Releases: trustification/trustification
Releases · trustification/trustification
v1.0.0-TP1
TC-1067 configuration fix Signed-off-by: desmax74 <mdessi@redhat.com>
0.1.0-nightly.a562397c
Changelog
Unreleased (2023-10-11)
Features
- add some filters
(2392b76) - add severity field
(4b2b201) - add predicates/field for severity
(7d742f4) - add cve index
(720c528) - add v11y indexer
(b2ca425) - first attempt at searching CVEs
(9a18950) - working version of the donut poc
(a9200ac) - add donut experiment
(736b486) - implement CVSS indicator from sketches
(66be959) - add cli command for uploading
(e8c1868) - add feature flag for running acceptance tests only
(38866f5) - propagate s3 events to indexed queue
(5346fb4) - enable guac in app-sre
(255b43d) - enable guac in openshift template
(b70ce49) - use the upstream logo
(2d8f90a) - add production branch
(1ab72f5) - support different reindexing modes
(a48704e)
Fixes
- inconsistent page state
(3a466c4) - swap around
(8dcb50c) - add "test"
(a05d43c) - add v11y indexer
(ef15b30) - add v11y s3 credentials
(1effd63) - use correct vexination url
(df683c3) - using wrong data type
(7c1a5da) - fixup for --devmode
(dc3d655) - update to s3 collector with fixes
(115c48b) - commit to trigger build
(7d05f3c) - try with regenerated version
(ead8bdd) - try to inline trunk builder on UI containerfile
(49544a4) - try older version of trunk base
(5947e60) - add note on running in production
(d44b195) - task name
(3ae48a8) - point to bundle with sha
(2093dc9) - remove git sha from build
(1b07f0a) - bump buildah memory limits
(d131c0a) - update openshift dashboards
(b9518ad) - combine dashboards
(1dbc384) - update SLO dashboard
(3c6308a) - update dependencies
(b23ff62) - introduce CRDA_URL template param
(d51c52a) - fix the walker upload
(c9bf5a2) - handle delete markers as delete events
(141afe4) - improve handling of new type of VEX without advisory description
(4a4ac62) - unignore empty vex tests
(f1c6991) - remove dummy env var
(dfc1f38) - remove merge queue
(1a5a923) - different job name for each run
(b3fada8) - set driver env to dummy value
(441d50d) - try updating integration test template
(ca2b3b3) - use recreate strategy for v11y
(f295e31) - guac image
(9762002) - reset value attribute after loading
(96f5a0a) - enable collector
(f8c317d) - use correct topic
(89b8bae) - set missing s3 host and port
(b65cd47) - use correct arguments to new collector
(2f38c54) - return error if upload failed
(b66b44a) - disable unreliable test
(158bea6),
closes #618 - make log level configurable in helm values
(83c2c5a) - remove debug and parameterize namespace
(17a7450) - remove with-services feature to avoid breaking CI
(45d0f1c) - make correlated doc id's truly unique
(c4ce3be) - clippy
(7732198) - always reindex in app-sre because its convenient and we keep few docs anyway
(65ca705) - put secret name in correct location
(6dffda9) - enable snyk and nvd
(003305c) - convert walkers to cron jobs
(b756c71) - confirm index entry delete in log
(9e635ed) - make walker interval adjustable
(85379fb) - update to csaf-walker 0.5
([dab8676](https://github....
