Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore: merge changes from upstream #6

Merged
merged 95 commits into from
Nov 8, 2024
Merged

chore: merge changes from upstream #6

merged 95 commits into from
Nov 8, 2024

Conversation

albertodonato
Copy link
Collaborator

In particular, this gets the fix to set missing variables as null from aquasecurity#7669

nikpivkin and others added 30 commits September 18, 2024 06:02
@nikpivkin
chore(deps): bump go-ebs-file (aquasecurity#7513)
d1d7132 
Signed-off-by: nikpivkin <[email protected]>
@DmitriyLewen
fix(sbom): parse type framework as library when unmarshalling `Cy…
aeb7039 
…cloneDX` files (aquasecurity#7527)
@nikpivkin
refactor(misconf): pass options to Rego scanner as is (aquasecurity#7529
dbd2dd6 
)

Signed-off-by: nikpivkin <[email protected]>
@afdesk @knqyf263
fix(sbom): export bom-ref when converting a package to a component (a…
5dd94eb 
…quasecurity#7340)

Signed-off-by: knqyf263 <[email protected]>
Co-authored-by: amf <[email protected]>
Co-authored-by: knqyf263 <[email protected]>
@nikpivkin
perf(misconf): use port ranges instead of enumeration (aquasecurity#7549
1f9fc13 
)

Signed-off-by: nikpivkin <[email protected]>
@bloomadcariad
fix(misconf): Fixed scope for China Cloud (aquasecurity#7560)
37d549e
@simar7
docs(misconf): Add more info on how to use arbitrary JSON/YAML scan f…
8128ecc 
…eat (aquasecurity#7458)
@lebauce
chore(deps): remove broken replaces for opa and discovery (aquasecuri…
bbc8e1d 
…ty#7600)
@DmitriyLewen
ci: cache test images for integration, VM and module tests (aqu…
fea7250 
…asecurity#7599)
@DmitriyLewen
ci: add workflow_dispatch trigger for test workflow. (aquasecurity#…
1fdf30a 
…7606)
@dependabot @knqyf263
chore(deps): bump the common group across 1 directory with 20 updates (…
3fa24e8 
…aquasecurity#7604)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: knqyf263 <[email protected]>
@DmitriyLewen
fix(db): check DownloadedAt for trivy-java-db (aquasecurity#7592)
13ef3e7
@nikpivkin
fix: allow access to '..' in mapfs (aquasecurity#7575)
a8fbe46 
Signed-off-by: nikpivkin <[email protected]>
@knqyf263
test: use a local registry for remote scanning (aquasecurity#7607)
9baf658 
Signed-off-by: knqyf263 <[email protected]>
@nikpivkin
fix(misconf): escape all special sequences (aquasecurity#7558)
ea0cf03 
Signed-off-by: nikpivkin <[email protected]>
@nikpivkin @simar7
feat(misconf): add ability to disable checks by ID (aquasecurity#7536)
ef0a27d 
Signed-off-by: nikpivkin <[email protected]>
Co-authored-by: Simar <[email protected]>
@msmeissn @knqyf263
feat(suse): added SUSE Linux Enterprise Micro support (aquasecurity#7294
efdb68d 
)

Signed-off-by: Marcus Meissner <[email protected]>
Signed-off-by: knqyf263 <[email protected]>
Co-authored-by: knqyf263 <[email protected]>
@nikpivkin
fix(misconf): disable DS016 check for image history analyzer (aquasec…
de40df9 
…urity#7540)

Signed-off-by: nikpivkin <[email protected]>
@DmitriyLewen
ci: split save and restore cache actions (aquasecurity#7614)
cb16d43
@knqyf263
refactor: fix auth error handling (aquasecurity#7615)
9d1be41 
Signed-off-by: knqyf263 <[email protected]>
@afdesk @knqyf263
feat(secret): enhance secret scanning for python binary files (aquase…
60725f8 
…curity#7223)

Signed-off-by: knqyf263 <[email protected]>
Co-authored-by: knqyf263 <[email protected]>
@DmitriyLewen @knqyf263
feat(java): add empty versions if pom.xml dependency versions can't…
b836232 
… be detected (aquasecurity#7520)

Co-authored-by: Teppei Fukuda <[email protected]>
@knqyf263
test: use loaded image names (aquasecurity#7617)
d4edeb5 
Signed-off-by: knqyf263 <[email protected]>
@DmitriyLewen
ci: don't use cache for setup-go (aquasecurity#7622)
7602d14
@nikpivkin
feat: support multiple DB repositories for vulnerability and Java DB (a…
3562529 
…quasecurity#7605)

Signed-off-by: nikpivkin <[email protected]>
@simar7 @nikpivkin
feat(misconf): Support --skip-* for all included modules (aquasecur…
c0e8da3 
…ity#7579)

