Releases: stackrox/scanner
Releases · stackrox/scanner
2.34.0
What's Changed
- chore(deps): update rhtap references (master) by @red-hat-konflux in #1423
- chore(deps): update rhtap references (master) by @red-hat-konflux in #1431
- Red Hat Konflux update scanner-db-slim by @red-hat-konflux in #1437
- build(deps): bump github.com/containers/image/v5 from 5.29.2 to 5.30.0 by @dependabot in #1435
- e2e: migrate GCR image to Quay by @RTann in #1441
- build(deps): bump cloud.google.com/go/storage from 1.38.0 to 1.39.0 by @dependabot in #1433
- ROX-20752: scanner-slim konflux onboarding by @tommartensen in #1429
- chore: Override
cpu
requests
for bad days in Konflux by @msugakov in #1401 - build(deps): bump cloud.google.com/go/storage from 1.39.0 to 1.39.1 by @dependabot in #1442
- build(deps): bump google.golang.org/grpc from 1.62.0 to 1.62.1 by @dependabot in #1434
- build(deps): bump go.uber.org/ratelimit from 0.3.0 to 0.3.1 by @dependabot in #1443
- build(deps): bump google.golang.org/protobuf from 1.28.0 to 1.33.0 in /tools/linters by @dependabot in #1444
- chore(deps): use stackrox fork of gogo by @janisz in #1447
- ROX-22044: postgresql 15 by @RTann in #1416
- chore(deps): update rhtap references (master) by @red-hat-konflux in #1438
- chore: add expiry label to images by @RTann in #1446
- build(deps): bump the actions group with 1 update by @dependabot in #1448
- build(deps): bump github.com/golang/protobuf from 1.5.3 to 1.5.4 by @dependabot in #1449
- build(deps): bump github.com/PuerkitoBio/goquery from 1.9.0 to 1.9.1 by @dependabot in #1450
- build(deps): bump github.com/docker/docker from 25.0.3+incompatible to 25.0.5+incompatible by @dependabot in #1451
- chore(go): go1.21.8 by @RTann in #1452
- use custom bolthelper package by @RTann in #1455
- build(deps): bump the actions group with 1 update by @dependabot in #1459
- build(deps): bump github.com/distribution/reference from 0.5.0 to 0.6.0 by @dependabot in #1457
- build(deps): bump google.golang.org/api from 0.167.0 to 0.171.0 by @dependabot in #1458
- chore(go): bump go.mod to go1.21 by @RTann in #1456
- chore(deps): bump stackrox/rox dep by @RTann in #1454
- chore(deps): update rhtap references (master) by @red-hat-konflux in #1453
- build(deps): bump cloud.google.com/go/storage from 1.39.1 to 1.40.0 by @dependabot in #1460
- build(deps): bump github.com/go-git/go-git/v5 from 5.11.0 to 5.12.0 by @dependabot in #1461
- build(deps): bump google.golang.org/api from 0.171.0 to 0.172.0 by @dependabot in #1462
- chore(deps): update rhtap references (master) by @red-hat-konflux in #1463
- ROX-19862: Add manual entry for CVE-2023-32697 by @dcaravel in #1464
- build(deps): bump golang.org/x/sys from 0.18.0 to 0.19.0 by @dependabot in #1470
- chore: Expand RHACS in Konflux Dockerfile labels by @msugakov in #1473
- chore(deps): update rhtap references by @red-hat-konflux in #1466
- chore(ci): move docker image to quay by @RTann in #1474
- ROX-18606: Add multi-arch support for s390x and ppc64le using docker buildx by @kcrane in #1469
- build(deps): bump actions/add-to-project from 1.0.0 to 1.0.1 in the actions group by @dependabot in #1479
- build(deps): bump google.golang.org/api from 0.172.0 to 0.173.0 by @dependabot in #1480
- build(deps): bump google.golang.org/grpc from 1.62.1 to 1.63.2 by @dependabot in #1471
