Skip to content

Releases: trustification/trustification

0.1.0-nightly.c16cb49f

25 Sep 09:57
Compare
Choose a tag to compare
Pre-release

Changelog

Unreleased (2023-09-25)

Features

  • support different reindexing modes
    (a48704e)

Fixes

v0.1.0-nightly.faf47378 (2023-09-20)

Features

  • allow getting by ID
    (9ef59da)
  • add TLS support to most of the clients
    (eacdac8)
  • add Http endpoint builder, and migrate Bombastic to it
    (8c36365)
  • add readiness probe for API search availability
    (d8ca663),
    closes #532
  • add real health checks
    (9a29169)
  • allow setting a base path for the database
    (832002b)
  • Add NVD collector
    (6f49312)
  • allow searching advisory and cve dates separately
    (f6bc29f),
    closes #519
  • implement default values for radio groups
    (e9fd0c0)
  • allow using javascript snippets to generate search terms
    (d7d735f)
  • add radio button support
    (10be1e6)
  • Enable async guac ingest and adapt config
    (ea9b60f)
  • providing support for getting encoded objects from the storage
    (53ffbc4)
  • add --devmode to collector osv
    (bbfa135)
  • bring --devmode to oidc client config
    (8c0263e)
  • add oidc token providers to clients
    (d5cd3e3)
  • add token provider to v11y client
    (8f788bd)
  • add a simpler way to use no-op tokens
    (1516ff6)
  • add welcome hint for scanner
    (6dcfe05)
  • add "SBOM by dependency" tab
    (d9d6fad)
  • upgrade to tantivy 0.20
    (70afb82),
    closes #283
  • add markdown parser to CSAF notes
    (aadc133)
  • allow searching without fetching document summaries
    (0d52589),
    closes #450
  • make more things configurable
    (519a990)
  • allow adding scopes to the backend info
    (48a949f)
  • expand vexination API to allow deletion of VEX docs
    (d43d76f),
    closes #438
  • allow adding additional scopes based on OIDC client config
    (3e60f0f)
  • minor naming tweaks and docs for integs
    (3e925cb),
    closes #401
    #424
  • add container with integration test binaries
    (317a13a)
  • allow building tests without building all of trustification
    (dcbdfdd)
  • point the integs at a remote trustification server
    (918c159),
    closes #401
  • add indexing timestamp
    (86e0567)
  • add get related packages query
    (a9085f7)
  • add get dependents for a package
    (5ba652c)
  • add get dependencies logic
    (ad2825e)
  • make each integ test run use a unique identifier
    (dab3864)
  • factor event waiting logic into a more useful helper fn
    (d9ea1d9),
    closes #363
  • make index size configurable
    (9cd37df)
  • support using s3 directly as index backing store
    (fe2d820),
    closes #333
  • allow configuring reindex at startup
    (c572eb2)
  • add reindexing support
    (71cd5ea),
    closes #379
    #9
  • allow disabling authorization
    (8c72dd9),
    closes #372
  • implement sorting for search indexes
    (d6f6351),
    closes #247
  • add vuln-counters
    (14e7720)
  • show support URL
    (79b3215)
  • enable custom scoring for vexination
    ([29662a0](29662a0...
Read more

0.1.0-nightly.80734003

25 Sep 08:07
Compare
Choose a tag to compare
Pre-release

Changelog

Unreleased (2023-09-25)

Features

  • support different reindexing modes
    (a48704e)

Fixes

v0.1.0-nightly.faf47378 (2023-09-20)

Features

  • allow getting by ID
    (9ef59da)
  • add TLS support to most of the clients
    (eacdac8)
  • add Http endpoint builder, and migrate Bombastic to it
    (8c36365)
  • add readiness probe for API search availability
    (d8ca663),
    closes #532
  • add real health checks
    (9a29169)
  • allow setting a base path for the database
    (832002b)
  • Add NVD collector
    (6f49312)
  • allow searching advisory and cve dates separately
    (f6bc29f),
    closes #519
  • implement default values for radio groups
    (e9fd0c0)
  • allow using javascript snippets to generate search terms
    (d7d735f)
  • add radio button support
    (10be1e6)
  • Enable async guac ingest and adapt config
    (ea9b60f)
  • providing support for getting encoded objects from the storage
    (53ffbc4)
  • add --devmode to collector osv
    (bbfa135)
  • bring --devmode to oidc client config
    (8c0263e)
  • add oidc token providers to clients
    (d5cd3e3)
  • add token provider to v11y client
    (8f788bd)
  • add a simpler way to use no-op tokens
    (1516ff6)
  • add welcome hint for scanner
    (6dcfe05)
  • add "SBOM by dependency" tab
    (d9d6fad)
  • upgrade to tantivy 0.20
    (70afb82),
    closes #283
  • add markdown parser to CSAF notes
    (aadc133)
  • allow searching without fetching document summaries
    (0d52589),
    closes #450
  • make more things configurable
    (519a990)
  • allow adding scopes to the backend info
    (48a949f)
  • expand vexination API to allow deletion of VEX docs
    (d43d76f),
    closes #438
  • allow adding additional scopes based on OIDC client config
    (3e60f0f)
  • minor naming tweaks and docs for integs
    (3e925cb),
    closes #401
    #424
  • add container with integration test binaries
    (317a13a)
  • allow building tests without building all of trustification
    (dcbdfdd)
  • point the integs at a remote trustification server
    (918c159),
    closes #401
  • add indexing timestamp
    (86e0567)
  • add get related packages query
    (a9085f7)
  • add get dependents for a package
    (5ba652c)
  • add get dependencies logic
    (ad2825e)
  • make each integ test run use a unique identifier
    (dab3864)
  • factor event waiting logic into a more useful helper fn
    (d9ea1d9),
    closes #363
  • make index size configurable
    (9cd37df)
  • support using s3 directly as index backing store
    (fe2d820),
    closes #333
  • allow configuring reindex at startup
    (c572eb2)
  • add reindexing support
    (71cd5ea),
    closes #379
    #9
  • allow disabling authorization
    (8c72dd9),
    closes #372
  • implement sorting for search indexes
    (d6f6351),
    closes #247
  • add vuln-counters
    (14e7720)
  • show support URL
    (79b3215)
  • enable custom scoring for vexination
    ([29662a0](29662a0...
Read more

