608b] - deps: update sigstore/cosign-installer digest to c3667d9
• [9b39bb73] - deps: update github.com/ckotzbauer/libstandard digest to 4fc1398
• [e8787e35] - deps: update module github.com/anchore/syft to v0.74.0
• [95765747] - deps: update kubernetes versions to v0.26.2
• [79380c27] - deps: update module github.com/stretchr/testify to v1.8.2
• [f4c68612] - deps: update codenotary/vcn docker tag to v1.0.4
• [d4c8f5f0] - deps: update ckotzbauer/actions-toolkit action to v0.32.0
• [d11f4808] - deps: update module github.com/anchore/syft to v0.73.0
• [db246ee7] - deps: update module github.com/sylabs/sif/v2 to v2.10.0
• [b4f80b52] - deps: update golang.org/x/exp digest to c95f2b4
• [de6a4de4] - deps: update github.com/anchore/stereoscope digest to fab1c96
• [4e58e945] - deps: update github.com/anchore/stereoscope digest to 5d3c15e
• [2c6a232e] - deps: update module github.com/sylabs/sif/v2 to v2.9.2
• [a01aca07] - deps: update golang.org/x/exp digest to 5e25df0
• [e11d78bc] - deps: update module github.com/anchore/syft to v0.72.0
• [a8b6054f] - deps: update module golang.org/x/net to v0.7.0 [security]
• [2e2cdf3d] - deps: update golang.org/x/exp digest to a684f29
• [30661edf] - deps: update golang.org/x/exp digest to 062eb4c
• [48c78fae] - deps: update module golang.org/x/net to v0.6.0
• [4ef51a89] - deps: update module github.com/anchore/syft to v0.71.0
• [3ca4d83e] - deps: update alpine:3.17 docker digest to 69665d0
• [3a8d2995] - deps: update module github.com/sylabs/sif/v2 to v2.9.1
• [6b917949] - deps: update docker docker tag to v23.0.1
• [4383aa9c] - deps: update docker docker tag to v23
• [86b27c6e] - deps: update github.com/anchore/stereoscope digest to c49244e
• [e613951f] - deps: update module github.com/anchore/syft to v0.70.0
• [ee924034] - deps: update github.com/ckotzbauer/libstandard digest to 451a1ba
• [a4b2342e] - deps: update golang.org/x/exp digest to 98cc5a0
• [122c4a71] - deps: update github.com/ckotzbauer/libk8soci digest to 665152e
• [2790a867] - deps: update golang.org/x/exp digest to a960b37
• [b7848f1a] - deps: update golang.org/x/exp digest to 31bee51
• [e2d784e4] - deps: update module github.com/anchore/syft to v0.68.1
• [e1397cdf] - deps: update module github.com/google/go-containerregistry to v0.13.0

Version 0.24.0 (2023-01-22)

Features and improvements

• [13f17792] - feat: update actions-toolkit

Bug fixes

• [fdb76e58] - fix: apply proxy-replacement for removal images too

Cleanup and refactoring

• [5b736a8a] - cleanup: removed git-fallback-clone
• [2f462347] - cleanup: use ConvertSecrets from libk8soci

Build and testing

• [06095cb6] - build: use older goreleaser version
• [a4e9d0d4] - build: update to go@1.19.5
• [f2ae41c2] - build: refactor oci-test
• [7820629d] - build: remove dependency
• [d6b70ca6] - build: use ttl.sh registry for oci-test
• [5ce731fb] - build: expose variables
• [f37f1688] - build: use variable to test-block
• [8ae18343] - build: prepare secrets
• [81ab4718] - build: use new workflow
• [e8d92caa] - build: use new workflow
• [1809a099] - build: replace default-labels-workflow