0.1.0-nightly.42a7164b
Changelog
Unreleased (2023-10-06)
Features
- implement CVSS indicator from sketches
(66be959) - add cli command for uploading
(e8c1868) - add feature flag for running acceptance tests only
(38866f5) - propagate s3 events to indexed queue
(5346fb4) - enable guac in app-sre
(255b43d) - enable guac in openshift template
(b70ce49) - use the upstream logo
(2d8f90a) - add production branch
(1ab72f5) - support different reindexing modes
(a48704e)
Fixes
- update openshift dashboards
(b9518ad) - combine dashboards
(1dbc384) - update SLO dashboard
(3c6308a) - update dependencies
(b23ff62) - introduce CRDA_URL template param
(d51c52a) - fix the walker upload
(c9bf5a2) - handle delete markers as delete events
(141afe4) - improve handling of new type of VEX without advisory description
(4a4ac62) - unignore empty vex tests
(f1c6991) - remove dummy env var
(dfc1f38) - remove merge queue
(1a5a923) - different job name for each run
(b3fada8) - set driver env to dummy value
(441d50d) - try updating integration test template
(ca2b3b3) - use recreate strategy for v11y
(f295e31) - guac image
(9762002) - reset value attribute after loading
(96f5a0a) - enable collector
(f8c317d) - use correct topic
(89b8bae) - set missing s3 host and port
(b65cd47) - use correct arguments to new collector
(2f38c54) - return error if upload failed
(b66b44a) - disable unreliable test
(158bea6),
closes #618 - make log level configurable in helm values
(83c2c5a) - remove debug and parameterize namespace
(17a7450) - remove with-services feature to avoid breaking CI
(45d0f1c) - make correlated doc id's truly unique
(c4ce3be) - clippy
(7732198) - always reindex in app-sre because its convenient and we keep few docs anyway
(65ca705) - put secret name in correct location
(6dffda9) - enable snyk and nvd
(003305c) - convert walkers to cron jobs
(b756c71) - confirm index entry delete in log
(9e635ed) - make walker interval adjustable
(85379fb) - update to csaf-walker 0.5
(dab8676) - fix UI issue with unknown content
(8d0c068) - actually evaluate the fix flag
(e266541) - align the usage of --sink for the bombastic walker
(f3e60b2) - add read:document scope to walker client
(ed8d20e),
closes #0
#0
#0 - use the test context teardown fn to delete fixtures
(180e9eb),
closes #587 - release flow syntax
(e79a238) - remove nightly workflow
(db348f9) - add id qualifier to default fields
(a7fe584) - fix license in test data
(a6345e7),
closes #589 - use gpg v3 signatures
(480971b) - remove walker scripts
(71e7d8d) - use the new cyclonedx-bom crate
(8e935bb) - configure nats address explicitly
(5020d2a) - commit correct file
(8073400) - exhort reencrypt route
(2e7e449) - walkers urls and auth
(68d3555) - port bindings
(054478b) - add missing parts
(3cd1861) - use default the way clippy recommends
(c8f3dbc) - impl default and use in test
(607bdeb) - clippy
(e725fef) - reuse single client instance
(6f90dc7) - add oidc params to v...
0.1.0-nightly.9382a428
Changelog
Unreleased (2023-10-05)
Features
- add cli command for uploading
(e8c1868) - add feature flag for running acceptance tests only
(38866f5) - propagate s3 events to indexed queue
(5346fb4) - enable guac in app-sre
(255b43d) - enable guac in openshift template
(b70ce49) - use the upstream logo
(2d8f90a) - add production branch
(1ab72f5) - support different reindexing modes
(a48704e)
Fixes
- introduce CRDA_URL template param
(d51c52a) - fix the walker upload
(c9bf5a2) - handle delete markers as delete events
(141afe4) - improve handling of new type of VEX without advisory description
(4a4ac62) - unignore empty vex tests
(f1c6991) - remove dummy env var
(dfc1f38) - remove merge queue
(1a5a923) - different job name for each run
(b3fada8) - set driver env to dummy value
(441d50d) - try updating integration test template
(ca2b3b3) - use recreate strategy for v11y
(f295e31) - guac image
(9762002) - reset value attribute after loading
(96f5a0a) - enable collector
(f8c317d) - use correct topic
(89b8bae) - set missing s3 host and port
(b65cd47) - use correct arguments to new collector
(2f38c54) - return error if upload failed
(b66b44a) - disable unreliable test
(158bea6),
closes #618 - make log level configurable in helm values
(83c2c5a) - remove debug and parameterize namespace
(17a7450) - remove with-services feature to avoid breaking CI
(45d0f1c) - make correlated doc id's truly unique
(c4ce3be) - clippy
(7732198) - always reindex in app-sre because its convenient and we keep few docs anyway
