Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

release: v0.58.0 [main] #100

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

release: v0.58.0 [main] #100

wants to merge 1 commit into from

Conversation

afdesk
Copy link
Owner

@afdesk afdesk commented Nov 4, 2024

🤖 I have created a release beep boop

0.58.0 (2024-11-04)

⚠ BREAKING CHANGES

  • k8s: support k8s multi container (#7444)
  • cli: delete deprecated SBOM flags (#7266)
  • k8s: node-collector dynamic commands support (#6861)
  • add clean subcommand (#6993)
  • aws: Remove aws subcommand (#6995)

Features

  • add log.FilePath() function for logger (#7080) (1f5f348)
  • add clean subcommand (#6993) (8d0ae1f)
  • add end of life date for Ubuntu 24.10 (#7787) (ad3c09e)
  • Add Julia language analyzer support (#5635) (fecafb1)
  • Add local ImageID to SARIF metadata (#6522) (f144e91)
  • add memory cache backend (#7048) (55ccd06)
  • add openSUSE tumbleweed detection and scanning (#6965) (17b5dbf)
  • add relationships (#6563) (6343e4f)
  • add support environment.yaml files (#6569) (e3bef02)
  • add support for plugin index (#6674) (26faf8f)
  • add ubuntu 23.10 and 24.04 support (#6573) (4369a19)
  • aws: apply filter options to result (#6367) (09e37b7)
  • aws: quiet flag support (#6331) (87a9aa6)
  • aws: Remove aws subcommand (#6995) (979e118)
  • c: add license support for conan lock files (#6329) (5dd9bd4)
  • cli: add trivy auth (#7664) (27117f8)
  • cli: delete deprecated SBOM flags (#7266) (7024572)
  • cli: error out when ignore file cannot be found (#7624) (cb0b3a9)
  • cli: rename --vuln-type flag to --pkg-types flag (#7104) (7cbdb0a)
  • cli: rename trivy auth to trivy registry (#7727) (633a7ab)
  • cloudformation: add support for logging and endpoint access for EKS (#6440) (86714bf)
  • cloudformation: inline ignore support for YAML templates (#6358) (df024e8)
  • conda: add licenses support for environment.yml files (#6953) (654217a)
  • cyclonedx: add file checksums to CycloneDX reports (#7507) (c225883)
  • dart: use first version of constraint for dependencies using SDK version (#6239) (042d6b0)
  • db: append errors (#7843) (5e78b6c)
  • go: add main module (#6574) (2d090ef)
  • go: parse main mod version from build info settings (#6564) (419e3d2)
  • go: parse main module of go binary files (#6530) (e32215c)
  • go: use toolchain as stdlib version for go.mod files (#7163) (2d80769)
  • image: goversion as stdlib (#6277) (d82d6cb)
  • image: Set User-Agent header for Trivy container registry requests (#6868) (9b31697)
  • introduce package UIDs for improved vulnerability mapping (#6583) (998f750)
  • java: add test scope support for pom.xml files (#7414) (2d97700)
  • java: add empty versions if pom.xml dependency versions can't be detected (#7520) (b836232)
  • java: add support for maven-metadata.xml files for remote snapshot repositories. (#6950) (1f8fca1)
  • java: add support for sbt projects using sbt-dependency-lock (#6882) (f18d035)
  • k8s: node-collector dynamic commands support (#6861) (8d618e4)
  • license: improve license normalization (#7131) (6472e3c)
  • mariner: Add support for Azure Linux (#7186) (5cbc452)
  • misconf: add ability to disable checks by ID (#7536) (ef0a27d)
  • misconf: add helm-api-version and helm-kube-version flag (#6332) (53517d6)
  • misconf: add metadata to Cloud schema (#6831) (02d5404)
  • misconf: add support for AWS::EC2::SecurityGroupIngress/Egress (#6755) (55fa610)
  • misconf: Add support for deprecating a check (#6664) (88702cf)
  • misconf: Add support for using spec from on-disk bundle (#7179) (be86126)
  • misconf: add support for wildcard ignores (#6414) (8dd0fcd)
  • misconf: add Terraform 'removed' block to schema (#6640) (b7a0a13)
  • misconf: API Gateway V1 support for CloudFormation (#6874) (8491469)
  • misconf: enabled China configuration for ACRs (#7156) (d1ec89d)
