v0.13.1-rc2

Changelog

• 2b2b23c chore: bump defsec v0.86.0 (#1167)
• 36f704c chore: bump golang version 1.20.3 (#1172)
• 31c450b chore: imagePullSecret client/server mode (#1175)
• 1446ea1 fix: node-collector image pull secret support (#1170)
• ec00cc7 fix: ttl config when VulnerabilityScanner is not enabled (#1169)

v0.13.1-rc

Changelog

• f441d1d Split image repositories into registry and repository (#1137)
• 57a0755 build(deps): bump github.com/go-logr/logr from 1.2.3 to 1.2.4 (#1141)
• c444c62 build(deps): bump github.com/onsi/gomega from 1.27.5 to 1.27.6 (#1139)
• 4a05069 build(deps): bump github.com/prometheus/client_golang (#1163)
• 1efca9b build(deps): bump go.uber.org/multierr from 1.10.0 to 1.11.0 (#1140)
• e81db14 build(deps): bump golang.org/x/net from 0.8.0 to 0.9.0 (#1156)
• 8d5544b build(deps): bump golang.org/x/text from 0.8.0 to 0.9.0 (#1155)
• 9bf86ed build(deps): bump sigs.k8s.io/controller-runtime from 0.14.5 to 0.14.6 (#1138)
• c875cc8 chore: bump trivy v0.40.0 (#1166)
• e53fb7d feat: propagate proxy settings to trivy server (#1147)
• 554b773 fix(helm): move end blocks in config.yaml (#1150)

v0.13.0

Changelog

v0.13.0-rc3

Changelog

• b2d49f6 chore: bump node-collector 0.0.6 (#1132)

v0.13.0-rc2

Changelog

• afcc598 chore: bump trivy-version v0.39.0 (#1128)

v0.13.0-rc

Changelog

• a2c45dc Add priority class name to scan job (#1114)
• e0960b1 Fix helm chart configurations and readme (#1099)
• 3d80d96 Send webhook for deleted reports (#1075)
• 11e9ac1 TRIVY_INSECURE never set in ClientServer FS mode (#1049)
• 8f7e56b build(deps): bump actions/setup-go from 3 to 4 (#1082)
• cffff0f build(deps): bump actions/stale from 7 to 8 (#1109)
• 02b0ba9 build(deps): bump github.com/aquasecurity/defsec from 0.84.0 to 0.84.1 (#1105)
• ce1572b build(deps): bump github.com/aquasecurity/trivy from 0.38.1 to 0.38.2 (#1055)
• dcb10ef build(deps): bump github.com/google/go-containerregistry (#1111)
• 755e4e3 build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.0 to 2.9.1 (#1056)
• 9912a1f build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.1 to 2.9.2 (#1106)
• adaaea0 build(deps): bump github.com/onsi/gomega from 1.27.1 to 1.27.3 (#1052)
• a5386cc build(deps): bump github.com/onsi/gomega from 1.27.3 to 1.27.4 (#1087)
• 5f56b26 build(deps): bump github.com/onsi/gomega from 1.27.4 to 1.27.5 (#1110)
• a1f34df build(deps): bump go.uber.org/multierr from 1.9.0 to 1.10.0 (#1107)
• 578c483 build(deps): bump helm/chart-testing-action from 2.3.1 to 2.4.0 (#1108)
• a6f7145 build(deps): bump k8s.io/api from 0.26.2 to 0.26.3 (#1083)
• d83a153 build(deps): bump k8s.io/apiextensions-apiserver from 0.26.1 to 0.26.2 (#1054)
• 0d7268f build(deps): bump k8s.io/apiextensions-apiserver from 0.26.2 to 0.26.3 (#1084)
• 26721eb build(deps): bump sigs.k8s.io/controller-runtime from 0.14.4 to 0.14.5 (#1053)
• fed815f chore: configure compliance specs (#1120)
• b8f6cfd chore: private registries e2e (#1092)
• ac2df76 chore: remove crd symlink (#1115)
• 59c94be chore: remove unused mount volumes (#1117)
• 0cd80df feat: add custom labels to report (#1094)
• 8909a40 feat: make node-collector volume and volume mount configurable (#1091)
• 924e056 fix: CVE-2023-0464 (#1125)
• c03b093 fix: fixing auth issues when accessing private registries using mirroring (#1066)
• 4d1ad11 fix: report send duplicate report to webhook (#1068)
• 5566f60 fix: set trivy-server service resource requests/limits (#1050)
• badf765 incorrect check of ttlReportAnnotationStr in TTLReportReconciler (#1060)
• f57815e prefer nvd score if both nvd and vendor cvss v3 scores exist (#1080)
• 1f04eac typo (#1104)
• cc65584 updating prometheus values in tutorial (#1102)