Documentation

• [0c0bdebf] - doc: update version-table

Security

• [6815e7b5] - security: update to golang.org/x/net@v0.4.0

Dependency updates

• [b26a429e] - deps: update kubernetes versions to v0.26.1
• [77b2ef34] - deps: update module github.com/anchore/syft to v0.68.0
• [b652e583] - deps: update docker docker tag to v20.10.23
• [cf4cc56c] - deps: update golang.org/x/exp digest to a68e582
• [86f99d80] - deps: update module github.com/anchore/syft to v0.66.1
• [e45216e4] - deps: update sigstore/cosign-installer digest to 4079ad3
• [07d4c546] - deps: update golang.org/x/exp digest to f9f960f
• [84ac1f81] - deps: update alpine:3.17 docker digest to f271e74
• [0ce3b646] - deps: update module golang.org/x/net to v0.5.0
• [e7fa1b45] - deps: update module github.com/anchore/syft to v0.65.0
• [d3c4abf6] - deps: update sigstore/cosign-installer digest to 55fd288
• [35d3dc55] - deps: update golang.org/x/exp digest to 8879d01
• [5adca85d] - deps: update github.com/ckotzbauer/libk8soci digest to 4a4637d
• [5c09e912] - deps: update github.com/ckotzbauer/libstandard digest to 7bb3724
• [5cc42e9f] - deps: update sigstore/cosign-installer digest to 651c379
• [0e704b72] - deps: update golang.org/x/exp digest to 738e83a
• [85514865] - deps: update actions/checkout digest to ac59398
• [6cf5855e] - deps: update ckotzbauer/actions-toolkit action to v0.30.3
• [4b987a58] - deps: update module github.com/anchore/syft to v0.64.0
• [29c43dbe] - deps: update github.com/ckotzbauer/libstandard digest to df4733d
• [46ae2392] - deps: update sigstore/cosign-installer digest to df6c89e
• [5fe87142] - deps: update ckotzbauer/actions-toolkit action to v0.30.2
• [5f2645a6] - deps: updated libk8soci
• [51bb253e] - deps: update ckotzbauer/actions-toolkit action to v0.29.0
• [d3e0cc56] - deps: update syft
• [a14e3a2b] - deps: update module github.com/anchore/syft to v0.63.0
• [18c47d0a] - deps: update goreleaser/goreleaser-action action to v4
• [d9b9b06f] - deps: update docker docker tag to v20.10.22
• [e0e574da] - deps: update golang.org/x/exp digest to 0915cd7
• [7d57ddce] - deps: update github.com/ckotzbauer/libk8soci digest to 860d8e8
• [483d413e] - deps: update actions/checkout digest to 3ba5ee6
• [d3ecd2f3] - deps: update github.com/ckotzbauer/libstandard digest to 8434bdf
• [4007d8e7] - deps: update golang.org/x/exp digest to ad323de
• [0345ae1f] - deps: update github.com/ckotzbauer/libk8soci digest to 7873cfe
• [fbcb7eb2] - deps: update github.com/ckotzbauer/libstandard digest to 53bee11
• [3736b22d] - deps: update github.com/ckotzbauer/libk8soci digest to 73d18aa
• [df60eef4] - deps: update ckotzbauer/actions-toolkit action to v0.27.0
• [8de0eb09] - deps: update github.com/ckotzbauer/libstandard digest to b84c49f
• [644b3dea] - deps: update ckotzbauer/actions-toolkit action to v0.26.0
• [4be71316] - deps: update github.com/ckotzbauer/libk8soci digest to b9bdf79

Common changes

• [20fd5d8a] - chore: Update golang.org/x/exp digest to 3c43f8b

Version 0.23.0 (2022-12-10)

Features and improvements

• [437dfce6] - feat: add initial registry-proxy implementation

Bug fixes

• [9ab17429] - fix: kubernetes update
• [68148a32] - fix: clarify usge
• [54932bad] - fix: update to syft@0.62.1 to fix spdx ordering

Cleanup and refactoring

• [c107f84e] - cleanup: deprecate git-fallback-clone

Build and testing

• [1b160795] - test: check error
• [4c74f0d3] - test: deactivate spdxjson tests

Documentation

• [070735d4] - doc: removed link
• [f928128d] - doc: added version

Dependency updates

• [725ba445] - deps: update to go@1.19.4
• [40c47636] - deps: update kubernetes versions to v0.26.0
• [6dd7f358] - deps: update github.com/ckotzbauer/libk8soci digest to 883addd
• [73d8c099] - deps: update sigstore/cosign-installer digest to b6757d8
• [ea75ea98] - deps: update golang.org/x/exp digest to 732eee0
• [3a4109cb] - deps: update github.com/anchore/stereoscope digest to c5ff155
• [4ed3af56] - deps: update module github.com/pjbgf/sha1cd to v0.2.3
• [fb7b3b20] - deps: update golang.org/x/exp digest to 6dcec33
• [2d7d94e9] - deps: rollback to syft@0.62.1
• [47092aad] - deps: updated libk8soci with git multi_ack support
• [a57737b7] - deps: update module github.com/anchore/syft to v0.62.3
• [93dec8df] - deps: update github.com/ckotzbauer/libk8soci digest to 8818bf9
• [a4f1e9aa] - deps: update github.com/anchore/stereoscope digest to 3b80d98
• [12fbd852] - deps: update module github.com/nscuro/dtrack-client to v0.7.0
• [16d6fc87] - deps: update github.com/ckotzbauer/libstandard digest to f92ba67
• [49816283] - deps: update module github.com/sylabs/sif/v2 to v2.9.0
• [fc4f7597] - deps: update golang.org/x/exp digest to 6ab00d0
• [81245dd9] - deps: update github.com/ckotzbauer/libstandard digest to e04d84d
• [0d2bced8] - deps: update module github.com/emicklei/go-restful/v3 to v3.10.1

Version 0.22.0 (2022-11-19)