  • misconf: export unresolvable field of IaC types to Rego (#7765) (9514148)
  • misconf: ignore duplicate checks (#7317) (9ef05fc)
  • misconf: iterator argument support for dynamic blocks (#7236) (fe92072)
  • misconf: loading embedded checks as a fallback (#6502) (12ec0df)
  • misconf: port and protocol support for EC2 networks (#7146) (98e136e)
  • misconf: public network support for Azure Storage Account (#7601) (ad91412)
  • misconf: register builtin Rego funcs from trivy-checks (#6616) (7c22ee3)
  • misconf: Register checks only when needed (#7435) (f768d3a)
  • misconf: resolve tf module from OpenTofu compatible registry (#6743) (ac74520)
  • misconf: scanning support for YAML and JSON (#7311) (efdbd8f)
  • misconf: Show misconfig ID in output (#7762) (f75c0d1)
  • misconf: ssl_mode support for GCP SQL DB instance (#7564) (2eaa17e)
  • misconf: Support --skip-* for all included modules (#7579) (c0e8da3)
  • misconf: support for ignore by nested attributes (#7205) (44e4686)
  • misconf: support for policy and bucket grants (#7284) (a817fae)
  • misconf: support for VPC resources for inbound/outbound rules (#6779) (349caf9)
  • misconf: support of selectors for all providers for Rego (#6905) (bc3741a)
  • misconf: Support private registries for misconf check bundle (#6327) (f23ed77)
  • misconf: support symlinks inside of Helm archives (#6621) (4eae37c)
  • misconf: Use updated terminology for misconfiguration checks (#6476) (37da98d)
  • misconf: variable support for Terraform Plan (#7228) (db2c955)
  • nodejs: add license parser to pnpm analyser (#7036) (03ac93d)
  • nodejs: add v9 pnpm lock file support (#6617) (1e08648)
  • parser: ignore white space in pom.xml files (#7747) (a7baa93)
  • php: add installed.json file support (#4865) (edc556b)
  • plugin: add support for nested archives (#6845) (622c67b)
  • plugin: specify plugin version (#6683) (d6dc567)
  • python: add license support for requirement.txt files (#6782) (29615be)
  • python: add line number support for requirement.txt files (#6729) (2bc54ad)
  • python: use minimum version for pip packages (#7348) (e9b43f8)
  • report: export modified findings in JSON (#7383) (7aea79d)
  • report: Include licenses and secrets filtered by rego to ModifiedFindings (#6483) (fa3cf99)
  • report: update gitlab template to populate operating_system value (#7735) (c0d79fa)
  • respect custom exit code from plugin (#6584) (f0961d5)
  • sbom: add image labels into SPDX and CycloneDX reports (#7257) (4a2f492)
  • sbom: add vulnerability support for SPDX formats (#7213) (efb1f69)
  • sbom: migrate to CycloneDX v1.6 (#6903) (09e50ce)
  • sbom: set User-Agent header on requests to Rekor (#7396) (af1d257)
  • secret: enhance secret scanning for python binary files (#7223) (60725f8)
  • server: add internal --path-prefix flag for client/server mode (#7321) (24a4563)
  • server: Make Trivy Server Multiplexer Exported (#7389) (4c6e8ca)
  • share build-in rules (#7207) (bff317c)
  • support --skip-images scanning flag (#6334) (e739ab8)
  • support multiple DB repositories for vulnerability and Java DB (#7605) (3562529)
  • support RPM archives (#7628) (69bf7e0)
  • suse: added SUSE Linux Enterprise Micro support (#7294) (efdb68d)
  • terraform: ignore resources by nested attributes (#6302) (29dee32)
  • vex: improve relationship support in CSAF VEX (#6735) (a447f6b)
  • vex: retrieve VEX attestations from OCI registries (#7249) (c2fd2e0)
  • vex: support non-root components for products in OpenVEX (#6728) (9515695)
  • vex: VEX Repository support (#7206) (88ba460)
  • vm: Support direct filesystem (#7058) (45b3f34)
  • vm: support the Ext2/Ext3 filesystems (#6983) (35c60f0)
  • vuln: Add --detection-priority flag for accuracy tuning (#7288) (fd8348d)
  • vuln: add --pkg-relationships (#7237) (5c37361)
  • vuln: Handle scanning conan v2.x lockfiles (#6357) (29b8faf)