v0.12.1

Changelog

• 28c43e2 build(deps): bump github.com/aquasecurity/trivy from 0.37.3 to 0.38.1 (#1026)
• 4b5fb3f build(deps): bump github.com/onsi/ginkgo/v2 from 2.8.4 to 2.9.0 (#1028)
• c36cc09 build(deps): bump golang.org/x/net from 0.7.0 to 0.8.0 (#1027)
• aebad46 build(deps): bump k8s.io/api from 0.26.1 to 0.26.2 (#1025)
• 84df941 build(deps): bump sigstore/cosign-installer from 2.8.1 to 3.0.1 (#1023)
• 3f1c018 chore: bump trivy-0.38.1 (#1029)
• c5aeb31 chore: bump-trivy-0.38.2 (#1037)
• 6ec245e chore: revert cosign version to 2.8.1 (#1032)
• 8ad82b3 feat: configure security context (#1034)
• 55e57e2 feat: limit concurrent node-collector jobs (#1042)
• f6b4329 feat: release prepare-v0.12.1-rc (#1045)
• 823bcc3 feature: Add trivy.debug option (#1039)
• 06050cc fix: requeue non-ready nodes (#1022)

v0.12.1-rc

Changelog

• 28c43e2 build(deps): bump github.com/aquasecurity/trivy from 0.37.3 to 0.38.1 (#1026)
• 4b5fb3f build(deps): bump github.com/onsi/ginkgo/v2 from 2.8.4 to 2.9.0 (#1028)
• c36cc09 build(deps): bump golang.org/x/net from 0.7.0 to 0.8.0 (#1027)
• aebad46 build(deps): bump k8s.io/api from 0.26.1 to 0.26.2 (#1025)
• 84df941 build(deps): bump sigstore/cosign-installer from 2.8.1 to 3.0.1 (#1023)
• 3f1c018 chore: bump trivy-0.38.1 (#1029)
• c5aeb31 chore: bump-trivy-0.38.2 (#1037)
• 6ec245e chore: revert cosign version to 2.8.1 (#1032)
• 8ad82b3 feat: configure security context (#1034)
• 55e57e2 feat: limit concurrent node-collector jobs (#1042)
• f6b4329 feat: release prepare-v0.12.1-rc (#1045)
• 823bcc3 feature: Add trivy.debug option (#1039)
• 06050cc fix: requeue non-ready nodes (#1022)

