Merge pull request #585 from wkozlik/master

Release v0.2.2

CHANGELOG.md

@@ -1,6 +1,22 @@
 This is the changelog of Grafeas server releases. For more information on
 versioning, see [versioning](docs/versioning.md) document.
 
+v0.2.2
+  * Enhanced support for Vulnerability Notes and Occurrences, with the following changes:
+    * Indicate the location at which an affected package was found in the container image.
+    * CVSS proto compatible with v2 and v3.
+    * More detailed status of language package scans in the Discovery occurrence.
+    * Added cvss_version field to indicate which version was used to populate fields: cvss_score and severity.
+    * Added support for Vex Assessments.
+  * Added support for language packages in Package Notes and Occurrences.
+  * Enhanced SLSA support.
+    * Added support for SLSA v0.2 to the intoto statement.
+    * Added SLSA v0.2 converter.
+  * Added SBOM support.
+  * Updated versions of frameworks and libraries
+    * Use ANTLR v4.
+    * Golang 1.20.
+
 v0.2.1:
   * Update grpc-gateway v2.7.3 to generate compatible openapi spec.
 

grafeas-charts/Chart.yaml

@@ -2,5 +2,5 @@ apiVersion: v1
 appVersion: "v0.1.0"
 description: A Helm chart for Kubernetes
 name: grafeas-charts
-version: 0.2.1
+version: 0.2.2
 icon: https://raw.githubusercontent.com/grafeas/grafeas/master/logo/grafeas-logo-128.png

grafeas-charts/values.yaml

@@ -7,7 +7,7 @@ secret:
 image:
   repository: us.gcr.io/grafeas
   name: grafeas-server
-  tag: v0.2.1
+  tag: v0.2.2
   pullPolicy: IfNotPresent
 
 nameOverride: "grafeas-server"