Skip to content

Releases: shiftleftcyber/ShiftSBOM-Utils

v1.7.0

31 Jan 12:13

Choose a tag to compare

  • Bump versions of
    • osv-scanner
    • sbomqs
    • grype
  • Update README

What's Changed

Full Changelog: v1.6.0...v1.7.0

v1.6.0

14 Dec 22:24

Choose a tag to compare

  • Update base docker image to golang-1.22
  • Update Bomber to 0.5.1
  • Update OSV Scanner to v1.9.1
  • Update SBOMQS to v0.2.3
  • Update Grype to v0.86.0

Full Changelog: v1.5.0...v1.6.0

v1.5.0

05 Sep 10:40

Choose a tag to compare

  • Added support to send SBOM to OWASP Dependency Track
  • Updated tooling and other dependencies

v1.4.0

23 Apr 10:37
cd8ade4

Choose a tag to compare

What's Changed

  • Add support for grype
  • Minor refactoring to simplify the way cmd params are passed in
  • Rel v1.4.0 by @ccideas in #7

Full Changelog: v1.3.0...v1.4.0

v1.3.0

23 Mar 03:43

Choose a tag to compare

Dockerfile optimizations to produce a smaller image with less vulnerabilities

Full Changelog: v1.2.2...v1.3.0

v1.2.2

18 Mar 10:19

Choose a tag to compare

  • bitbucket-pipeline.yml optimizations
  • added ability to generate sbom via pipeline
  • minor fixes

Dependency Updates

  • Base docker images: golang:1.21.7-alpine3.18 → golang:1.21.8-alpine3.18
  • OSV_SCANNER_VERSION="v1.6.2" → OSV_SCANNER_VERSION="v1.7.0"
  • SBOMQS_VERSION="v0.0.29" → SBOMQS_VERSION="v0.0.30"

Full Changelog: v1.2.0...v1.2.2

v1.2.0

26 Feb 03:13

Choose a tag to compare

  • Added support for osv-scanner. You can now scan you sbom for vulnerabilities via osv-scanner.
  • Updated dependencies

Full Changelog: v1.1.2...v1.2.0

v1.1.3

26 Jan 12:19
a30de42

Choose a tag to compare

What's Changed

  • Updating version of sbomqs to v0.0.29
  • Minor fixes to Bitbucket Pipeline & Release scripts

Full Changelog: v1.1.2...v1.1.3

v1.1.2

09 Jan 11:51

Choose a tag to compare

  • Setting INTERLYNK_DISABLE_VERSION_CHECK variable to skip version check for latest sbomqs version.
  • Add logic to set environment variables during runtime
  • Bumping versions of bomber and sbomqs

Other changes

  • Updating release logic to better manage syncing between Bitbucket & Github

Full Changelog: v1.1.1...v1.1.2

v1.1.1

19 Dec 03:24

Choose a tag to compare

  • Adding support for interlynk-io/sbomqs. You can now generate a sbomqs quality score directly from your Bitbucket Pipeline
  • Minor bug fixes & improvements

Full Changelog: v1.0.2...v1.1.1