Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Merge Main branch #136

Merged
merged 155 commits into from
May 9, 2024
Merged

Merge Main branch #136

merged 155 commits into from
May 9, 2024

Conversation

AnaisUrlichs
Copy link
Owner

Description

Related issues

  • Close #XXX

Related PRs

  • #XXX
  • #YYY

Remove this section if you don't have related PRs.

Checklist

  • I've read the guidelines for contributing to this repository.
  • I've followed the conventions in the PR title.
  • I've added tests that prove my fix is effective or that my feature works.
  • I've updated the documentation with the relevant information (if needed).
  • I've added usage information (if the PR introduces new options)
  • I've included a "before" and "after" example to the description (if the PR is a user interface change).

nikpivkin and others added 30 commits March 7, 2024 01:12
@nikpivkin
fix(cloudformation): support of all SSE algorithms for s3 (aquasecuri…
337cb75 
…ty#6270)
@chrisking @DmitriyLewen
feat(secret): Support for detecting Hugging Face Access Tokens (aquas…
6639911 
…ecurity#6236)

Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
@nikpivkin
test(terraform): skip cached modules (aquasecurity#6281)
d7d7265
@dus7eh @DmitriyLewen
fix(license): reorder logic of how python package licenses are acquir…
56cedc0 
…ed (aquasecurity#6220)

Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
@DmitriyLewen @knqyf263
feat(java): mark dependencies from maven-invoker-plugin integration…
617c3e3 
… tests pom.xml files as `Dev` (aquasecurity#6213)

Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: knqyf263 <knqyf263@gmail.com>
@evacchi
chore(deps): bump wazero from 1.2.1 to 1.6.0 (aquasecurity#6290)
2a9d9bd 
Signed-off-by: Edoardo Vacchi <evacchi@users.noreply.github.com>
@parvez0 @DmitriyLewen
feat(image): customer podman host or socket option (aquasecurity#6256)
9d2057a 
Co-authored-by: DmitriyLewen <91113035+DmitriyLewen@users.noreply.github.com>
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
@mfechner
docs: Added install instructions for FreeBSD (aquasecurity#6293)
d6c40ce
@DmitriyLewen
fix(nodejs): add name validation for package name from package.json (…
12c5bf0 
…aquasecurity#6268)
@DmitriyLewen
fix(db): use schema version as tag only for trivy-db and `trivy-jav…
96bd7ac 
…a-db` registries by default (aquasecurity#6219)
@DmitriyLewen
fix(amazon): check only major version of AL to find advisories (aquas…
fb8c516 
…ecurity#6295)
@knqyf263 @DmitriyLewen
refactor(sbom): add intermediate representation for BOM (aquasecurity…
8fcef35 
…#6240)

Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: DmitriyLewen <91113035+DmitriyLewen@users.noreply.github.com>
@nikpivkin
refactor(terraform): remove unused custom error (aquasecurity#6303)
aa19aaf
@nikpivkin
fix(terraform): fix policy document retrieval (aquasecurity#6276)
102b6df
@nikpivkin
docs(terraform): improve documentation for filtering by inline commen…
71da44f 
…ts (aquasecurity#6284)
@knqyf263 @DmitriyLewen
refactor(sbom): use intermediate representation for SPDX (aquasecurit…
ab74caa 
…y#6310)

Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
@bedla @DmitriyLewen
feat(sbom): Support license detection for SBOM scan (aquasecurity#6072)
eb3ceb3 
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
@evacchi
chore: updates wazero to v1.7.0 (aquasecurity#6301)
dd9620e 
Signed-off-by: Edoardo Vacchi <evacchi@users.noreply.github.com>
@DmitriyLewen
fix: increase the default buffer size for scanning dpkg status files …
3177924 
…by 2 times (aquasecurity#6298)
@knqyf263 @DmitriyLewen
feat(vex): consider root component for relationships (aquasecurity#6313)
c4022d6 
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
@DmitriyLewen
feat(java): add support licenses and graph for gradle lock files (aqu…
f6c5d58 
…asecurity#6140)
@dependabot
chore(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0 (a…
8ec3938 
…quasecurity#6321)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@mayrstefan
chore(ubuntu): Add Ubuntu 22.04 EOL date (aquasecurity#6371)
6c81e55
@DmitriyLewen
fix(report): don't include empty strings in `.vulnerabilities[].ident…
1870f28 
…ifiers[].url` when `gitlab.tpl` is used (aquasecurity#6348)
@DmitriyLewen
fix(sbom): add check for CreationInfo to nil when detecting SPDX cr…
e866bd5 
…eated using Trivy (aquasecurity#6346)
@DmitriyLewen
fix(server): add Locations for Packages in client/server mode (aqua…
a2482c1 
…security#6366)
@dependabot
chore(deps): bump github.com/docker/docker from 25.0.3+incompatible t…
1b68327 
…o 25.0.5+incompatible (aquasecurity#6364)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@DmitriyLewen
fix(java): parse modules from pom.xml files once (aquasecurity#6312)
7c409fd
@nikpivkin
fix(terraform): сhecking SSE encryption algorithm validity (aquasecur…
abd62ae 
…ity#6341)
@nikpivkin
docs(terraform): add file patterns for Terraform Plan (aquasecurity#6393
97f95c4 
)
chen-keinan and others added 29 commits May 2, 2024 11:08
@chen-keinan
BREAKING: add support for k8s disable-node-collector flag (aquasecu…
c6d5d85 
…rity#6311)

