Skip to content

v2.0.1

Choose a tag to compare

View all tags
@jmgasper jmgasper released this 04 Nov 03:32
v2.0.1
4025ac9
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Fixes clean-image ECR scan compatibility from PR #41.

ECR can omit the optional severity-count map when it returns no findings. The deployer now accepts that response only with exact registry/repository/digest identity, explicit empty findings, and no remaining page. Completed-status, 24-hour freshness and MEDIUM/HIGH/CRITICAL/UNDEFINED vulnerability gates remain enforced. Missing evidence and malformed counts fail closed.

No additional IAM permissions, manifest changes or registry scanning changes are required. Existing v2.0.0 is unchanged.

Validation: 69 tests pass locally and in the pinned CircleCI executor; merged-commit GitHub CI passed. Read-only ECR/Inspector inspection confirmed the response shape. Full deployment acceptance remains a consumer dev-pipeline test.

Release commit: 4025ac9963c38581f6a19bc1369bf634b22e0245.

Assets 2
Loading