Skip to content

v2.45.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 30 Sep 13:29
· 32 commits to main since this release
v2.45.0
fdd32ad
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Improvements

  • evaluate --server-side now prints all outputs the policy annotates as an entrypoint, not just violations.
  • Violations can now be structured values (not just strings) and are rendered as JSON in table and error output.
  • A non-list violations output is now treated as a single violation instead of being ignored.
  • Outputs named like reserved verdict keys (e.g. allow) are ignored to avoid conflicting with the exit code decision.
  • Updated --output-rule error message for --server-side to clarify behavior.

What's Changed

  • ci: scan the image Snyk results are attested against by @AlexKantor87 in #1230
  • ci: gate Dependabot PR builds on the PR author and head repository by @AlexKantor87 in #1229
  • ci: force the legacy Snyk CLI path for the dependency test by @mbevc1 in #1236
  • feat(evaluate): print every output a server-side evaluation returns by @pbeckham in #1233

Full Changelog: v2.44.0...v2.45.0

Contributors

pbeckham, mbevc1, and AlexKantor87
Assets 19
Loading