- ROX-23563: Add diff-dumps to GHA artifacts by @BradLugo in #1468
- ROX-21744: allow sensor/scanner comms in non-ocp (2/2) by @dcaravel in #1478
- chore(deps): bump docker-registry-client by @RTann in #1481
- build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0 by @dependabot in #1482
- build(deps): bump google.golang.org/api from 0.173.0 to 0.176.1 by @dependabot in #1485
- ROX-22889: Create new genesis dump by @dcaravel in #1486
- ROX-23848, ROX-23849, ROX-23853: update alpine and ubuntu support by @RTann in #1465
- chore(deps): update rhtap references by @red-hat-konflux in #1475
- chore: go1.21.9 by @RTann in #1491
- build(deps): bump github.com/PuerkitoBio/goquery from 1.9.1 to 1.9.2 by @dependabot in #1494
- chore(deps): update rhtap references by @red-hat-konflux in #1493
- fix: update external-contributor triaging workflow by @tommartensen in #1496
- build(deps): bump google.golang.org/api from 0.176.1 to 0.178.0 by @dependabot in #1498
- build(deps): bump golang.org/x/sys from 0.19.0 to 0.20.0 by @dependabot in #1499
- Fix RHSA-2022:7288 test case by @daynewlee in #1501
- ROX-18606, ROX-24135: add arm64, s390x, and ppc64le support to scanner ci builds by @kcrane in #1490
- chore(deps): update rhtap references to 2d39df1 by @red-hat-konflux in #1504
- ROX-24081: use make tag result in image names on Konflux by @tommartensen in #1503
- ROX-22474: push Konflux images to quay.io/rhacs-eng by @tommartensen in #1509
- chore(deps): update rhtap references to 1f62eaf by @red-hat-konflux in #1505
- ROX-23123: Verifying File Integrity while updating offline bundle by @daynewlee in #1497
- chore: stop logging pings by @RTann in #1511
- build(deps): bump github.com/prometheus/client_golang from 1.19.0 to 1.19.1 by @dependabot in #1507
- build(deps): bump github.com/containers/image/v5 from 5.30.0 to 5.30.1 by @dependabot in #1514
- ROX-20232: Reduce duplication in Scanner Konflux pipelines by @msugakov in #1492
- build(deps): bump cloud.google.com/go/storage from 1.40.0 to 1.41.0 by @dependabot in #1506
- fix(ci): account for CVE-2023-42366 by @RTann in #1516
- build(deps): bump google.golang.org/grpc from 1.63.2 to 1.64.0 by @dependabot in #1508
- style: Adjust YAML IDE formatting and reformat
.tekton/*.yaml
by @msugakov in #1515 - build(deps): bump github.com/containers/image/v5 from 5.30.1 to 5.31.0 by @dependabot in #1524
- build(deps): bump google.golang.org/api from 0.178.0 to 0.181.0 by @dependabot in #1525
- chore(deps): update rhtap references by @red-hat-konflux in #1510
- ROX-20232: Unify PR and push
PipelineRun
-s by @msugakov in #1526 - build(deps): bump google.golang.org/api from 0.181.0 to 0.182.0 by @dependabot in #1528
- ROX-24116: Fix tags for
init
and other cleanups by @msugakov in #1527 - chore(deps): update rhtap references by @red-hat-konflux in #1530
- fix(ROX-23707): scanner-db-slim must have an initdb entrypoint directory by @tommartensen in #1536
- chore: Swap
TAG_SUFFIX
forSCANNER_TAG
by @msugakov in #1532 - fix(ci): reorder gke tags and labels variable expansions by @BradLugo in #1513
- build(deps): bump golang.org/x/sys from 0.20.0 to 0.21.0 by @dependabot in #1537
- build(deps): bump google.golang.org/api from 0.182.0 to 0.183.0 by @dependabot in #1538
- ROX-20230: Let images on Konflux expire after 1 year by @tommartensen in https://github.com/stackrox/scann...