Features and improvements

• [1127ac46] - feat: use syft image-pull mechanism

Bug fixes

• [9632e3bd] - fix: cleanup go.sum

Cleanup and refactoring

• [fe30c3af] - cleanup: remove files

Build and testing

• [ab95912d] - test: update fixtures

Documentation

• [646c8349] - doc: updated docs

Dependency updates

• [a7594000] - deps: updated syft to 0.62.0
• [9b92743f] - deps: update syft
• [c5a57827] - deps: update module github.com/anchore/syft to v0.59.0
• [f5dd2379] - deps: update github.com/ckotzbauer/libk8soci digest to 823db52
• [2f5c4aa8] - deps: update alpine docker tag to v3.17
• [34e1eb8d] - deps: update golang.org/x/exp digest to 8509921
• [9347c322] - deps: update actions/checkout digest to bf08527
• [00a27d9a] - deps: update golang.org/x/exp digest to 129d8d6 (#227)
• [34683d14] - deps: update module github.com/emicklei/go-restful/v3 to v3.10.0
• [2d825be1] - deps: update codenotary/vcn docker tag to v1.0.3
• [89e8bd8e] - deps: update module github.com/google/go-containerregistry to v0.12.1
• [2e1cf608] - deps: update kubernetes versions to v0.25.4 (#229)
• [811f414d] - deps: update actions/checkout digest to 5c3ccc2 (#226)
• [c897eb6a] - deps: update ckotzbauer/actions-toolkit action to v0.25.0

Version 0.21.0 (2022-11-07)

Build and testing

• [6c66d0f1] - build: use new slsa-provenance

Dependency updates

• [eb986d6a] - deps: update golang.org/x/exp digest to f965990 (#225)
• [8e33d7cb] - deps: update github.com/ckotzbauer/libstandard digest to 3b97f5c
• [01fce52e] - deps: update ckotzbauer/actions-toolkit action to v0.24.0
• [b640b472] - deps: update golang.org/x/exp digest to c99f073
• [4203ce00] - deps: update github.com/ckotzbauer/libk8soci digest to 09b45d7
• [403a2fcc] - deps: update to go@1.19.3
• [ebd1232d] - deps: update module github.com/spf13/cobra to v1.6.1 (#218)
• [8cda7697] - deps: update module github.com/sylabs/sif/v2 to v2.8.3 (#220)
• [7173d503] - deps: update golang.org/x/exp digest to 83b7d23 (#215)
• [94e4dddc] - deps: update sigstore/cosign-installer digest to 7bca8b4 (#216)
• [3c4202b8] - deps: update docker docker tag to v20.10.21 (#217)
• [3c4c5d6c] - deps: update module github.com/stretchr/testify to v1.8.1 (#219)
• [624ae08f] - deps: update golang.org/x/exp digest to a1e5550 (#214)
• [20283401] - deps: update ckotzbauer/actions-toolkit action to v0.23.0 (#213)
• [becc5f9e] - deps: update module github.com/sylabs/sif/v2 to v2.8.2 (#210)
• [06038df5] - deps: update actions/checkout digest to 1f9a0c2 (#206)
• [7ebd8147] - deps: update golang.org/x/exp digest to 2094472 (#207)
• [8ccb629c] - deps: update sigstore/cosign-installer digest to 9becc61 (#208)
• [8a94f997] - deps: update docker docker tag to v20.10.20 (#209)
• [f4cc5286] - deps: update module github.com/google/go-containerregistry to v0.12.0 (#212)
• [a78be4d5] - deps: update kubernetes versions to v0.25.3
• [a216ba71] - deps: update module github.com/spf13/cobra to v1.6.0
• [bd5e47c8] - deps: update docker docker tag to v20.10.19
• [047e06ce] - deps: update sigstore/cosign-installer digest to c6d50c2
• [11116919] - deps: update golang.org/x/exp digest to 4de253d

Version 0.20.0 (2022-10-08)

Bug fixes

• [a5452b97] - fix: map pod labels (#194)
• [44146ade] - fix: fix fatal statements
• [2601fea3] - fix: fail on target-init error

Security

• [d5737bd4] - security: update github.com/sylabs/sif/v2

Dependency updates

• [f8e5d78f] - deps: update to go@1.19.2
• [d0ad1c04] - deps: update codenotary/vcn docker tag to v1.0.2
• [cca44dd2] - deps: update sigstore/cosign-installer digest to 7cc35d7
• [664e36f7] - deps: update golang.org/x/exp digest to 316c755
• [b8ebd888] - deps: update actions/checkout digest to 8230315
• [5e28b829] - deps: update golang.org/x/exp digest to 540bb73
• [ce4eea51] - deps: update ckotzbauer/actions-toolkit action to v0.21.3 (#191)

Version 0.19.0 (2022-10-01)

Features and improvements

• [796b1aaf] - feat: add pod-labels to dtrack close #172

Bug fixes

• [862539af] - fix: properly maintain imageMap for dtrack
• [70abfcc6] - fix: Properly build dtrack imageProjectMap (#184)

Documentation

• [a7399c95] - doc: update docs

Dependency updates

• [d1f4ab7a] - deps: update libk8soci
• [8c2915c7] - deps: update to golang 1.19.1
• [db053212] - deps: update github.com/ckotzbauer/libk8soci digest to 9d8a11f (#189)
• [ecdb0e41] - deps: update github.com/ckotzbauer/libstandard digest to ae09c4e (#190)
• [29651c98] - deps: update module github.com/anchore/syft to v0.58.0
• [0ed1aba5] - deps: update golang.org/x/exp digest to ec3f013
• [4df77d04] - deps: update actions/checkout digest to e6d535c

Version 0.18.0 (2022-09-24)

Features and improvements

• [ec17ccbe] - feat: update Codenotary VCN to 1.0.1

Cleanup and refactoring

• [68a2a661] - cleanup: use git-implementation from libk8soci
• [849134b3] - cleanup: go-mod-tidy

