Skip to content

v2.2.4

Latest
Latest

Choose a tag to compare

View all tags
@Nonetss Nonetss released this 13 Oct 06:52
v2.2.4
6df45dc

Security results that keep themselves up to date, poll for updates for many stacks at once and a ⌘K search palette.

Features

  • Scans that don't go stale. The backend now rescans images on its own. A background sweep, about 30 seconds after start and then every 5 minutes, queues:

    • images that were never scanned, without anyone opening the Security page;
    • the images of stacks that Komodo deployed by itself (Global Auto Update, Komodo's UI, a procedure), read from Komodo's Updates;
    • images whose last scan attempt is older than TRIVY_RESCAN_INTERVAL_HOURS (24 by default), so new CVEs show up on images that haven't changed.

    The sweep keeps no state of its own, so a restart loses nothing, and deploys made through Komodo CD aren't scanned twice.

  • Poll for updates from the bulk bar. Select stacks and turn on Komodo's poll for updates for all of them in one go, so the Global Auto Update checks their images. Session only, like deleting a stack (stacks.pollForUpdates).

  • ⌘K search. The top bar search is now a palette over pages, recent pages and stacks, also on mobile.

  • Most exposed images link to their stack on the overview.

Fixes

  • The chart's screen reader table no longer peeks its caption over the title.

Look

  • The pick-a-stack prompt is centered in the empty detail pane.

Configuration

Variable Default
TRIVY_RESCAN_INTERVAL_HOURS 24 Hours before an image is rescanned on its own. 0 turns off the periodic rescan only; deploys made inside Komodo still trigger scans.

For contributors

  • The Docker dev backend restarts after each sync: Bun stopped watching files the sync recreated, so edits never reloaded.

Images

ghcr.io/nonetss/komodo-cd-backend:2.2.4
ghcr.io/nonetss/komodo-cd-frontend:2.2.4
ghcr.io/nonetss/komodo-cd-gateway:2.2.4

latest keeps tracking main. Pin the installer to this release with:

curl -fsSL https://raw.githubusercontent.com/Nonetss/Komodo-CD/v2.2.4/scripts/bootstrap.sh | KCD_REF=v2.2.4 bash

Upgrading

No migrations. compose.yml passes the new optional TRIVY_RESCAN_INTERVAL_HOURS to the backend; with your own compose file the backend uses 24 when it's not set. Pull the new images and recreate the stack:

docker compose pull
docker compose up -d

On the first sweep after upgrading, every image whose last scan is older than the interval is queued once.

Assets 2
Loading