2.32.4
2.33.5
2.32.3
2.33.4
2.33.3
What's Changed
- added new dump info by @daynewlee in #1309
- build(deps): bump go.uber.org/goleak from 1.2.1 to 1.3.0 by @dependabot in #1305
- build(deps): bump github.com/docker/docker from 24.0.6+incompatible to 24.0.7+incompatible by @dependabot in #1312
- chore: account for OpenShift 4.14 by @RTann in #1313
- build(deps): bump github.com/go-git/go-git/v5 from 5.9.0 to 5.10.0 by @dependabot in #1316
- build(deps): bump google.golang.org/api from 0.148.0 to 0.149.0 by @dependabot in #1315
- build(deps): bump cloud.google.com/go/storage from 1.33.0 to 1.34.0 by @dependabot in #1314
- chore(e2e): update tests by @RTann in #1317
- build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 by @dependabot in #1320
- build(deps): bump github.com/gorilla/mux from 1.8.0 to 1.8.1 by @dependabot in #1319
- build(deps): bump cloud.google.com/go/storage from 1.34.0 to 1.34.1 by @dependabot in #1321
- fix(e2e): CVE-2023-28708 description by @RTann in #1322
- build(deps): bump google.golang.org/api from 0.149.0 to 0.150.0 by @dependabot in #1323
- build(deps): bump golang.org/x/sys from 0.13.0 to 0.14.0 by @dependabot in #1324
- build(deps): bump cloud.google.com/go/storage from 1.34.1 to 1.35.1 by @dependabot in #1325
- chore(nvd): use NVD API v2 by @RTann in #1318
- fix(nvd): slow down API requests by @RTann in #1326
- revert NVD API changes by @RTann in #1327
- build(deps): bump github.com/containers/image/v5 from 5.28.0 to 5.29.0 by @dependabot in #1330
- build(deps): bump google.golang.org/api from 0.150.0 to 0.151.0 by @dependabot in #1331
- chore(e2e): fix tests by @RTann in #1333
- build(deps): bump golang.org/x/sys from 0.14.0 to 0.15.0 by @dependabot in #1337
- build(deps): bump github.com/go-git/go-git/v5 from 5.10.0 to 5.10.1 by @dependabot in #1335
- chore: fix shellcheck 1091 for all scripts by @BradLugo in #1338
- build(deps): bump google.golang.org/api from 0.151.0 to 0.152.0 by @dependabot in #1336
- chore(nvd): use NVD API v2 by @RTann in #1329
- chore(e2e): account for CVE-2023-46589 by @RTann in #1340
- build(deps): bump google.golang.org/api from 0.152.0 to 0.153.0 by @dependabot in #1341
- chore(nvd): add more retries by @RTann in #1348
- ROX-21387: batch insert vulns by @RTann in #1345
- fix test on package jackson-databind 2.9.10.4 by @daynewlee in #1350
- ROX-21319: Increase DB connection retries by @dcaravel in #1349
- build(deps): bump google.golang.org/grpc from 1.59.0 to 1.60.0 by @dependabot in #1351
- build(deps): bump github.com/go-git/go-git/v5 from 5.10.1 to 5.11.0 by @dependabot in #1353
- build(deps): bump google.golang.org/api from 0.153.0 to 0.154.0 by @dependabot in #1352
- build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 by @dependabot in #1355
- chore: renew certs by @RTann in #1354
- build(deps): bump google.golang.org/grpc from 1.60.0 to 1.60.1 by @dependabot in #1356
- build(deps): bump cloud.google.com/go/storage from 1.35.1 to 1.36.0 by @dependabot in #1357
- build(deps): bump github.com/prometheus/client_golang from 1.17.0 to 1.18.0 by @dependabot in #1358
- chore(scanner-db): update GPG key link by @RTann in #1364
- chore: set GOMEMLIMIT to 95% configured limit by @RTann in #1363
