Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

mergem #185

Merged
merged 338 commits into from
Mar 21, 2024
Merged

mergem #185

merged 338 commits into from
Mar 21, 2024

Conversation

santhosh1729
Copy link
Owner

Description

Related issues

  • Close #XXX

Related PRs

  • #XXX
  • #YYY

Remove this section if you don't have related PRs.

Checklist

  • I've read the guidelines for contributing to this repository.
  • I've followed the conventions in the PR title.
  • I've added tests that prove my fix is effective or that my feature works.
  • I've updated the documentation with the relevant information (if needed).
  • I've added usage information (if the PR introduces new options)
  • I've included a "before" and "after" example to the description (if the PR is a user interface change).

chen-keinan and others added 30 commits November 1, 2023 09:31
@chen-keinan
feat: scan vulns on k8s core component apps (#5418)
f3de7bc 
Signed-off-by: chenk <[email protected]>
@dependabot
chore(deps): bump github.com/aws/aws-sdk-go-v2/service/ecr from 1.17.…
6e59272 
…18 to 1.21.0 (#5497)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
chore(deps): bump actions/checkout from 4.1.0 to 4.1.1 (#5501)
9a6e125 
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@nikpivkin
fix(server): add licenses to BlobInfo message (#5382)
520830b
@dependabot
chore(deps): bump github.com/package-url/packageurl-go from 0.1.2-0.2…
b0141cf 
…0230812223828-f8bb31c1f10b to 0.1.2 (#5491)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
chore(deps): bump docker/build-push-action from 4 to 5 (#5500)
13df746 
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
chore(deps): bump goreleaser/goreleaser-action from 4 to 5 (#5502)
2e10cd2 
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@lebauce
fix: correct error mismatch causing race in fast walks (#5482)
8656bd9
@lebauce
chore: remove unused logger attribute in amazon detector (#5476)
7299867
@dependabot @DmitriyLewen
chore(deps): bump github.com/testcontainers/testcontainers-go/modules…
474167c 
…/localstack from 0.21.0 to 0.26.0 (#5475)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: DmitriyLewen <[email protected]>
@DmitriyLewen
docs: remove glad for java datasources (#5508)
68b0797
@dependabot @DmitriyLewen
chore(deps): bump github.com/owenrumney/go-sarif/v2 from 2.2.2 to 2.3…
d0d956f 
….0 (#5493)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: DmitriyLewen <[email protected]>
@dependabot
chore(deps): bump github.com/aws/aws-sdk-go-v2/service/sts from 1.23.…
fdb3a15 
…2 to 1.25.0 (#5506)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@chen-keinan
docs: k8s vulnerability scanning (#5515)
46f1b9e 
Signed-off-by: chenk <[email protected]>
@lebauce
fix: correct error mismatch causing race in fast walks (#5516)
fed4710
@nikpivkin
ci: use maximize build space for K8s tests (#5387)
df47073
@DmitriyLewen
fix(sbom): Use UUID as BomRef for packages with empty purl (#5448)
772d1d0
@matheusfm
docs: add Zora integration into Ecosystem session (#5490)
156d4cc
@DmitriyLewen @knqyf263
docs: add info that license scanning supports file-patterns flag (#5484)
d6df5fb 
Co-authored-by: Teppei Fukuda <[email protected]>
@tjanson
docs(k8s): fix whitespace in list syntax (#5525)
043fbfc
@tjanson
docs(k8s): fix link in kubernetes.md (#5524)
7712f8f
@DmitriyLewen
refactor(misconf): don't remove Highlighted in json format (#5531)
a1b4744
@chen-keinan
fix: fail k8s resource scanning (#5529)
05df244 
Signed-off-by: chenk <[email protected]>
@chen-keinan
fix: trivy k8s parse ecr image with arn (#5537)
91fc8da 
Signed-off-by: chenk <[email protected]>
@very-doge-wow
feat(secret): add built-in rule for JWT tokens (#5480)
2f5afa5
@simar7
refactor(misconf): Update refactored dependencies (#5245)
e7f6a5c 
Signed-off-by: Simar <[email protected]>
@DmitriyLewen
fix(sbom): add FilesAnalyzed and PackageVerificationCode fields f…
cb241a8 
…or SPDX (#5533)
@DmitriyLewen
fix(cli): set correct scanners for k8s target (#5561)
138feb0
@chen-keinan
fix: no schedule toleration (#5562)
3891e3d 
Signed-off-by: chenk <[email protected]>
@knqyf263
chore: sort supported AWS services (#5570)
cccaa15 
Signed-off-by: knqyf263 <[email protected]>
dependabot bot and others added 27 commits March 4, 2024 13:49
@dependabot
chore(deps): bump helm/kind-action from 1.8.0 to 1.9.0 (#6242)
355c1b5 
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@DmitriyLewen
fix(java): don't ignore runtime scope for pom.xml files (#6223)
c4b5ab7
@testwill
fix: typo function name and comment optimization (#6200)
3d2f583 
Signed-off-by: guoguangwu <[email protected]>
@dependabot
chore(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.26.6 to …
ee01e6e 
…1.27.4 (#6249)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@nikpivkin @simar7
feat(terraform): Terraform Plan snapshot scanning support (#6176)
9361cdb 
Co-authored-by: Simar <[email protected]>
Co-authored-by: simar7 <[email protected]>
@nikpivkin
fix(cloudformation): support of all SSE algorithms for s3 (#6270)
337cb75
@chrisking @DmitriyLewen
feat(secret): Support for detecting Hugging Face Access Tokens (#6236)
6639911 
Co-authored-by: DmitriyLewen <[email protected]>
@nikpivkin
test(terraform): skip cached modules (#6281)
d7d7265
@dus7eh @DmitriyLewen
fix(license): reorder logic of how python package licenses are acquir…
56cedc0 
…ed (#6220)