Documentation

• [1d2d361f] - doc: updated version-table
• [8e65d89b] - doc: update VCN docs
• [e1d242cc] - doc: add git-init note

Dependency updates

• [d868e046] - deps: update module github.com/anchore/syft to v0.57.0 (#170)
• [c8d5f103] - deps: update kubernetes versions to v0.25.2
• [fa3ad710] - deps: update sigstore/cosign-installer digest to ced07f2
• [e24bb779] - deps: update golang.org/x/exp digest to 439092d
• [fb238932] - deps: update github.com/ckotzbauer/libk8soci digest to cfc4b76

Version 0.17.0 (2022-09-17)

Features and improvements

• [a2dfe037] - feat: add git-fallback-mode to workaround multi_ack issue (#171)
• [eb12f659] - feat: reworked git-auth; added github-app support close #141

Cleanup and refactoring

• [68b989f1] - cleanup: file removals

Documentation

• [0f4635d8] - doc: updated version-table

Dependency updates

• [99542d3c] - deps: update kubernetes versions to v0.25.1
• [a0589380] - deps: update docker docker tag to v20.10.18
• [230e8349] - deps: update golang.org/x/exp digest to b168a2c
• [4b9256fd] - deps: update ckotzbauer/actions-toolkit action to v0.20.0
• [5eca1779] - deps: update codenotary/cas docker tag to v1.0.3
• [ee3d2108] - deps: update sigstore/cosign-installer digest to f3c664d
• [040d0df1] - deps: update golang.org/x/exp digest to 5c715a9
• [f7ad99ee] - deps: update github.com/ckotzbauer/libk8soci digest to 1b257a4

Version 0.16.0 (2022-09-09)

Features and improvements

• [17139c89] - feat: add configmap target (#163)
• [11ba433b] - feat: add pod namespace as tag in dtrack project (#157)

Bug fixes

• [02656337] - fix: add watch-permission for pods
• [85b5a74a] - fix: Grant `watch` permissionson on `Pods` to ServiceAccount (#162)

Cleanup and refactoring

• [a1d33324] - cleanup: add target-context

Build and testing

• [56e8ab4c] - build: fix condition

Documentation

• [b97e6e48] - doc: update version-docs

Dependency updates

• [5dddd500] - deps: update golang.org/x/exp digest to 334a238
• [519652df] - deps: update kubernetes versions to v0.25.0
• [90064cc8] - deps: update sigstore/cosign-installer digest to 14d4334
• [14865951] - deps: update golang.org/x/exp digest to bd9bcdd

Version 0.15.1 (2022-08-20)

Bug fixes

• [a0346aa3] - fix: handle git-errors correctly
• [addc0ada] - fix: initialize targets async

Documentation

• [36817ad7] - doc: updated changelog [skip ci]

Version 0.15.0 (2022-08-20)

BREAKING CHANGES

Due to the possibility of real-time processing with cache-informers, the default value of the cron flag was changed to an empty string. Without explicitly defining the flag, cron scheduling is now disabled by default. Due to the major refactoring of the code base, this update must be done carefully.

Features and improvements

• [8d4d7293] - feat: Add Pod-Informer (#151)
• [d214f871] - feat: use go 1.19

Build and testing

• [490e9c83] - build: update golangci-lint
• [6bba0740] - build: update golangci-lint

Documentation

• [4324c429] - doc: updated docs for new release

Security

• [7503e23b] - security: update to go-restful@3.8.0
• [0c7478c8] - security: update go-restful

Dependency updates

• [e6cef8a3] - deps: update module github.com/anchore/syft to v0.54.0 (#155)
• [8214b089] - deps: update kubernetes versions to v0.24.4
• [ad381acb] - deps: update sigstore/cosign-installer digest to 716fc02
• [84a9e5c7] - deps: update ckotzbauer/actions-toolkit action to v0.19.0
• [c5d9856e] - deps: update alpine:3.16 docker digest to bc41182
• [b2cec7ef] - deps: update module github.com/emicklei/go-restful/v3 to v3.9.0 (#148)
• [79a8d53f] - deps: update module github.com/anchore/syft to v0.53.4 (#147)
• [6435dc47] - deps: update github.com/ckotzbauer/libstandard digest to e3c9900
• [d5cfd847] - deps: update sigstore/cosign-installer digest to 5a02ebd
• [40477c68] - deps: update github.com/ckotzbauer/libk8soci digest to 0c88acc
• [4f10535b] - deps: update module github.com/anchore/syft to v0.53.0
• [e023dd75] - deps: update sigstore/cosign-installer digest to 09a077b

Version 0.14.0 (2022-07-24)

Bug fixes

• [2a423903] - fix: don't hang forever

Cleanup and refactoring

• [b0175b96] - cleanup: integrated libstandard

Build and testing

• [1e0fd179] - build: update actions-toolkit

Documentation

• [805460e7] - doc: update version-table
• [04bcf02e] - doc: update version-matrix [skip ci]