Bug Fixes

  • add color for error inside of log message (#6493) (cfddfb3)
  • Add dependencyManagement exclusions to the child exclusions (#6969) (dc68a66)
  • add missing platform and type to spec (#7149) (c8a7abd)
  • allow access to '..' in mapfs (#7575) (a8fbe46)
  • aws: handle ECR repositories in different regions (#6217) (feaef96)
  • c: don't skip conan files from file-patterns and scan .conan2 cache dir (#6949) (38b35dd)
  • clean up golangci lint configuration (#6797) (62de6f3)
  • cli: clean --all deletes only relevant dirs (#7704) (672e886)
  • cli: add config name to skip-policy-update alias (#7820) (b661d68)
  • cli: always output fatal errors to stderr (#6827) (c2b9132)
  • cli: error on missing config file (#7154) (7fa5e7d)
  • cli: show info message only when --scanners is available (#7032) (e9fc3e3)
  • close APKINDEX archive file (#6672) (5caf437)
  • close file when failed to open gzip (#7164) (2a577a7)
  • close plugin.yaml (#6577) (916f6c6)
  • close pom.xml (#6507) (a986199)
  • close settings.xml (#6768) (9c3e895)
  • close testfile (#6830) (aa0c413)
  • cloudformation: infer type after resolving a function (#6406) (6a2f6fd)
  • cloudformation: resolve DedicatedMasterEnabled parsing issue (#6439) (74e4c6e)
  • conda: add support pip deps for environment.yml files (#6675) (150a773)
  • cyclonedx: trim non-URL info for advisory.url (#6952) (417212e)
  • db: check DownloadedAt for trivy-java-db (#7592) (13ef3e7)
  • db: check schema version for image name only (#6410) (8baccd7)
  • db: fix javadb downloading error handling (#7642) (2c87f0c)
  • debian: sort dpkg info before parsing due to exclude directories (#6551) (9aca98c)
  • debian: take installed files from the origin layer (#6849) (089b953)
  • dotnet: don't include non-runtime libraries into report for *.deps.json files (#7039) (5bc662b)
  • dotnet: show nuget package dir not found log only when checking nuget packages (#7194) (d76feba)
  • enable usestdlibvars linter (#7770) (57e24aa)
  • flag: incorrect behavior for deprected flag --clear-cache (#7281) (2a0e529)
  • fs: handle default skip dirs properly (#6628) (8016b82)
  • go: add only non-empty root modules for gobinaries (#6710) (c96f2a5)
  • go: Do not trim v prefix from versions in Go Mod Analyzer (#7733) (e872ec0)
  • go: include only .version|.ver (no prefixes) ldflags for gobinaries (#6705) (afb4f9d)
  • Golang version parsing from binaries w/GOEXPERIMENT (#6696) (696f2ae)
  • helm: explicitly define kind and apiVersion of volumeClaimTemplate element (#7362) (da4ebfa)
  • helm: properly handle multiple archived dependencies (#7782) (6fab88d)
  • ignore nodes when listing permission is not allowed (#7107) (25f8143)
  • image: parse image.inspect.Created field only for non-empty values (#6948) (0af5730)
  • include packages unless it is not needed (#6765) (56dbe1f)
  • java: avoid panic if deps from pom in it dir are not found (#7245) (4e54a7e)
  • java: correctly inherit version and scope from upper/root depManagement and dependencies into parents (#7541) (778df82)
  • java: Return error when trying to find a remote pom to avoid segfault (#7275) (49d5270)
  • java: update logic to detect pom.xml file snapshot artifacts from remote repositories (#6412) (34ab09d)
  • java: use dependencyManagement from root/child pom's for dependencies from parents (#7497) (5442949)
  • java: use go-mvn-version to remove Package duplicates (#7088) (a7a304d)
  • k8s: skip resources without misconfigs (#7797) (7882776)
  • k8s: support k8s multi container (#7444) (c434775)
  • k8s: support kubernetes v1.31 (#7810) (7a4f4d8)
  • license: add license handling to JUnit template (#7409) (f80183c)