(65ca705) - put secret name in correct location
(6dffda9) - enable snyk and nvd
(003305c) - convert walkers to cron jobs
(b756c71) - confirm index entry delete in log
(9e635ed) - make walker interval adjustable
(85379fb) - update to csaf-walker 0.5
(dab8676) - fix UI issue with unknown content
(8d0c068) - actually evaluate the fix flag
(e266541) - align the usage of --sink for the bombastic walker
(f3e60b2) - add read:document scope to walker client
(ed8d20e),
closes #0
#0
#0 - use the test context teardown fn to delete fixtures
(180e9eb),
closes #587 - release flow syntax
(e79a238) - remove nightly workflow
(db348f9) - add id qualifier to default fields
(a7fe584) - fix license in test data
(a6345e7),
closes #589 - use gpg v3 signatures
(480971b) - remove walker scripts
(71e7d8d) - use the new cyclonedx-bom crate
(8e935bb) - configure nats address explicitly
(5020d2a) - commit correct file
(8073400) - exhort reencrypt route
(2e7e449) - walkers urls and auth
(68d3555) - port bindings
(054478b) - add missing parts
(3cd1861) - use default the way clippy recommends
(c8f3dbc) - impl default and use in test
(607bdeb) - clippy
(e725fef) - reuse single client instance
(6f90dc7) - add oidc params to vex walker
(3d29d1d),
closes #547 - don't log access tokens
(fc9deaf) - fix broken s3 paths on s3
(f9cb8b3)
v0.1.0-nightly.faf47378 (2023-09-20)
Features
- allow getting by ID
(9ef59da) - add TLS support to most of ...
0.1.0-nightly.493fbf63
Changelog
Unreleased (2023-10-03)
Features
- add cli command for uploading
(e8c1868) - add feature flag for running acceptance tests only
(38866f5) - propagate s3 events to indexed queue
(5346fb4) - enable guac in app-sre
(255b43d) - enable guac in openshift template
(b70ce49) - use the upstream logo
(2d8f90a) - add production branch
(1ab72f5) - support different reindexing modes
(a48704e)
Fixes
- enable collector
(f8c317d) - use correct topic
(89b8bae) - set missing s3 host and port
(b65cd47) - use correct arguments to new collector
(2f38c54) - return error if upload failed
(b66b44a) - disable unreliable test
(158bea6),
closes #618 - make log level configurable in helm values
(83c2c5a) - remove debug and parameterize namespace
(17a7450) - remove with-services feature to avoid breaking CI
(45d0f1c) - make correlated doc id's truly unique
(c4ce3be) - clippy
(7732198) - always reindex in app-sre because its convenient and we keep few docs anyway
(65ca705) - put secret name in correct location
(6dffda9) - enable snyk and nvd
(003305c) - convert walkers to cron jobs
(b756c71) - confirm index entry delete in log
(9e635ed) - make walker interval adjustable
(85379fb) - update to csaf-walker 0.5
(dab8676) - fix UI issue with unknown content
(8d0c068) - actually evaluate the fix flag
(e266541) - align the usage of --sink for the bombastic walker
(f3e60b2) - add read:document scope to walker client
(ed8d20e),
closes #0
#0
#0 - use the test context teardown fn to delete fixtures
(180e9eb),
closes #587 - release flow syntax
(e79a238) - remove nightly workflow
(db348f9) - add id qualifier to default fields
(a7fe584) - fix license in test data
(a6345e7),
closes #589 - use gpg v3 signatures
(480971b) - remove walker scripts
(71e7d8d) - use the new cyclonedx-bom crate
(8e935bb) - configure nats address explicitly
(5020d2a) - commit correct file
(8073400) - exhort reencrypt route
(2e7e449) - walkers urls and auth
(68d3555) - port bindings
(054478b) - add missing parts
(3cd1861) - use default the way clippy recommends
(c8f3dbc) - impl default and use in test
(607bdeb) - clippy
(e725fef) - reuse single client instance
(6f90dc7) - add oidc params to vex walker
(3d29d1d),
closes #547 - don't log access tokens
(fc9deaf) - fix broken s3 paths on s3
(f9cb8b3)
v0.1.0-nightly.faf47378 (2023-09-20)
Features
- allow getting by ID
(9ef59da) - add TLS support to most of the clients
(eacdac8) - add Http endpoint builder, and migrate Bombastic to it
(8c36365) - add readiness probe for API search availability
(d8ca663),
closes #532 - add real health checks
(9a29169) - allow setting a base path for the database
(832002b) - Add NVD collector
(6f49312) - allow searching advisory and cve dates separately
(f6bc29f),
closes #519 - implement default values for radio groups
(e9fd0c0) - allow using javascript snippets to generate search terms
(d7d735f) - add radio button support
(10be1e6) - Enable async guac ingest and adapt config
(ea9b60f) - providing support for getting encoded objects from the storag...