Signed-off-by: chenk <hen.keinan@gmail.com>
@chen-keinan
feat: support --skip-images scanning flag (aquasecurity#6334)
e739ab8 
Signed-off-by: chenk <hen.keinan@gmail.com>
@chen-keinan
docs: update trivy k8s with new experience (aquasecurity#6465)
a2a02de 
Signed-off-by: chenk <hen.keinan@gmail.com>
@DmitriyLewen
docs: use generic link from trivy-repo (aquasecurity#6606)
6a2225b
@dependabot
chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager fro…
cdee703 
…m 1.15.15 to 1.16.15 (aquasecurity#6593)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@simar7
feat(misconf): Use updated terminology for misconfiguration checks (a…
37da98d 
…quasecurity#6476)

Signed-off-by: Simar <simar@linux.com>
@maxthier
docs: remove mention of GitLab Gold because it doesn't exist anymore (a…
715963d 
…quasecurity#6609)
@dependabot
chore(deps): bump github.com/docker/docker from 26.0.1+incompatible t…
58cfd1b 
…o 26.0.2+incompatible (aquasecurity#6612)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@chen-keinan
docs: trivy-k8s new experiance remove un-used section (aquasecurity#6608
3ccb1a0 
)

Signed-off-by: chenk <hen.keinan@gmail.com>
@simar7
perf(misconf): Improve cause performance (aquasecurity#6586)
770b141 
Signed-off-by: Simar <simar@linux.com>
@knqyf263
feat: introduce package UIDs for improved vulnerability mapping (aqua…
998f750 
…security#6583)

Signed-off-by: knqyf263 <knqyf263@gmail.com>
@DmitriyLewen
refactor: move setting scanners when using compliance reports to flag…
14c1024 
… parsing (aquasecurity#6619)
@nikpivkin
fix(misconf): do not use semver for parsing tf module versions (aquas…
9c794c0 
…ecurity#6614)
@nikpivkin
fix(misconf): load cached tf modules (aquasecurity#6607)
7a25dad
@knqyf263
fix(fs): handle default skip dirs properly (aquasecurity#6628)
8016b82 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
@DmitriyLewen
chore(deps): bump knqyf263/trivy-issue-action to v0.0.6 (aquasecuri…
290462b 
…ty#6632)
@nikpivkin
docs: fix usage of image-config-scanners (aquasecurity#6635)
2482aa7
@katrinleinweber
docs: link warning to both timeout config options (aquasecurity#6620)
38e2fbf
@DmitriyLewen
ci: add generic dir to deb deploy script (aquasecurity#6636)
16e9fc0
@nikpivkin
fix(misconf): skip Rego errors with a nil location (aquasecurity#6638)
a2c522d
@nikpivkin @simar7
perf(misconf): parse rego input once (aquasecurity#6615)
67c6b1d 
Signed-off-by: Simar <simar@linux.com>
Co-authored-by: Simar <simar@linux.com>
@chen-keinan
fix: use of specified context to obtain cluster name (aquasecurity#6645)
39ebed4 
Signed-off-by: chenk <hen.keinan@gmail.com>
@knqyf263 @DmitriyLewen
refactor: unify Library and Package structs (aquasecurity#6633)
3eecfc6 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: DmitriyLewen <91113035+DmitriyLewen@users.noreply.github.com>
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
@nikpivkin
feat(misconf): add Terraform 'removed' block to schema (aquasecurity#…
b7a0a13 
…6640)
@nikpivkin
feat(misconf): support symlinks inside of Helm archives (aquasecurity…
4eae37c 
…#6621)
@simar7
chore(misconf): Clean up iac logger (aquasecurity#6642)
fe5d40e
@knqyf263
refactor: re-define module structs for serialization (aquasecurity#6655)
04a6073 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
@nikpivkin
refactor(misconf): remove extrafs (aquasecurity#6656)
357c358
@AnaisUrlichs
Merge branch 'checks-contrib-docs' into main
4d5679b
@AnaisUrlichs AnaisUrlichs merged commit b33c5f7 into checks-contrib-docs May 9, 2024
19 of 21 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.