  • license: fix license normalization for Universal Permissive License (#7766) (f6acdf7)
  • license: return license separation using separators ,, or, etc. (#6916) (52f7aa5)
  • license: stop spliting a long license text (#7336) (4926da7)
  • logger initialization before flags parsing (#7372) (c929290)
  • misconf: avoid panic if the scheme is not valid (#6496) (4337068)
  • misconf: change default ACL of digitalocean_spaces_bucket to private (#7577) (9da84f5)
  • misconf: change default TLS values for the Azure storage account (#7345) (aadb090)
  • misconf: check if property is not nil before conversion (#7578) (c8c14d3)
  • misconf: clear location URI for SARIF (#6405) (712dcd3)
  • misconf: Disable deprecated checks by default (#7632) (82e2adc)
  • misconf: disable DS016 check for image history analyzer (#7540) (de40df9)
  • misconf: do not evaluate TF when a load error occurs (#7109) (f27c236)
  • misconf: do not filter Terraform plan JSON by name (#7406) (9d7264a)
  • misconf: do not recreate filesystem map (#7416) (3a5d091)
  • misconf: do not register Rego libs in checks registry (#7420) (a5aa63e)
  • misconf: do not set default value for default_cache_behavior (#7234) (f0ed5e4)
  • misconf: do not use semver for parsing tf module versions (#6614) (9c794c0)
  • misconf: don't shift ignore rule related to code (#6708) (39a746c)
  • misconf: escape all special sequences (#7558) (ea0cf03)
  • misconf: Escape template value correctly (#6292) (1c49a16)
  • misconf: fix caching of modules in subdirectories (#6814) (0bcfedb)
  • misconf: fix for Azure Storage Account network acls adaptation (#7602) (35fd018)
  • misconf: fix infer type for null value (#7424) (0cac3ac)
  • misconf: Fix logging typo (#7473) (56db43c)
  • misconf: fix parsing of engine links and frameworks (#6937) (ec68c9a)
  • misconf: Fixed scope for China Cloud (#7560) (37d549e)
  • misconf: handle source prefix to ignore (#6945) (c3192f0)
  • misconf: init frameworks before updating them (#7376) (b65b32d)
  • misconf: load cached tf modules (#6607) (7a25dad)
  • misconf: load only submodule if it is specified in source (#7112) (a4180bd)
  • misconf: not to warn about missing selectors of libraries (#7638) (fcaea74)
  • misconf: Parse JSON k8s manifests properly (#6490) (9b7d713)
  • misconf: parsing numbers without fraction as int (#6834) (8141a13)
  • misconf: properly expand dynamic blocks (#7612) (8d5dbc9)
  • misconf: skip Rego errors with a nil location (#6638) (a2c522d)
  • misconf: skip Rego errors with a nil location (#6666) (a126e10)
  • misconf: support deprecating for Go checks (#7377) (2a6c7ab)
  • misconf: use module to log when metadata retrieval fails (#7405) (0799770)
  • misconf: wrap Azure PortRange in iac types (#7357) (c5c62d5)
  • node-collector high and critical cves (#6707) (ff32deb)
  • nodejs: check all importers to detect dev deps from pnpm-lock.yaml file (#7387) (fd9ed3a)
  • nodejs: detect direct dependencies when using latest version for files yarn.lock + package.json (#7110) (54bb8bd)
  • nodejs: fix infinite loop when package link from package-lock.json file is broken (#6858) (cf5aa33)
  • nodejs: fix infinity loops for pnpm with cyclic imports (#6857) (7d083bc)
  • oracle: Update EOL date for Oracle 7 (#7480) (dd0a64a)
  • plugin: do not call GitHub content API for releases and tags (#7274) (b3ee6da)
  • plugin: initialize logger (#6836) (728e77a)
  • plugin: respect --insecure (#7022) (3d02a31)
  • purl: add missed os types (#6955) (2d85a00)
  • python: add package name and version validation for requirements.txt files. (#6804) (ea3a124)
  • python: compare pkg names from poetry.lock and pyproject.toml in lowercase (#6852) (faa9d92)