Co-authored-by: DmitriyLewen <[email protected]>
@DmitriyLewen @knqyf263
feat(java): mark dependencies from maven-invoker-plugin integration…
617c3e3 
… tests pom.xml files as `Dev` (#6213)

Signed-off-by: knqyf263 <[email protected]>
Co-authored-by: knqyf263 <[email protected]>
@evacchi
chore(deps): bump wazero from 1.2.1 to 1.6.0 (#6290)
2a9d9bd 
Signed-off-by: Edoardo Vacchi <[email protected]>
@parvez0 @DmitriyLewen
feat(image): customer podman host or socket option (#6256)
9d2057a 
Co-authored-by: DmitriyLewen <[email protected]>
Co-authored-by: DmitriyLewen <[email protected]>
@mfechner
docs: Added install instructions for FreeBSD (#6293)
d6c40ce
@DmitriyLewen
fix(nodejs): add name validation for package name from package.json (…
12c5bf0 
…#6268)
@DmitriyLewen
fix(db): use schema version as tag only for trivy-db and `trivy-jav…
96bd7ac 
…a-db` registries by default (#6219)
@DmitriyLewen
fix(amazon): check only major version of AL to find advisories (#6295)
fb8c516
@knqyf263 @DmitriyLewen
refactor(sbom): add intermediate representation for BOM (#6240)
8fcef35 
Signed-off-by: knqyf263 <[email protected]>
Co-authored-by: DmitriyLewen <[email protected]>
@nikpivkin
refactor(terraform): remove unused custom error (#6303)
aa19aaf
@nikpivkin
fix(terraform): fix policy document retrieval (#6276)
102b6df
@nikpivkin
docs(terraform): improve documentation for filtering by inline commen…
71da44f 
…ts (#6284)
@knqyf263 @DmitriyLewen
refactor(sbom): use intermediate representation for SPDX (#6310)
ab74caa 
Signed-off-by: knqyf263 <[email protected]>
Co-authored-by: DmitriyLewen <[email protected]>
@bedla @DmitriyLewen
feat(sbom): Support license detection for SBOM scan (#6072)
eb3ceb3 
Co-authored-by: DmitriyLewen <[email protected]>
@evacchi
chore: updates wazero to v1.7.0 (#6301)
dd9620e 
Signed-off-by: Edoardo Vacchi <[email protected]>
@DmitriyLewen
fix: increase the default buffer size for scanning dpkg status files …
3177924 
…by 2 times (#6298)
@knqyf263 @DmitriyLewen
feat(vex): consider root component for relationships (#6313)
c4022d6 
Co-authored-by: DmitriyLewen <[email protected]>
@DmitriyLewen
feat(java): add support licenses and graph for gradle lock files (#6140)
f6c5d58
@dependabot
chore(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0 (#…
8ec3938 
…6321)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@santhosh1729 santhosh1729 reopened this Mar 21, 2024
@santhosh1729 santhosh1729 merged commit 39513cc into santhosh1729:main Mar 21, 2024
29 of 31 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.