v0.1.1

Munitor v0.1.1

Adds supplemental Docker image support, health check improvements, and Trivy update. Published as kof22/munitor@0.1.1.

New Features

Supplemental Docker Images

Build, Trivy-scan, and push N additional container images (e.g., Liquibase migrations, sidecar services) alongside the main app image. Configured via supplemental_images in .munitor.yml:

supplemental_images:
  - name: migrations
    base: liquibase/liquibase:4.29
    copy:
      - source: src/main/resources/db
        dest: /liquibase/changelog

• Auto-generates Dockerfiles from base + copy, or uses user-provided Dockerfiles
• Trivy-scans all supplemental images
• CD repo updates (Helm values.yaml or Kustomize kustomization.yaml) are atomic (single commit)
• Supports both java-webapp, node-api, and node-webapp pipelines

Health Check: Migrations Runner & API Smoke Tests

• Run a migrations image against the DB sidecar before starting the app container (health_migrations parameter)
• Validate API endpoints return HTTP 200 after health check passes (health_smoke_paths parameter)

GIT_COMMIT_SHA Build Arg

• Pass CIRCLE_SHA1 as GIT_COMMIT_SHA Docker build arg so applications can embed commit traceability at build time

Bug Fixes

• Trivy 0.58.2 removed from GitHub: Bumped to Trivy 0.69.3 to fix broken security-scan in all downstream pipelines
• Supplemental images JSON injection: Compact supplemental_images JSON to single line to prevent multiline YAML breakage during envsubst
• Kustomization.yaml upsert: Create supplemental image entries if missing instead of silently no-op on yq select
• update_cd_repo job: Pass supplemental_images parameter through job definition (was being silently dropped by CircleCI)
• build_push_supplemental: Pass image_name and registry env vars as explicit command parameters

Tests

• Assert supplemental_images JSON is compact single-line
• Validate all external download URLs (Trivy, gh, gitleaks, kube-linter, terragrunt, yq, kustomize, kubesec, OpenTofu, sonar-scanner) are reachable

Stats

• 30 files changed, 724 insertions
• 505+ test assertions passing