v0.7.5

Changelog

• 42feab0: ci: declare what this module ships, both halves of it (#66) (@allanice001)
• ab1aab9: fix: scan the tree you are gating, not only the history behind it (#68) (@allanice001)

Install

go install github.com/DragonSecurity/dragonguard/cmd/dragon@v0.7.5

or download a binary above. The scanners it drives -- Trivy, gitleaks,
osv-scanner and opengrep -- are installed separately; dragon engines
reports which of them it can find.

v0.7.4

Changelog

• 558e0d4: fix: a DAST engine that never reached its target must not report clean (#65) (@allanice001)

Install

go install github.com/DragonSecurity/dragonguard/cmd/dragon@v0.7.4

or download a binary above. The scanners it drives -- Trivy, gitleaks,
osv-scanner and opengrep -- are installed separately; dragon engines
reports which of them it can find.

v0.7.3

Changelog

• 0ce4417: fix: a commented-out block is a comment, not configuration (#63) (@allanice001)
• 0a44283: fix: drop the setting that could not resolve, not the whole file (#64) (@allanice001)

Install

go install github.com/DragonSecurity/dragonguard/cmd/dragon@v0.7.3

or download a binary above. The scanners it drives -- Trivy, gitleaks,
osv-scanner and opengrep -- are installed separately; dragon engines
reports which of them it can find.

v0.7.2

Changelog

• 2621fe1: fix: a commented-out block is a comment, not configuration (@allanice001)

Install

go install github.com/DragonSecurity/dragonguard/cmd/dragon@v0.7.2

or download a binary above. The scanners it drives -- Trivy, gitleaks,
osv-scanner and opengrep -- are installed separately; dragon engines
reports which of them it can find.

v0.7.1

Changelog

• 8b200a7: fix: a repository must not be able to read the scanner's environment (#62) (@allanice001)

Install

go install github.com/DragonSecurity/dragonguard/cmd/dragon@v0.7.1

or download a binary above. The scanners it drives -- Trivy, gitleaks,
osv-scanner and opengrep -- are installed separately; dragon engines
reports which of them it can find.

v0.7.0

Changelog

• aa45119: feat: credentials a DAST scan can actually use, and a selector for one finding (#61) (@allanice001)

Install

go install github.com/DragonSecurity/dragonguard/cmd/dragon@v0.7.0

or download a binary above. The scanners it drives -- Trivy, gitleaks,
osv-scanner and opengrep -- are installed separately; dragon engines
reports which of them it can find.

v0.6.2

Changelog

• 01aa116: fix: accept the identifier the report actually prints (#60) (@allanice001)

Install

go install github.com/DragonSecurity/dragonguard/cmd/dragon@v0.6.2

or download a binary above. The scanners it drives -- Trivy, gitleaks,
osv-scanner and opengrep -- are installed separately; dragon engines
reports which of them it can find.

v0.6.1

Changelog

• 5027536: feat: say which acceptance matched nothing (#59) (@allanice001)

Install

go install github.com/DragonSecurity/dragonguard/cmd/dragon@v0.6.1

or download a binary above. The scanners it drives -- Trivy, gitleaks,
osv-scanner and opengrep -- are installed separately; dragon engines
reports which of them it can find.

v0.6.0

Changelog

• adb0517: feat: a place to write down a finding you are not going to fix (#55) (@allanice001)
• 9c077e5: feat: ships:, so Go can say which dependencies reach production (#56) (@allanice001)
• 0f6d110: fix: a setting nothing reads now says so (#58) (@allanice001)
• ca4b07b: fix: an advisory is one advisory, whichever engine read it (#54) (@allanice001)

Install

go install github.com/DragonSecurity/dragonguard/cmd/dragon@v0.6.0

or download a binary above. The scanners it drives -- Trivy, gitleaks,
osv-scanner and opengrep -- are installed separately; dragon engines
reports which of them it can find.

v0.5.10

Changelog

• 72bba03: fix: one finding per dependency, not one per rule that matched (#52) (@allanice001)
• 48a57cc: fix: zap reported its banner instead of why it failed (#53) (@allanice001)

Install

go install github.com/DragonSecurity/dragonguard/cmd/dragon@v0.5.10

or download a binary above. The scanners it drives -- Trivy, gitleaks,
osv-scanner and opengrep -- are installed separately; dragon engines
reports which of them it can find.