Dependency updates

• [fd9f1c50] - deps: update to go 1.18.4
• [294aa413] - deps: update module github.com/google/go-containerregistry to v0.11.0
• [8eb828ec] - deps: update module github.com/anchore/syft to v0.52.0
• [84e8614f] - deps: update alpine digest to 7580ece
• [aceb331b] - deps: update module github.com/anchore/syft to v0.51.0
• [e0623c7d] - deps: update kubernetes versions to v0.24.3
• [eac0c2a5] - deps: update module github.com/anchore/syft to v0.50.0
• [c665f870] - deps: update sigstore/cosign-installer digest to 48866aa
• [af5df9c8] - deps: update github.com/ckotzbauer/libk8soci digest to 83b65b4

Version 0.13.0 (2022-06-28)

Bug fixes

• [c5ace22b] - fix: update libk8soci

Cleanup and refactoring

• [3764b742] - cleanup: moved some k8s logics to libk8soci
• [e87fbf11] - cleanup: moved registry package to libk8soci
• [1be48395] - cleanup: fix test path
• [6bbc756c] - cleanup: move targets to own packages

Build and testing

• [fecc9ced] - build: add linting (#124)
• [b30b9170] - build: fix fork condition
• [951230b5] - build: update to golang 1.18.3
• [811824a7] - build: tolerate suffixes
• [8240e512] - build: update toolkit to 0.16.0
• [d6d2dbe0] - build: added dependencies
• [88471bde] - build: fix command
• [78bf604b] - test: fix conditional execution
• [a592ef59] - test: only execute on non-forks
• [64b22fe2] - test: merge tests
• [0b0e45a4] - test: fix test path

Security

• [d22c9d2f] - security: updated containerd to 1.6.6

Dependency updates

• [b21910d4] - deps: update ckotzbauer/actions-toolkit action to v0.17.0
• [88dc0e7f] - deps: update module github.com/google/go-containerregistry to v0.10.0
• [bab83b3b] - deps: update module github.com/spf13/cobra to v1.5.0
• [44272a8d] - deps: update module github.com/anchore/syft to v0.49.0
• [23cc1405] - deps: update module github.com/stretchr/testify to v1.7.5
• [49c569a6] - deps: update sigstore/cosign-installer digest to 441a29e
• [6d614e99] - deps: update module github.com/nscuro/dtrack-client to v0.6.0 (#123)
• [17bd6ce8] - deps: update github.com/ckotzbauer/libk8soci digest to 5d23eb2
• [5f26087a] - deps: update module github.com/anchore/syft to v0.48.1 (#121)
• [eafde448] - deps: update dependency codenotary/vcn to v0.9.20 (#119)
• [fe955100] - deps: update github.com/ckotzbauer/libk8soci digest to 769e57e
• [b3eb7a61] - deps: update kubernetes versions to v0.24.2 (#120)
• [0ddf2619] - deps: update module github.com/anchore/syft to v0.47.0 (#117)
• [5b53a5a7] - deps: update module github.com/stretchr/testify to v1.7.2 (#115)
• [b47a870e] - deps: update sigstore/cosign-installer digest to 7e0881f (#112)
• [2683c671] - deps: update dependency docker to v20.10.17 (#113)
• [c45fb8ed] - deps: update module github.com/docker/cli to v20.10.17 (#114)
• [55178600] - deps: update ckotzbauer/actions-toolkit action to v0.15.0 (#116)
• [3433998a] - deps: update dependency codenotary/vcn to v0.9.19

Version 0.12.0 (2022-05-29)

Features and improvements

• [7b08d4c2] - feat: add oci-target

Build and testing

• [510fe7e5] - build: add syft and cosign
• [996854b0] - build: fix password
• [0ff08f18] - build: fix branch
• [eda259d1] - test: add docker-login
• [4a530812] - test: add vscode debug-profile
• [1597b4e0] - test: split coverage profiles

Documentation

• [5601c365] - doc: add oci-docs [skip ci]

Security

• [6f8361f8] - security: enforce yaml.v3

Dependency updates

• [1286ab35] - deps: update module github.com/spf13/viper to v1.12.0
• [8a4a4903] - deps: update dependency alpine to v3.16
• [5a4212ce] - deps: update module gopkg.in/yaml.v3 to v3.0.1
• [b34c4ef1] - deps: update module github.com/anchore/syft to v0.46.3
• [3c6e690b] - deps: update kubernetes versions to v0.24.1
• [98438361] - deps: update sigstore/cosign-installer digest to 3d3d32a
• [7cbbc382] - deps: fix syft-update
• [19047624] - deps: update module github.com/anchore/syft to v0.46.1
• [788abb15] - deps: update goreleaser/goreleaser-action action to v3
• [aad51e7a] - deps: update module github.com/google/go-containerregistry to v0.9.0

Common changes

• [ad7dc282] - chore: Multiple pull-secrets and optional fallback-secret (#98)
• [1694a80f] - chore: force build

Version 0.11.0 (2022-05-14)