0.1.0-nightly.c60abd72
Changelog
Unreleased (2023-09-28)
Features
Fixes
- use the test context teardown fn to delete fixtures
(180e9eb),
closes #587 - release flow syntax
(e79a238) - remove nightly workflow
(db348f9) - add id qualifier to default fields
(a7fe584) - fix license in test data
(a6345e7),
closes #589 - use gpg v3 signatures
(480971b) - remove walker scripts
(71e7d8d) - use the new cyclonedx-bom crate
(8e935bb) - configure nats address explicitly
(5020d2a) - commit correct file
(8073400) - exhort reencrypt route
(2e7e449) - walkers urls and auth
(68d3555) - port bindings
(054478b) - add missing parts
(3cd1861) - use default the way clippy recommends
(c8f3dbc) - impl default and use in test
(607bdeb) - clippy
(e725fef) - reuse single client instance
(6f90dc7) - add oidc params to vex walker
(3d29d1d),
closes #547 - don't log access tokens
(fc9deaf) - fix broken s3 paths on s3
(f9cb8b3)
v0.1.0-nightly.faf47378 (2023-09-20)
Features
- allow getting by ID
(9ef59da) - add TLS support to most of the clients
(eacdac8) - add Http endpoint builder, and migrate Bombastic to it
(8c36365) - add readiness probe for API search availability
(d8ca663),
closes #532 - add real health checks
(9a29169) - allow setting a base path for the database
(832002b) - Add NVD collector
(6f49312) - allow searching advisory and cve dates separately
(f6bc29f),
closes #519 - implement default values for radio groups
(e9fd0c0) - allow using javascript snippets to generate search terms
(d7d735f) - add radio button support
(10be1e6) - Enable async guac ingest and adapt config
(ea9b60f) - providing support for getting encoded objects from the storage
(53ffbc4) - add --devmode to collector osv
(bbfa135) - bring --devmode to oidc client config
(8c0263e) - add oidc token providers to clients
(d5cd3e3) - add token provider to v11y client
(8f788bd) - add a simpler way to use no-op tokens
(1516ff6) - add welcome hint for scanner
(6dcfe05) - add "SBOM by dependency" tab
(d9d6fad) - upgrade to tantivy 0.20
(70afb82),
closes #283 - add markdown parser to CSAF notes
(aadc133) - allow searching without fetching document summaries
(0d52589),
closes #450 - make more things configurable
(519a990) - allow adding scopes to the backend info
(48a949f) - expand vexination API to allow deletion of VEX docs
(d43d76f),
closes #438 - allow adding additional scopes based on OIDC client config
(3e60f0f) - minor naming tweaks and docs for integs
(3e925cb),
closes #401
#424 - add container with integration test binaries
(317a13a) - allow building tests without building all of trustification
(dcbdfdd) - point the integs at a remote trustification server
(918c159),
closes #401 - add indexing timestamp
(86e0567) - add get related packages query
(a9085f7) - add get dependents for a package
(5ba652c) - add get dependencies logic
(ad2825e) - make each integ test run use a unique identifier
(dab3864) - factor event waiting logic into a more useful helper fn
(d9ea1d9),
closes #363 - make index size configurable
([9cd37df](https://github.com/trustification/trustification...