v0.12.0

Changelog

• d302a04 fix!: Helm chart: add missing quote filter in config template (#1015)
• e100287 add trivy_exposedsecrets_info metric with discovered secrets details (#1000)
• e595e35 build(deps): Bump golang.org/x/net from 0.6.0 to 0.7.0 (#980)
• 84a6bde build(deps): bump github.com/aquasecurity/defsec from 0.82.9 to 0.82.10 (#1006)
• 8e03e7a build(deps): bump github.com/onsi/ginkgo/v2 from 2.8.0 to 2.8.3 (#988)
• b101fc9 build(deps): bump github.com/onsi/ginkgo/v2 from 2.8.3 to 2.8.4 (#1005)
• bc2ae29 build(deps): bump github.com/onsi/gomega from 1.26.0 to 1.27.1 (#987)
• 736cad0 build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2 (#1007)
• 849df97 build(deps): bump golang.org/x/net from 0.5.0 to 0.6.0 (#961)
• 001e7df build(deps): bump golang.org/x/text from 0.6.0 to 0.7.0 (#960)
• f13e721 chore: add custom pod labels for trivy-server (#979)
• 98dbed1 chore: add custom podPriority for trivy-server (#982)
• d4f25bb chore: bump trivy 0.38.0 (#1011)
• 705873e chore: bump trivy dep v0.37.3 (#978)
• 9d70e1b chore: remove helm lint from verify-code job (#975)
• 5593362 chore: separate chart testing (#970)
• e5f11c7 chore: separate envtest workflow (#969)
• 8be21d3 chore: support storageClassName for trivy-server statefulset (#977)
• 8f352e6 chore:: update ubuntu-20.04 to ubuntu-22.04 (#990)
• 8d90b5f feat: add TTLSecondsAfterFinished time set (#983)
• 44edfd6 feat: expose more details in trivy_vulnerability_id metric (#962)
• c6dc804 feat: multi secret support (#1008)
• 957eb9b feat: support pss compliance reports (#995)
• 5e0f518 feat: webhook-support-misconfig (#1002)
• cdfedbc fix: ci format (#996)
• 222cc6c fix: code format (#954)
• c364fb5 fix: get the data of the specified severity (#971)
• 8647cd6 properly populate the target attribute of exposed secrets (#993)

v0.12.0-rc

Changelog

• e100287 add trivy_exposedsecrets_info metric with discovered secrets details (#1000)
• e595e35 build(deps): Bump golang.org/x/net from 0.6.0 to 0.7.0 (#980)
• 84a6bde build(deps): bump github.com/aquasecurity/defsec from 0.82.9 to 0.82.10 (#1006)
• 8e03e7a build(deps): bump github.com/onsi/ginkgo/v2 from 2.8.0 to 2.8.3 (#988)
• b101fc9 build(deps): bump github.com/onsi/ginkgo/v2 from 2.8.3 to 2.8.4 (#1005)
• bc2ae29 build(deps): bump github.com/onsi/gomega from 1.26.0 to 1.27.1 (#987)
• 736cad0 build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2 (#1007)
• 849df97 build(deps): bump golang.org/x/net from 0.5.0 to 0.6.0 (#961)
• 001e7df build(deps): bump golang.org/x/text from 0.6.0 to 0.7.0 (#960)
• f13e721 chore: add custom pod labels for trivy-server (#979)
• 98dbed1 chore: add custom podPriority for trivy-server (#982)
• d4f25bb chore: bump trivy 0.38.0 (#1011)
• 705873e chore: bump trivy dep v0.37.3 (#978)
• 9d70e1b chore: remove helm lint from verify-code job (#975)
• 5593362 chore: separate chart testing (#970)
• e5f11c7 chore: separate envtest workflow (#969)
• 8be21d3 chore: support storageClassName for trivy-server statefulset (#977)
• 8f352e6 chore:: update ubuntu-20.04 to ubuntu-22.04 (#990)
• 8d90b5f feat: add TTLSecondsAfterFinished time set (#983)
• 44edfd6 feat: expose more details in trivy_vulnerability_id metric (#962)
• c6dc804 feat: multi secret support (#1008)
• 957eb9b feat: support pss compliance reports (#995)
• 5e0f518 feat: webhook-support-misconfig (#1002)
• cdfedbc fix: ci format (#996)
• 222cc6c fix: code format (#954)
• c364fb5 fix: get the data of the specified severity (#971)
• 8647cd6 properly populate the target attribute of exposed secrets (#993)