Cleanup and refactoring

• [c9e3825f] - cleanup: decouple packages from config-handling

Build and testing

• [0750c686] - build: update to go@1.18.2
• [9e2765e0] - build: downgrade goreleaser
• [d0766034] - build: combine test-workflows
• [1097894d] - build: fix binary-path
• [ceee1941] - build: remove test-args
• [77f060de] - build: update snyk-action
• [522483e7] - test: update syft-fixtures
• [39d60e49] - test: add configfile test
• [88f36a72] - test: add more syft-tests
• [c6202709] - test: add codecov coverage
• [240360bd] - test: added git-target tests
• [49e30be0] - test: fix type
• [2ee94dfb] - test: refactor unit-tests

Documentation

• [7709adcb] - doc: add version [skip ci]

Dependency updates

• [a792350e] - deps: update module github.com/anchore/syft to v0.46.0
• [517fbea1] - deps: update module github.com/docker/cli to v20.10.16
• [13c8fe2c] - deps: update dependency docker to v20.10.16
• [0346001d] - deps: update ckotzbauer/actions-toolkit action to v0.14.1
• [c01abc04] - deps: update docker/setup-qemu-action action to v2
• [d233191e] - deps: update docker/build-push-action action to v3
• [a2b260c7] - deps: update docker/setup-buildx-action action to v2
• [b9f806c9] - deps: update module github.com/docker/cli to v20.10.15
• [7038d4a1] - deps: update dependency docker to v20.10.15
• [4138705b] - deps: update kubernetes versions to v0.24.0
• [05eccba8] - deps: update ckotzbauer/actions-toolkit action to v0.14.0
• [4b5e4d5c] - deps: update module github.com/anchore/syft to v0.45.1
• [7d54aa79] - deps: update dependency codenotary/vcn to v0.9.16
• [2532f525] - deps: updated syft
• [f334f912] - deps: update module github.com/anchore/syft to v0.45.0
• [f960688c] - deps: update ckotzbauer/actions-toolkit action to v0.13.0
• [65a1fbd6] - deps: update module github.com/onsi/ginkgo/v2 to v2.1.4
• [50605ad9] - deps: update sigstore/cosign-installer digest to 536b37e

Common changes

• [5ed32b82] - chore: go mod tidy
• [e6193061] - chore: [typo] fix typo in startup messages
• [809abe22] - chore: go mod tidy
• [c9e0ee78] - chore: Added causing error
• [c68c429e] - chore: Don't continue if list namespaces failes
• [bbb9afdc] - chore: release 0.10.0
• [30b81d96] - chore: remove some example-values [skip ci]

Version 0.10.0 (2022-04-27)

Common changes

• [30b81d96] - chore: remove some example-values [skip ci]

Version 0.10.0-beta.2 (2022-04-27)

Bug fixes

• [35a78e84] - fix: use empty array without a secret-name

Version 0.10.0-beta.1 (2022-04-26)

Bug fixes

• [4e2dee4f] - fix: try to add chmod statement

Version 0.10.0-beta.0 (2022-04-26)

Features and improvements

• [411a9472] - feat: add Codenotary CAS support
• [91ced753] - feat: add vcn-metadata-attributes
• [4017697d] - feat: allow optional extra-args to VCN
• [e0acaea3] - feat: add external job-delegation for vcn

Bug fixes

• [2917d79b] - fix: split by regex

Build and testing

• [ffc3025f] - build: fix artifact-path
• [c9284846] - build: add job-image-workflow

Documentation

• [2cf4d68b] - doc: add amd64 note
• [cb42f105] - doc: improvements to job-image docs
• [a129503c] - doc: add job-docs

Dependency updates

• [42a92388] - deps: update kubernetes versions to v0.23.6

Common changes

• [a502a2eb] - chore: split deploy-manifests

Version 0.9.0 (2022-04-16)

Build and testing

• [0db018a4] - build: update to go 1.18.1

Documentation

• [f10035d9] - doc: update version-table [skip ci]

Dependency updates

• [4476caf7] - deps: fix syft-update
• [f4ff8e50] - deps: update module github.com/anchore/syft to v0.44.1
• [609032bd] - deps: update module github.com/spf13/viper to v1.11.0
• [fb99dbc9] - deps: update ckotzbauer/actions-toolkit action to v0.12.1
• [ee2fe84d] - deps: update alpine digest to 4edbd2b

Version 0.8.0 (2022-04-08)

Features and improvements

• [e7b902a6] - feat: update to go@1.18.0

Bug fixes

• [0b446e1e] - fix: fix parsing of image id's for container runtimes which include a prefix before the image id
• [f495819e] - fix: add namespace close #56

Build and testing

• [fc495e8f] - build: use reusable-workflows [6]
• [ccff3ee5] - build: use reusable-workflows [5]
• [90e363d6] - build: use reusable-workflows [4]
• [2f110068] - build: use reusable-workflows [3]
• [2acc90b8] - build: use reusable-workflows [2]
• [b0cba49c] - build: use reusable-workflows [1]
• [585cf4ba] - test: update fixtures
• [1b46b79e] - test: update syft-fixtures

Documentation

• [6e44f2ee] - doc: update version [skip ci]