0.1.0-nightly.9c7e58be
Changelog
Unreleased (2023-09-26)
Features
Fixes
- use gpg v3 signatures
(480971b) - remove walker scripts
(71e7d8d) - use the new cyclonedx-bom crate
(8e935bb) - configure nats address explicitly
(5020d2a) - commit correct file
(8073400) - exhort reencrypt route
(2e7e449) - walkers urls and auth
(68d3555) - port bindings
(054478b) - add missing parts
(3cd1861) - use default the way clippy recommends
(c8f3dbc) - impl default and use in test
(607bdeb) - clippy
(e725fef) - reuse single client instance
(6f90dc7) - add oidc params to vex walker
(3d29d1d),
closes #547 - don't log access tokens
(fc9deaf) - fix broken s3 paths on s3
(f9cb8b3)
v0.1.0-nightly.faf47378 (2023-09-20)
Features
- allow getting by ID
(9ef59da) - add TLS support to most of the clients
(eacdac8) - add Http endpoint builder, and migrate Bombastic to it
(8c36365) - add readiness probe for API search availability
(d8ca663),
closes #532 - add real health checks
(9a29169) - allow setting a base path for the database
(832002b) - Add NVD collector
(6f49312) - allow searching advisory and cve dates separately
(f6bc29f),
closes #519 - implement default values for radio groups
(e9fd0c0) - allow using javascript snippets to generate search terms
(d7d735f) - add radio button support
(10be1e6) - Enable async guac ingest and adapt config
(ea9b60f) - providing support for getting encoded objects from the storage
(53ffbc4) - add --devmode to collector osv
(bbfa135) - bring --devmode to oidc client config
(8c0263e) - add oidc token providers to clients
(d5cd3e3) - add token provider to v11y client
(8f788bd) - add a simpler way to use no-op tokens
(1516ff6) - add welcome hint for scanner
(6dcfe05) - add "SBOM by dependency" tab
(d9d6fad) - upgrade to tantivy 0.20
(70afb82),
closes #283 - add markdown parser to CSAF notes
(aadc133) - allow searching without fetching document summaries
(0d52589),
closes #450 - make more things configurable
(519a990) - allow adding scopes to the backend info
(48a949f) - expand vexination API to allow deletion of VEX docs
(d43d76f),
closes #438 - allow adding additional scopes based on OIDC client config
(3e60f0f) - minor naming tweaks and docs for integs
(3e925cb),
closes #401
#424 - add container with integration test binaries
(317a13a) - allow building tests without building all of trustification
(dcbdfdd) - point the integs at a remote trustification server
(918c159),
closes #401 - add indexing timestamp
(86e0567) - add get related packages query
(a9085f7) - add get dependents for a package
(5ba652c) - add get dependencies logic
(ad2825e) - make each integ test run use a unique identifier
(dab3864) - factor event waiting logic into a more useful helper fn
(d9ea1d9),
closes #363 - make index size configurable
(9cd37df) - support using s3 directly as index backing store
(fe2d820),
closes #333 - allow configuring reindex at startup
(c572eb2) - add reindexing support
(71cd5ea),
closes #379
#9 - allow disabling authorization
(8c72dd9),
closes [#372]...
0.1.0-nightly.96b54545
Changelog
Unreleased (2023-09-26)
Features
Fixes
- use gpg v3 signatures
(480971b) - remove walker scripts
(71e7d8d) - use the new cyclonedx-bom crate
(8e935bb) - configure nats address explicitly
(5020d2a) - commit correct file
(8073400) - exhort reencrypt route
(2e7e449) - walkers urls and auth
(68d3555) - port bindings
(054478b) - add missing parts
(3cd1861) - use default the way clippy recommends
(c8f3dbc) - impl default and use in test
(607bdeb) - clippy
(e725fef) - reuse single client instance
(6f90dc7) - add oidc params to vex walker
(3d29d1d),
closes #547 - don't log access tokens
(fc9deaf) - fix broken s3 paths on s3
(f9cb8b3)
v0.1.0-nightly.faf47378 (2023-09-20)
Features
- allow getting by ID
(9ef59da) - add TLS support to most of the clients
(eacdac8) - add Http endpoint builder, and migrate Bombastic to it
(8c36365) - add readiness probe for API search availability
(d8ca663),
closes #532 - add real health checks
(9a29169) - allow setting a base path for the database
(832002b) - Add NVD collector
(6f49312) - allow searching advisory and cve dates separately
(f6bc29f),
closes #519 - implement default values for radio groups
(e9fd0c0) - allow using javascript snippets to generate search terms
(d7d735f) - add radio button support
(10be1e6) - Enable async guac ingest and adapt config
(ea9b60f) - providing support for getting encoded objects from the storage
(53ffbc4) - add --devmode to collector osv
(bbfa135) - bring --devmode to oidc client config