Signed-off-by: nikpivkin <[email protected]>
Co-authored-by: nikpivkin <[email protected]>
@knqyf263 @simar7
chore: add prefixes to log messages (aquasecurity#7625)
1faf529 
Signed-off-by: knqyf263 <[email protected]>
Co-authored-by: simar7 <[email protected]>
@simar7
fix(misconf): Disable deprecated checks by default (aquasecurity#7632)
82e2adc
@simar7
chore(deps): Bump trivy-checks to v1.1.0 (aquasecurity#7631)
8735242
@sgaist
fix(secret): change grafana token regex to find them without unquoted (…
3e1fa21 
…aquasecurity#7627)
afdesk and others added 27 commits October 29, 2024 07:08
@afdesk
fix(k8s): support kubernetes v1.31 (aquasecurity#7810)
7a4f4d8
@smtan-gl @afdesk
fix(k8s)!: support k8s multi container (aquasecurity#7444)
c434775 
Co-authored-by: afdesk <[email protected]>
@simar7
refactor(misconf): Deprecate EXCEPTIONS for misconfiguration scanni…
c70b6fa 
…ng (aquasecurity#7776)

Signed-off-by: Simar <[email protected]>
@nikpivkin
fix(helm): properly handle multiple archived dependencies (aquasecuri…
6fab88d 
…ty#7782)

Signed-off-by: nikpivkin <[email protected]>
@nikpivkin
fix(cli): add config name to skip-policy-update alias (aquasecurity#7820
b661d68 
)

Signed-off-by: nikpivkin <[email protected]>
@DmitriyLewen
fix(sbom): use Annotation instead of AttributionTexts for SPDX …
f2bb9c6 
…formats (aquasecurity#7811)
@afdesk
fix(k8s): skip resources without misconfigs (aquasecurity#7797)
7882776
@Rutam21 @DmitriyLewen
fix(go): Do not trim v prefix from versions in Go Mod Analyzer (aquas…
e872ec0 
…ecurity#7733)

Co-authored-by: DmitriyLewen <[email protected]>
@simar7
chore(deps): Bump trivy-checks (aquasecurity#7819)
194d4ab
@nikpivkin
docs: add example of creating whitelist of checks (aquasecurity#7821)
7654b2e 
Signed-off-by: nikpivkin <[email protected]>
@DmitriyLewen
docs(java): add info about supported scopes (aquasecurity#7842)
dc44946
@knqyf263
feat(db): append errors (aquasecurity#7843)
5e78b6c 
Signed-off-by: knqyf263 <[email protected]>
@knqyf263
chore: lint errors.Join (aquasecurity#7845)
7632625 
Signed-off-by: knqyf263 <[email protected]>
@aqua-bot
release: v0.57.0 [main] (aquasecurity#7710)
efec326
@knqyf263
chore: bump golangci-lint to v1.61.0 (aquasecurity#7853)
4da59bd 
Signed-off-by: knqyf263 <[email protected]>
@dependabot
chore(deps): bump the github-actions group across 1 directory with 2 …
a9b557d 
…updates (aquasecurity#7854)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@DmitriyLewen
test: save containerd image into archive and use in tests (aquasecu…
a6a45b3 
…rity#7816)
@Yeatesss
refactor(secret): optimize performance by moving ToLower operation ou…
2529b58 
…tside loop (aquasecurity#7862)
@dependabot
chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 (a…
ed2288f 
…quasecurity#7868)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@afdesk
feat(k8s): add default commands for unknown platform (aquasecurity#7863)
b1c7f55
@bpfoster
fix: Improve version comparisons when build identifiers are present (a…
eda4d76 
…quasecurity#7873)
@knqyf263
chore: bump containerd to v2.0.0 (aquasecurity#7875)
6e3252b 
Signed-off-by: knqyf263 <[email protected]>
@dependabot @knqyf263
chore(deps): bump the common group across 1 directory with 20 updates (…
6018461 
…aquasecurity#7876)

Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: knqyf263 <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: knqyf263 <[email protected]>
@jinroh
fix(fs): add missing defered Cleanup() call to post analyzer fs (aqua…
ab32297 
…security#7882)
@nikpivkin
fix(misconf): handle null properties in CloudFormation templates (aqu…
99b2db3 
…asecurity#7813)

Signed-off-by: nikpivkin <[email protected]>
@albertodonato
fix(terraform): set null value as fallback for missing variables (aqu…
611558e 
…asecurity#7669)
@albertodonato
Merge upstream main to get latest changes
ee932cd
@albertodonato albertodonato changed the title Merge changes from upstream chore: merge changes from upstream Nov 8, 2024
ajkerrigan
ajkerrigan approved these changes Nov 8, 2024
View reviewed changes
Copy link
Member

@ajkerrigan ajkerrigan left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sounds good, thanks @albertodonato ! 👍

@ajkerrigan ajkerrigan merged commit f5a02f3 into cloud-custodian:main Nov 8, 2024
16 of 17 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@ajkerrigan ajkerrigan ajkerrigan approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.