Skip to content

Code Polishy 0.31.7

Choose a tag to compare

View all tags
@github-actions github-actions released this 30 Oct 21:32
v0.31.7
ea34c55
  • Run artifact scans on rootless Docker daemons. The scanner uses 0:0, the
    calling user inside the daemon's namespace, for its cache, input and output
    mounts while keeping its container restrictions.
  • Honor DOCKER_HOST, DOCKER_CONTEXT, DOCKER_CONFIG, DOCKER_TLS_VERIFY and
    DOCKER_CERT_PATH for Docker commands. Refuse remote endpoints before contacting
    them, because scans bind-mount private local files.
  • Name the failing phase, Docker daemon and mode, scanner user and private mounts
    in artifact operational failures, with a remedy specific to the failure.
  • Allow one vulnerability assessment to list advisories for the same package,
    version and scope. Each advisory is still matched, reported and enforced
    separately. Consumers must upgrade their lock before declaring the field.
  • Explain how to re-review an assessment after a severity increase instead of
    directing its removal.
  • Add a VULNERABLE PACKAGES table to human reports, and carry reported fixes
    from OSV and Trivy in vulnerability.fixedVersions.
  • Document script-free installation with Python Git sources through a reviewed,
    hash-constrained build step.

Native archives for Code Polishy 0.31.7.

Source revision: ea34c55
Publication index SHA-256: 1516473051570c0ec5ecd6697dd531ab4e46ee97a8be60fcb1427ef7b94cada7
OCI image: ghcr.io/riteofstring/code-polishy:v0.31.7@sha256:e6d9096e399131a0d068ef298ff57bcfae520e8d7c26075bb499a6e2e48eaa03

Assets 34
Loading