(8c0263e) - add oidc token providers to clients
(d5cd3e3) - add token provider to v11y client
(8f788bd) - add a simpler way to use no-op tokens
(1516ff6) - add welcome hint for scanner
(6dcfe05) - add "SBOM by dependency" tab
(d9d6fad) - upgrade to tantivy 0.20
(70afb82),
closes #283 - add markdown parser to CSAF notes
(aadc133) - allow searching without fetching document summaries
(0d52589),
closes #450 - make more things configurable
(519a990) - allow adding scopes to the backend info
(48a949f) - expand vexination API to allow deletion of VEX docs
(d43d76f),
closes #438 - allow adding additional scopes based on OIDC client config
(3e60f0f) - minor naming tweaks and docs for integs
(3e925cb),
closes #401
#424 - add container with integration test binaries
(317a13a) - allow building tests without building all of trustification
(dcbdfdd) - point the integs at a remote trustification server
(918c159),
closes #401 - add indexing timestamp
(86e0567) - add get related packages query
(a9085f7) - add get dependents for a package
(5ba652c) - add get dependencies logic
(ad2825e) - make each integ test run use a unique identifier
(dab3864) - factor event waiting logic into a more useful helper fn
(d9ea1d9),
closes #363 - make index size configurable
(9cd37df) - support using s3 directly as index backing store
(fe2d820),
closes #333 - allow configuring reindex at startup
(c572eb2) - add reindexing support
(71cd5ea),
closes #379
#9 - allow disabling authorization
(8c72dd9),
closes [#372]...
0.1.0-nightly.480971b6
Changelog
Unreleased (2023-09-26)
Features
Fixes
- use gpg v3 signatures
(480971b) - remove walker scripts
(71e7d8d) - use the new cyclonedx-bom crate
(8e935bb) - configure nats address explicitly
(5020d2a) - commit correct file
(8073400) - exhort reencrypt route
(2e7e449) - walkers urls and auth
(68d3555) - port bindings
(054478b) - add missing parts
(3cd1861) - use default the way clippy recommends
(c8f3dbc) - impl default and use in test
(607bdeb) - clippy
(e725fef) - reuse single client instance
(6f90dc7) - add oidc params to vex walker
(3d29d1d),
closes #547 - don't log access tokens
(fc9deaf) - fix broken s3 paths on s3
(f9cb8b3)
v0.1.0-nightly.faf47378 (2023-09-20)
Features
- allow getting by ID
(9ef59da) - add TLS support to most of the clients
(eacdac8) - add Http endpoint builder, and migrate Bombastic to it
(8c36365) - add readiness probe for API search availability
(d8ca663),
closes #532 - add real health checks
(9a29169) - allow setting a base path for the database
(832002b) - Add NVD collector
(6f49312) - allow searching advisory and cve dates separately
(f6bc29f),
closes #519 - implement default values for radio groups
(e9fd0c0) - allow using javascript snippets to generate search terms
(d7d735f) - add radio button support
(10be1e6) - Enable async guac ingest and adapt config
(ea9b60f) - providing support for getting encoded objects from the storage
(53ffbc4) - add --devmode to collector osv
(bbfa135) - bring --devmode to oidc client config
(8c0263e) - add oidc token providers to clients
(d5cd3e3) - add token provider to v11y client
(8f788bd) - add a simpler way to use no-op tokens
(1516ff6) - add welcome hint for scanner
(6dcfe05) - add "SBOM by dependency" tab
(d9d6fad) - upgrade to tantivy 0.20
(70afb82),
closes #283 - add markdown parser to CSAF notes
(aadc133) - allow searching without fetching document summaries
(0d52589),
closes #450 - make more things configurable
(519a990) - allow adding scopes to the backend info
(48a949f) - expand vexination API to allow deletion of VEX docs
(d43d76f),
closes #438 - allow adding additional scopes based on OIDC client config
(3e60f0f) - minor naming tweaks and docs for integs
(3e925cb),
closes #401
#424 - add container with integration test binaries
(317a13a) - allow building tests without building all of trustification
(dcbdfdd) - point the integs at a remote trustification server
(918c159),
closes #401 - add indexing timestamp
(86e0567) - add get related packages query
(a9085f7) - add get dependents for a package
(5ba652c) - add get dependencies logic
(ad2825e) - make each integ test run use a unique identifier
(dab3864) - factor event waiting logic into a more useful helper fn
(d9ea1d9),
closes #363 - make index size configurable
(9cd37df) - support using s3 directly as index backing store
(fe2d820),
closes #333 - allow configuring reindex at startup
(c572eb2) - add reindexing support
(71cd5ea),
closes #379
#9 - allow disabling authorization
(8c72dd9),
closes [#372]...