Dependency updates

• [1af69827] - deps: update module github.com/anchore/syft to v0.43.0
• [4bc434a9] - deps: update actions/setup-node action to v3.1.0
• [18984bb1] - deps: update ckotzbauer/actions-toolkit action to v0.10.1
• [bbc680b5] - deps: update alpine digest to f22945d
• [3df42d43] - deps: update module github.com/anchore/syft to v0.42.4 (#59)
• [53febe7a] - deps: update alpine digest to ceeae28 (#58)
• [4da4adf7] - deps: update module github.com/docker/cli to v20.10.14 (#60)
• [c1c1ffda] - deps: update ckotzbauer/actions-toolkit action to v0.10.0 (#61)
• [2cd77243] - deps: update module github.com/onsi/gomega to v1.19.0 (#62)
• [ec4fa537] - deps: bump pascalgn/automerge-action
• [8e229eaa] - deps: update ckotzbauer/label-command-action action to v2
• [08b2d4e8] - deps: update module github.com/anchore/syft to v0.42.0
• [70834f7b] - deps: update alpine digest to d6d0a0e (#52)
• [d39e8e1d] - deps: update kubernetes versions to v0.23.5 (#53)

Common changes

• [2a339356] - chore: fix rbac for correct install
• [7cfcee04] - chore: remove dependabot [skip ci]
• [3814029f] - chore: update community-files [skip ci]

Version 0.7.0 (2022-03-12)

Features and improvements

• [2fedd5e1] - feat: delete unused images from Dependency Track

Bug fixes

• [151dde7a] - fix: rename fixtures
• [9fa77304] - fix: issue with image cleanup

Documentation

• [4863e43a] - doc: add new version

Dependency updates

• [404a60fe] - deps: update to syft@0.41.4
• [4b74df4f] - deps: update module github.com/anchore/syft to v0.41.4
• [2a52b94a] - deps: update module github.com/docker/cli to v20.10.13 (#48)
• [280975c3] - deps: update ckotzbauer/actions-toolkit action to v0.9.0 (#49)
• [4fdc6734] - deps: update module github.com/spf13/cobra to v1.4.0 (#51)
• [209fa941] - deps: update lannonbr/issue-label-manager-action action to v3.0.1 (#45)
• [47ee9f1d] - deps: update ckotzbauer/actions-toolkit action to v0.8.0 (#46)

Common changes

• [9ea6b1ef] - chore: pin dockerimage
• [5f0574f4] - chore: pin golang version

Version 0.6.0 (2022-03-05)

Bug fixes

• [a18233fb] - fix: fix git-pull error

Build and testing

• [d37c684e] - build: ignore several cves
• [785c5c72] - build: use grype for cve-scan

Documentation

• [fe5b3bf4] - doc: fix versions [skip ci]
• [e78a0b54] - doc: update versions [skip ci]

Security

• [4f7fdeee] - security: update containerd (GHSA-crp2-qrr5-8pq7)

Dependency updates

• [34849c73] - deps: update to syft@0.40.1
• [e8d2f030] - deps: update module github.com/anchore/syft to v0.40.1
• [3e2a6554] - deps: update actions/setup-go action to v3
• [889b81b2] - deps: update actions/stale action to v5
• [51cf1180] - deps: bump azure/setup-kubectl from 2.0 to 2.1
• [b5a4e8af] - deps: bump actions/checkout from 2 to 3
• [0fb9645c] - deps: update ckotzbauer/actions-toolkit action to v0.7.0 (#39)
• [726ade99] - deps: update module github.com/anchore/syft to v0.39.3 (#38)
• [f2d51ba7] - deps: bump actions/setup-node from 2.5.1 to 3.0.0

Version 0.5.0 (2022-02-19)

Build and testing

• [fe403ec2] - test: also disable test-code
• [93802fc9] - test: add mkdir
• [4ea3e2e6] - test: disable ACR tests
• [f09877de] - test: updated sbom-fixtures

Documentation

• [005df7da] - doc: updates

Dependency updates

• [66798cdc] - deps: update docker/distribution
• [0186c68a] - deps: go mod tidy
• [25b3df43] - deps: update module github.com/anchore/syft to v0.38.0
• [6463901f] - deps: go mod tidy
• [046ad445] - deps: update module github.com/onsi/ginkgo/v2 to v2.1.3
• [7446b45f] - deps: update pascalgn/automerge-action commit hash to 0ba0473 (#32)
• [f283ebe2] - deps: update pascalgn/size-label-action commit hash to a4655c4 (#33)
• [73470b9b] - deps: update kubernetes versions to v0.23.4 (#34)
• [07ae35f4] - deps: update module github.com/nscuro/dtrack-client to v0.5.0 (#36)
• [417fea63] - deps: update module github.com/onsi/ginkgo/v2 to v2.1.2 (#31)
• [030155ff] - deps: update ckotzbauer/actions-toolkit action to v0.6.0 (#28)
• [be071dd1] - deps: update module github.com/nscuro/dtrack-client to v0.4.0 (#30)

Version 0.4.1 (2022-02-04)

Bug fixes

• [6519b666] - fix: change legacy-support for .dockercfg
• [92c41c6e] - fix: add support for legacy .dockercfg close #26

Version 0.4.0 (2022-02-01)

Features and improvements

• [492e99ed] - feat: add version, use project auto-creation
• [549443d1] - feat: basic implementation for Dependency Track