  • redhat: include arch in PURL qualifiers (#7654) (a585e95)
  • repo: git clone output to Stderr (#7561) (fdf203c)
  • report: change a receiver of MarshalJSON (#7483) (927c6e0)
  • report: escape Message field in asff.tpl template (#7401) (dd9733e)
  • report: fix error with unmarshal of ExperimentalModifiedFindings (#7463) (7ff9aff)
  • report: Fix invalid URI in SARIF report (#7645) (015bb88)
  • report: hide empty table when all secrets/license/misconfigs are ignored (#7171) (c3036de)
  • report: hide empty tables if all vulns has been filtered (#6352) (3d388d8)
  • safely check if the directory exists (#7353) (05a8297)
  • sbom: add options for DBs in private registries (#7660) (1f2e91b)
  • sbom: change error to warning for multiple OSes (#6541) (d2d4022)
  • sbom: don't overwrite srcEpoch when decoding SBOM files (#6866) (04af59c)
  • sbom: export bom-ref when converting a package to a component (#7340) (5dd94eb)
  • sbom: fix error when parent of SPDX Relationships is not a package. (#6399) (5f69937)
  • sbom: fix panic for convert mode when scanning json file derived from sbom file (#6808) (f92ea09)
  • sbom: fix panic when scanning SBOM file without root component into SBOM format (#7051) (3d4ae8b)
  • sbom: parse type framework as library when unmarshalling CycloneDX files (#7527) (aeb7039)
  • sbom: take pkg name from purl for maven pkgs (#7008) (a76e328)
  • sbom: use Annotation instead of AttributionTexts for SPDX formats (#7811) (f2bb9c6)
  • sbom: use NOASSERTION for licenses fields in SPDX formats (#7403) (c96dcdd)
  • sbom: use purl for bitnami pkg names (#6982) (7eabb92)
  • sbom: use package UIDs for uniqueness (#7042) (14d71ba)
  • secret: Asymmetric Private Key shouldn't start with space (#6867) (bb26445)
  • secret: change grafana token regex to find them without unquoted (#7627) (3e1fa21)
  • secret: convert severity for custom rules (#6500) (46d5aba)
  • secret: skip regular strings contain secret patterns (#7182) (174b1e3)
  • secret: trim excessively long lines (#7192) (92b13be)
  • secret: update length of hugging-face-access-token (#7216) (8c87194)
  • secret: use .eyJ keyword for JWT secret (#7410) (bf64003)
  • secret: use only line with secret for long secret lines (#7412) (391448a)
  • server: pass license categories to options (#7203) (9d52018)
  • suse: Add SLES 15.6 and Leap 15.6 (#6964) (5ee4e9d)
  • terraform: add aws_region name to presets (#7184) (bb2e26a)
  • terraform: Attribute and fileset fixes (#6544) (7c2017f)
  • terraform: eval submodules (#6411) (13190e9)
  • trivy k8s avoid deleting non-default node collector namespace (#6559) (8e6cd0e)
  • typo (#6283) (1ba5b59)
  • use embedded when command path not found (#7037) (137c916)
  • use of specified context to obtain cluster name (#6645) (39ebed4)
  • vuln: skip empty versions (#6542) (164b025)

Performance Improvements

  • debian: use bytes.Index in emptyLineSplit to cut allocation (#7065) (acbec05)
  • helm: load in-memory files (#6383) (1a67472)
  • misconf: do not convert contents of a YAML file to string (#7292) (85dadf5)
  • misconf: Improve cause performance (#6586) (770b141)
  • misconf: optimize work with context (#6968) (2b6d8d9)
  • misconf: parse rego input once (#6615) (67c6b1d)
  • misconf: use json.Valid to check validity of JSON (#7308) (c766831)
  • misconf: use port ranges instead of enumeration (#7549) (1f9fc13)

Reverts

  • java: stop supporting of test scope for pom.xml files (#7488) (b0222fe)

This PR was generated with Release Please. See documentation.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
autorelease: pending
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@afdesk