v1.3.2

1.3.2 (2026-09-04)

Security Fixes

• align remaining trivy pins to 0.74.0 (c2fa784)

v1.3.1

1.3.1 (2026-09-04)

Bug Fixes

• resolve docker socket GID without getent (4a787ed)

Security Fixes

• bump trivy to 0.74.0 and suppress unreachable grpc CVE (3861ace)

v1.3.0

1.3.0 (2026-06-11)

Features

• event-driven scanning on image pull (go implementation) (6b31f7b)
• event-driven scanning on image pull (python prototype) (d221f91)

v1.2.0

1.2.0 (2026-06-06)

Features

• add opt-in webhook alerting on newly-appeared findings (0e71dcf)

Bug Fixes

• shut down gracefully on SIGTERM during the startup scan (48a8740)

v1.1.0

1.1.0 (2026-06-05)

Features

• add prometheus /metrics endpoint and config hot-reload (26aa8d5)

Bug Fixes

• harden /metrics and config handling per code review (6ab58b7)

Security Fixes

• time-box CVE-2026-42504 in the vendored trivy binary (657b4bb)

v1.0.0

1.0.0 (2026-06-05)

Features

• add deps major version pin, refactor healthcheck (e5717b5)
• add Go implementation alongside Python with CI build/test/publish (d17cec0)
• add read-only docker socket proxy to both variants (bcfb30e)
• adjust docker image to "distroless" like (59003ac)

Bug Fixes

• align Verify trivy-count to 0.71.0 and refresh workflow docs (ad49e58)
• bump up trivy version v0.70.0 -> v0.71.0 (f12502e)
• trivy: honour ignore-file expiry and align both variants to trivy 0.71.0 (8b5b512)