Bug fixes

• [67ff2fe7] - fix: ignore "already up-to-date"
• [b384003b] - fix: avoid concurrent runs
• [40024547] - fix: improve target error-handling
• [d3a5768a] - fix: also respect dockercfg secret-type close #26
• [347b8430] - fix: add missing rbac-rules close #24

Build and testing

• [e731e895] - build: also build on PRs

Documentation

• [9d5a1bc1] - doc: added dtrack docs
• [0e36dbe4] - doc: improve version docs

Common changes

• [43c84015] - chore: Fix logging and remove fallback (not needed)
• [7fbd4c89] - chore: Fixed typos Dependenca -> Dependency
• [1fa44d04] - chore: Load all projects with paging
• [9eff773e] - chore: add target-labels

Version 0.3.1 (2022-01-30)

Bug fixes

• [d1b47e06] - fix: remove duplicate path-join fix: #23

Version 0.3.0 (2022-01-29)

Features and improvements

• [a93d296e] - feat: add ignore-annotations flag ref: #18
• [ed59b5aa] - feat: track process with annotations
• [1c4e3968] - feat: add target-validation handling
• [23f5285e] - feat: some refactoring for multi-targets
• [d699f346] - feat: move git package
• [57a69b00] - feat: use syft module instead of binary

Bug fixes

• [3aecc2d5] - fix: make image-path reproducible
• [484cc576] - fix: changed if-condition
• [789e7446] - fix: small bugfixes
• [bb68ee18] - fix: use other source-hint
• [9fab42bb] - fix: small syft fix

Cleanup and refactoring

• [2e0c59e9] - cleanup: change env-prefix to SBOM
• [188dfd99] - cleanup: finalized target-decoupling
• [94a7246e] - cleanup: refactored logic to avoid duplicate scans
• [41d33fae] - cleanup: small refactoring
• [bfe062a2] - cleanup: some refactoring

Build and testing

• [87beaa7e] - build: also run unit-tests
• [35be5e6c] - test: added syft tests

Documentation

• [70428c73] - doc: fixes
• [9f6c877e] - doc: several doc updates
• [3c60ff84] - doc: some clarifications
• [4b5d9d37] - doc: add parameter

Dependency updates

• [ed732dc9] - deps: go mod tidy for ginkgo
• [cbb928fa] - deps: update module github.com/onsi/ginkgo/v2 to v2.1.1
• [e6d642f3] - deps: go mod tidy for gomega
• [c23777a2] - deps: update module github.com/onsi/gomega to v1.18.1
• [9b23b29a] - deps: update kubernetes versions to v0.23.3 (#19)
• [b91489ad] - deps: fix go.sum
• [383874c1] - deps: update module github.com/onsi/gomega to v1.18.0
• [741d0ca9] - deps: fix go.sum
• [2a0f035a] - deps: update module github.com/onsi/ginkgo/v2 to v2.1.0
• [c6702897] - deps: update ckotzbauer/actions-toolkit action to v0.5.0

Common changes

• [a30856d5] - chore: go mod tidy
• [4996730f] - chore: Create FUNDING.yml

Version 0.2.0 (2022-01-21)

Features and improvements

• [5caebcc9] - feat: add configurable sbom-format

Bug fixes

• [891dfc7e] - fix: remove whole directory on sbom-removal close #8

Build and testing

• [ffea5729] - build: try to fix trigger

Documentation

• [f865a13e] - doc: add helm example values
• [8199174a] - doc: several improvements ref: #11

Security

• [b67cc1d0] - security: update opencontainers/image-spec

Common changes

• [870f195b] - chore: use syft version 0.36.0 on top layer
• [96e043cc] - chore: change the way of install syft

Version 0.1.0 (2022-01-20)

Features and improvements

• [c8f9c5e8] - feat: rename project
• [6ffc128e] - feat: added git-path
• [a5b6bf5e] - feat: sbom-cleanup; refactoring and fixing
• [a777ccac] - feat: more configuration for k8s resources
• [295153c7] - feat: configuration and daemon-service

Build and testing

• [32d2c2fc] - build: try https://index.docker.io/v1/ server
• [068745cb] - build: use env
• [8acf0c86] - build: try using env
• [e65faa7f] - build: split steps
• [5a75c79d] - build: fix quotes
• [ead24faa] - build: dry-run
• [87d52b47] - build: use another action
• [3e86bf09] - build: update workflow
• [04e560ba] - build: update workflow
• [383ad576] - build: update workflow
• [6a65f9f7] - build: update workflow
• [79a6b63a] - build: add github-workflows
• [14b2b912] - test: use index.docker.io
• [d487a5af] - test: split test-registries gh-action
• [aaeaf29a] - test: try to fix hub-test
• [0eb989b9] - test: write registry-tests

Documentation

• [6261a0c0] - doc: added security
• [509bb9ae] - docs: added documents

Security

• [36dbde86] - security: update golang.org/x/crypto

Dependency updates

• [8c58dfef] - deps: updated k8s libraries
• [eea2d965] - deps: bump azure/setup-kubectl from 1 to 2.0

Common changes

• [c9704e7a] - chore: add quotes
• [5ca4e439] - chore: initial commit