Skip to content

v1.16.0

Latest
Latest

Choose a tag to compare

View all tags
@diatreme diatreme released this 18 Sep 06:57
Immutable release. Only release title and notes can be modified.
v1.16.0
b451e58

v1.16.0 (2026-09-18)

Bug Fixes

  • Add Checkov config file detection and use in IaC scan step (#69, a4dc66f)

  • Add Checkov config file detection and use in IaC scan step (#66, 38d94bb)

  • Add container path filtering to skip builds when no relevant files change (#69, a4dc66f)

  • Add container path filtering to skip builds when no relevant files change (#66, 38d94bb)

  • Enhance Checkov scanning logic to filter IaC files and handle empty targets (#69, a4dc66f)

  • Enhance Checkov scanning logic to filter IaC files and handle empty targets (#66, 38d94bb)

  • Enhance Trivy installation and scanning logic to handle failures gracefully (#69, a4dc66f)

  • Enhance Trivy installation and scanning logic to handle failures gracefully (#66, 38d94bb)

  • Handle absence of Trivy ignore file by running scanner without ignore and updating SARIF output steps (#69, a4dc66f)

  • Handle absence of Trivy ignore file by running scanner without ignore and updating SARIF output steps (#66, 38d94bb)

  • Remove continue-on-error for security audits in workflow (#69, a4dc66f)

  • Remove continue-on-error for security audits in workflow (#66, 38d94bb)

  • Simplify workflow_dispatch inputs in semantic-release configuration (#69, a4dc66f)

  • Simplify workflow_dispatch inputs in semantic-release configuration (#66, 38d94bb)

  • Specify 'vuln' scanner for Trivy steps in security-scan workflow (#69, a4dc66f)

  • Specify 'vuln' scanner for Trivy steps in security-scan workflow (#66, 38d94bb)

  • Update .github/workflows/docker-release.yaml (#69, a4dc66f)

  • Update .github/workflows/docker-release.yaml (#66, 38d94bb)

  • Update security scan documentation and workflow to handle optional ignore files (#69, a4dc66f)

  • Update security scan documentation and workflow to handle optional ignore files (#66, 38d94bb)

  • Update security scan workflow to handle optional SARIF upload and trufflehog exclude file (#69, a4dc66f)

  • Update security scan workflow to handle optional SARIF upload and trufflehog exclude file (#66, 38d94bb)

  • Update Semgrep SAST step to install and run via CLI instead of GitHub Action (#69, a4dc66f)

  • Update Semgrep SAST step to install and run via CLI instead of GitHub Action (#66, 38d94bb)

  • Update Semgrep SAST step to use correct action reference in workflow (#69, a4dc66f)

  • Update Semgrep SAST step to use correct action reference in workflow (#66, 38d94bb)

  • Update Trivy version to v0.69.3 and improve installation script logic (#69, a4dc66f)

  • Update Trivy version to v0.69.3 and improve installation script logic (#66, 38d94bb)

Chores

  • Check the status of all checks as the last step, to allow us to see results of all scans run in the mono-job (#69, a4dc66f)

  • Check the status of all checks as the last step, to allow us to see results of all scans run in the mono-job (#66, 38d94bb)

  • deps: Bump actions/github-script from 7.1.0 to 8.0.0 (#68, f27e090)

  • deps: Bump actions/setup-go from 5.6.0 to 6.2.0 (#65, 0276b8c)

  • deps: Bump docker/bake-action from 6.9.0 to 6.10.0 (#66, 38d94bb)

  • deps: Bump github/codeql-action from 3.32.3 to 4.32.3 (#69, a4dc66f)

  • deps: Bump peter-evans/create-pull-request from 7.0.8 to 8.1.0 (#67, acb4221)

Features

  • Add job timeout configuration and enhance lint scan reporting (#69, a4dc66f)

  • Add job timeout configuration and enhance lint scan reporting (#66, 38d94bb)

  • Add lint and security scan workflows with configuration for job timeouts and failure handling (#69, a4dc66f)

  • Add lint and security scan workflows with configuration for job timeouts and failure handling (#66, 38d94bb)

  • Add reusable lint scan workflow for code quality checks (#69, a4dc66f)

  • Add reusable lint scan workflow for code quality checks (#66, 38d94bb)

Detailed Changes: v1.15.0...v1.16.0

Assets 3
Loading