Skip to content

v32.1.0

Compare
Choose a tag to compare
@tdruez tdruez released this 23 Mar 10:56
· 387 commits to main since this release
  • Add support for ScanCode.io results in the "load_inventory" pipeline. #609

  • Add support for CycloneDX 1.4 to the "inspect-manifest" pipeline to import SBOM into
    a Project. #583

  • Add fields in CycloneDX BOM output using the component properties.
    See registered properties at https://github.com/nexB/aboutcode-cyclonedx-taxonomy #637

  • Upgrade to Python 3.11 in the Dockerfile. #611

  • Refine the "Command Line Interface" documentation about the scanpipe command
    usages in the Docker context.
    Add the /app workdir in the "PYTHONPATH" env of the Docker file to make the
    scanpipe entry point available while running docker compose commands. #616

  • Add a new tutorial about the "find vulnerabilities" pipeline and the vulnerablecode
    integration in the documentation. #600

  • Rewrite the CLI tutorials for a Docker-based installation. #440

  • Use CodebaseResource path instead of id as slug_field in URL navigation. #242

  • Remove dead code related to the project_tree view #623

  • Update scanpipe.pipes.ProjectCodebase and related code to work properly
    with the current Project/CodebaseResource path scheme. #624

  • Add the SCANCODEIO_PAGINATE_BY setting to customize the number of items displayed per
    page for each object type. #563

  • Add a setting for a per-file timeout. The maximum time allowed for a file to be
    analyzed when scanning a codebase is configurable with SCANCODEIO_SCAN_FILE_TIMEOUT
    while the maximum time allowed for a pipeline to complete can be defined using
    SCANCODEIO_TASK_TIMEOUT. #593