- chore(e2e): fix .NET Core Runtime tests by @RTann in #1365
- build(deps): bump golang.org/x/sys from 0.15.0 to 0.16.0 by @dependabot in #1367
- build(deps): bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 by @dependabot in #1362
- build(deps): bump google.golang.org/api from 0.154.0 to 0.155.0 by @dependabot in #1366
- ROX-21124: Move non-e2e testing OSCI jobs to GitHub Actions by @BradLugo in #1347
- chore(e2e): fix dotnet tests by @BradLugo in #1368
- ROX-21124: Fix upload-dumps-for-downstream GHA job by @BradLugo in #1371
- ROX-21124: Fix sanity-check-vuln-updates GHA job by @BradLugo in #1372
- ROX-21124: Increase image pull timeout in OSCI to match stackrox/stackrox by @BradLugo in #1377
- build(deps): bump google.golang.org/api from 0.155.0 to 0.157.0 by @dependabot in #1378
- Update artifact actions in GHA by @BradLugo in #1379
- fix(dependabot): group actions update by @BradLugo in #1380
- Fix image scanning e2e test by @daynewlee in #1382
- build(deps): bump google.golang.org/grpc from 1.60.1 to 1.61.0 by @dependabot in #1384
- build(deps): bump cloud.google.com/go/storage from 1.36.0 to 1.37.0 by @dependabot in #1388
- build(deps): bump google.golang.org/api from 0.157.0 to 0.161.0 by @dependabot in #1389
- build(deps): bump github.com/containers/image/v5 from 5.29.0 to 5.29.2 by @dependabot in #1390
- ROX-20751: Add Konflux build pipeline for scanner-db by @kylape in #1387
- (chore): Setup
CODEOWNERS
for.tekton
directory by @msugakov in #1396 - ROX-20753: Add
scanner
RHTAP build pipeline by @kylape in #1334 - chore(deps): update rhtap references (master) by @red-hat-konflux in #1397
- (chore): Unify downloader script for rhtap scanner by @msugakov in #1395
- build(deps): bump google.golang.org/api from 0.161.0 to 0.162.0 by @dependabot in #1399
- chore(deps): update rhtap references by @red-hat-konflux in #1398
- Fix E2E test by @daynewlee in #1402
- build(deps): bump golang.org/x/sys from 0.16.0 to 0.17.0 by @dependabot in #1405
- build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1 by @dependabot in #1407
- fix(e2e): update test by @RTann in #1408
- chore(deps): update rhtap references by @red-hat-konflux in #1404
- build(deps): bump google.golang.org/api from 0.162.0 to 0.165.0 by @dependabot in #1409
- chore(deps): update rhtap references by @red-hat-konflux in #1410
- build(deps): bump cloud.google.com/go/storage from 1.37.0 to 1.38.0 by @dependabot in #1412
- Include latest v4 vulnerability by @daynewlee in #1400
- Update v4 file download URL by @daynewlee in #1414
- chore(deps): update rhtap references by @red-hat-konflux in #1413
- Bump Genesis Dump by @RTann in #1417
- build(deps): bump the actions group with 1 update by @dependabot in #1419
- build(deps): bump github.com/PuerkitoBio/goquery from 1.8.1 to 1.9.0 by @dependabot in #1420
- build(deps): bump google.golang.org/grpc from 1.61.1 to 1.62.0 by @dependabot in #1421
- build(deps): bump github.com/prometheus/client_golang from 1.18.0 to 1.19.0 by @dependabot in #1422
New Contributors
Full Changelog: 2.32.0...2.33.3
2.32.2
2.31.4
Full Changelog: 2.31.3...2.31.4
2.31.3
Full Changelog: 2.31.2...2.31.3
2.30.7
Full Changelog: 2.30.6...2.30.7