0.1.0-nightly.06b50afe
Changelog
Unreleased (2023-09-26)
Features
Fixes
- use gpg v3 signatures
(480971b) - remove walker scripts
(71e7d8d) - use the new cyclonedx-bom crate
(8e935bb) - configure nats address explicitly
(5020d2a) - commit correct file
(8073400) - exhort reencrypt route
(2e7e449) - walkers urls and auth
(68d3555) - port bindings
(054478b) - add missing parts
(3cd1861) - use default the way clippy recommends
(c8f3dbc) - impl default and use in test
(607bdeb) - clippy
(e725fef) - reuse single client instance
(6f90dc7) - add oidc params to vex walker
(3d29d1d),
closes #547 - don't log access tokens
(fc9deaf) - fix broken s3 paths on s3
(f9cb8b3)
v0.1.0-nightly.faf47378 (2023-09-20)
Features
- allow getting by ID
(9ef59da) - add TLS support to most of the clients
(eacdac8) - add Http endpoint builder, and migrate Bombastic to it
(8c36365) - add readiness probe for API search availability
(d8ca663),
closes #532 - add real health checks
(9a29169) - allow setting a base path for the database
(832002b) - Add NVD collector
(6f49312) - allow searching advisory and cve dates separately
(f6bc29f),
closes #519 - implement default values for radio groups
(e9fd0c0) - allow using javascript snippets to generate search terms
(d7d735f) - add radio button support
(10be1e6) - Enable async guac ingest and adapt config
(ea9b60f) - providing support for getting encoded objects from the storage
(53ffbc4) - add --devmode to collector osv
(bbfa135) - bring --devmode to oidc client config
(8c0263e) - add oidc token providers to clients
(d5cd3e3) - add token provider to v11y client
(8f788bd) - add a simpler way to use no-op tokens
(1516ff6) - add welcome hint for scanner
(6dcfe05) - add "SBOM by dependency" tab
(d9d6fad) - upgrade to tantivy 0.20
(70afb82),
closes #283 - add markdown parser to CSAF notes
(aadc133) - allow searching without fetching document summaries
(0d52589),
closes #450 - make more things configurable
(519a990) - allow adding scopes to the backend info
(48a949f) - expand vexination API to allow deletion of VEX docs
(d43d76f),
closes #438 - allow adding additional scopes based on OIDC client config
(3e60f0f) - minor naming tweaks and docs for integs
(3e925cb),
closes #401
#424 - add container with integration test binaries
(317a13a) - allow building tests without building all of trustification
(dcbdfdd) - point the integs at a remote trustification server
(918c159),
closes #401 - add indexing timestamp
(86e0567) - add get related packages query
(a9085f7) - add get dependents for a package
(5ba652c) - add get dependencies logic
(ad2825e) - make each integ test run use a unique identifier
(dab3864) - factor event waiting logic into a more useful helper fn
(d9ea1d9),
closes #363 - make index size configurable
(9cd37df) - support using s3 directly as index backing store
(fe2d820),
closes #333 - allow configuring reindex at startup
(c572eb2) - add reindexing support
(71cd5ea),
closes #379
#9 - allow disabling authorization
(8c72dd9),
closes [#372]...