Skip to content

Releases: Quobis/action-owasp-dependecy-track-check

v1.3.1

22 Sep 17:49
c43caea
Compare
Choose a tag to compare

#12 Fix cyclonedx go:
cyclonedx-go requires modules support (aka a go.mod file), so by adding a temporary file and removing it afterwards the container will build.

v1.3

27 Aug 07:39
2d4568e
Compare
Choose a tag to compare

Now every project's BoM gets converted into v1.2 thanks to CycloneDX CLI convert tool. This allows you to use this action with Dependency Track v4.0.0 or higher, even if specific language modules do not include support for such format yet.
An example of CycloneDX Maven plugin was added to the README.md file. Moreover, every language has successfully been tested with this release.

v1.2-beta

23 Aug 09:05
64c4070
Compare
Choose a tag to compare

This release extends language support to Maven (Java), Composer (PHP), NuGet (.NET) and Gems (Ruby) projects. Once again, testing and feedback is welcome.

v1.1-beta

04 Jun 09:09
Compare
Choose a tag to compare

This release is usable for Golang, Python and Nodejs projects. Testing and feedback is welcome, specially in Pyhton and Nodejs projects.

Initial beta version

04 Jun 08:50
Compare
Choose a tag to compare

This release is functional but it has only be tested in production for Golang projects and seems to be working properly.
We still need to test it more in Github Python and NodeJS projects, which have been tested but locally, not from Github repositories.