v0.0.9
What's Changed
- feat: implement an actions engine by @rdimitrov in #1192
- Add remediation capability for GH branch protections by @jhrozek in #1174
- Add option to fetch server secret from file by @eleftherias in #1199
- Pull request remediations engine + codeQL + dependabot remediations by @jhrozek in #1200
- Update deployment to enable account deletion by @eleftherias in #1212
- PR vulnerability evaluation: Display summary of vulnerabilities found by @jhrozek in #1204
- Update docs with identity config for mediator server by @eleftherias in #1195
- build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.18.45 to 1.19.0 by @dependabot in #1216
- build(deps): bump github.com/lestrrat-go/jwx/v2 from 2.0.13 to 2.0.14 by @dependabot in #1217
- build(deps): bump @babel/traverse from 7.22.10 to 7.23.2 in /docs by @dependabot in #1220
- Split mediator and db-update roles by @eleftherias in #1223
- vulncheck: Don't try to render an empty summary table if no CVEs are found by @jhrozek in #1215
- helm: Add
extra_config_migrate
to helm values by @JAORMX in #1224 - Reduce cardinality of GRPC metrics from mediator. by @evankanderson in #1227
- build(deps): bump google.golang.org/grpc from 1.58.3 to 1.59.0 by @dependabot in #1230
- fix: Fix migration CI job by @JAORMX in #1229
- ci: Add healthceck for keycloak container by @JAORMX in #1231
- Support Python requirements.txt scanning for pull requests by @jhrozek in #1225
- build(deps): bump github.com/open-policy-agent/opa from 0.57.0 to 0.57.1 by @dependabot in #1234
- build(deps): bump k8s.io/apimachinery from 0.28.2 to 0.28.3 by @dependabot in #1235
- Add postgres connection pool instrumentation by @evankanderson in #1246
- feat: implement the rest of alerts by @rdimitrov in #1228
- build(deps): bump github.com/lestrrat-go/jwx/v2 from 2.0.14 to 2.0.15 by @dependabot in #1247
- Don't error CLI on a lack of config by @lukehinds in #1245
- Pi Evaluator that provides a summary of dependencies and their alternatives by @jhrozek in #1232
- engine: Also traverse PullRequest rules when validating profiles by @jhrozek in #1260
- Fix debug message argument by @jhrozek in #1261
- build(deps): bump github.com/golangci/golangci-lint from 1.54.2 to 1.55.0 in /tools by @dependabot in #1263
- Fix artifact_signature rule schema by @JAORMX in #1265
- build(deps): bump actions/setup-node from 3 to 4 by @dependabot in #1272
- ci: Fix database migration touch job by @JAORMX in #1271
- Intial smoke tests by @lukehinds in #1268
- feat: Implement ingester cache by @JAORMX in #1273
- Add telemetry for counting number of users by @eleftherias in #1275
- fix: update rule type descriptions to be consistent by @rdimitrov in #1277
- Don't retry all handler errors by @jhrozek in #1281
- build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.19.0 to 1.19.1 by @dependabot in #1283
- Makefile: leverage podman compose plugin instead of
podman-compose
by @JAORMX in #1282 - Store PRs in the database to avoid special-casing them during evaluation by @jhrozek in #1270
- feat: add stalebot to ci by @rdimitrov in #1284
- Skip non-relevant webhook events by @jhrozek in #1280
- build(deps): bump google.golang.org/grpc from 1.58.0 to 1.58.3 in /tools by @dependabot in #1286
- fix: update permissions for stalebot.yml by @rdimitrov in #1287
- build(deps): bump github.com/golangci/golangci-lint from 1.55.0 to 1.55.1 in /tools by @dependabot in #1288
- build(deps): bump github.com/go-git/go-git/v5 from 5.9.0 to 5.10.0 by @dependabot in #1289
- chore: use interfaces for actions and evaluation params by @rdimitrov in #1290
- chore: ensure evalStatusParams implement eval and action interfaces by @rdimitrov in #1293
- chore: prefix viper env vars with mediator by @rdimitrov in #1291
- docs: update CONTRIBUTING.md by @rdimitrov in #1294
- chore: explicitly declare the default actions settings by @rdimitrov in #1295
- build(deps): bump github.com/google/uuid from 1.3.1 to 1.4.0 by @dependabot in #1300
- build(deps): bump github.com/open-policy-agent/opa from 0.57.1 to 0.58.0 by @dependabot in #1301
- build(deps): bump github.com/sigstore/sigstore from 1.7.4 to 1.7.5 by @dependabot in #1302
- ci: Detect
IF NOT EXISTS
in migration scripts by @JAORMX in #1303 - Remove user details from mediator database by @eleftherias in #1304
- helm: Add deployment-specific settings by @JAORMX in #1299
- fix: actually render values.yaml in helm job by @JAORMX in #1305
- Use stable version of schemaspy by @eleftherias in #1307
- chore: update evaluation logs for easier debugging by @rdimitrov in #1306
- feat: Make watermill settings configurable by @JAORMX in #1297
- cleanup: Make mediator wait for keycloak's health in compose file by @JAORMX in #1308
- Fix link in CONTRIBUTING.md by @eleftherias in #1309
- Add several metrics for mediator control plane by @jhrozek in #1298
- Reconcile the PiReply struct with recent changes to Pi by @jhrozek in #1311
- Update LICENSE by @rdimitrov in #1314
- Make keycloak setup script compatible with DB by @eleftherias in #1320
- fix: Make event persistence configurable and set to false by @JAORMX in #1323
- feat: Add possibility for entitlements by @JAORMX in #1319
- Remove obsolete token expiry check by @rdimitrov in #1321
- Auto-generated DB schema update - 2023-10-30 14:28:37 by @github-actions in #1324
- Refactor Mediator docs for inclusion in commercial by @evankanderson in #1318
- Fix go.mod for tools and update go to 1.21 by @rdimitrov in #1322
- Allow registering private repos specified in github.allowed_private_repos by @jhrozek in #1316
- Add goreleaser, sboms, slsa3, sigstore and homebrew support by @rdimitrov in #1315
Full Changelog: v0.0.8...v0.0.9