0.1.0-nightly.3eaa73f9

25 Sep 08:59
Compare
Choose a tag to compare
Pre-release

Changelog

Unreleased (2023-09-25)

Features

  • support different reindexing modes
    (a48704e)

Fixes

v0.1.0-nightly.faf47378 (2023-09-20)

Features

  • allow getting by ID
    (9ef59da)
  • add TLS support to most of the clients
    (eacdac8)
  • add Http endpoint builder, and migrate Bombastic to it
    (8c36365)
  • add readiness probe for API search availability
    (d8ca663),
    closes #532
  • add real health checks
    (9a29169)
  • allow setting a base path for the database
    (832002b)
  • Add NVD collector
    (6f49312)
  • allow searching advisory and cve dates separately
    (f6bc29f),
    closes #519
  • implement default values for radio groups
    (e9fd0c0)
  • allow using javascript snippets to generate search terms
    (d7d735f)
  • add radio button support
    (10be1e6)
  • Enable async guac ingest and adapt config
    (ea9b60f)
  • providing support for getting encoded objects from the storage
    (53ffbc4)
  • add --devmode to collector osv
    (bbfa135)
  • bring --devmode to oidc client config
    (8c0263e)
  • add oidc token providers to clients
    (d5cd3e3)
  • add token provider to v11y client
    (8f788bd)
  • add a simpler way to use no-op tokens
    (1516ff6)
  • add welcome hint for scanner
    (6dcfe05)
  • add "SBOM by dependency" tab
    (d9d6fad)
  • upgrade to tantivy 0.20
    (70afb82),
    closes #283
  • add markdown parser to CSAF notes
    (aadc133)
  • allow searching without fetching document summaries
    (0d52589),
    closes #450
  • make more things configurable
    (519a990)
  • allow adding scopes to the backend info
    (48a949f)
  • expand vexination API to allow deletion of VEX docs
    (d43d76f),
    closes #438
  • allow adding additional scopes based on OIDC client config
    (3e60f0f)
  • minor naming tweaks and docs for integs
    (3e925cb),
    closes #401
    #424
  • add container with integration test binaries
    (317a13a)
  • allow building tests without building all of trustification
    (dcbdfdd)
  • point the integs at a remote trustification server
    (918c159),
    closes #401
  • add indexing timestamp
    (86e0567)
  • add get related packages query
    (a9085f7)
  • add get dependents for a package
    (5ba652c)
  • add get dependencies logic
    (ad2825e)
  • make each integ test run use a unique identifier
    (dab3864)
  • factor event waiting logic into a more useful helper fn
    (d9ea1d9),
    closes #363
  • make index size configurable
    (9cd37df)
  • support using s3 directly as index backing store
    (fe2d820),
    closes #333
  • allow configuring reindex at startup
    (c572eb2)
  • add reindexing support
    (71cd5ea),
    closes #379
    #9
  • allow disabling authorization
    (8c72dd9),
    closes #372
  • implement sorting for search indexes
    (d6f6351),
    closes #247
  • add vuln-counters
    (14e7720)
  • show support URL
    (79b3215)
  • enable custom scoring for vexination
    ([29662a0](29662a0...
Read more

0.1.0-nightly.2e7e449a

23 Sep 01:47
Compare
Choose a tag to compare
Pre-release

Changelog

Unreleased (2023-09-22)

Features

  • support different reindexing modes
    (a48704e)

Fixes

v0.1.0-nightly.faf47378 (2023-09-20)

Features

  • allow getting by ID
    (9ef59da)
  • add TLS support to most of the clients
    (eacdac8)
  • add Http endpoint builder, and migrate Bombastic to it
    (8c36365)
  • add readiness probe for API search availability
    (d8ca663),
    closes #532
  • add real health checks
    (9a29169)
  • allow setting a base path for the database
    (832002b)
  • Add NVD collector
    (6f49312)
  • allow searching advisory and cve dates separately
    (f6bc29f),
    closes #519
  • implement default values for radio groups
    (e9fd0c0)
  • allow using javascript snippets to generate search terms
    (d7d735f)
  • add radio button support
    (10be1e6)
  • Enable async guac ingest and adapt config
    (ea9b60f)
  • providing support for getting encoded objects from the storage
    (53ffbc4)
  • add --devmode to collector osv
    (bbfa135)
  • bring --devmode to oidc client config
    (8c0263e)
  • add oidc token providers to clients
    (d5cd3e3)
  • add token provider to v11y client
    (8f788bd)
  • add a simpler way to use no-op tokens
    (1516ff6)
  • add welcome hint for scanner
    (6dcfe05)
  • add "SBOM by dependency" tab
    (d9d6fad)
  • upgrade to tantivy 0.20
    (70afb82),
    closes #283
  • add markdown parser to CSAF notes
    (aadc133)
  • allow searching without fetching document summaries
    (0d52589),
    closes #450
  • make more things configurable
    (519a990)
  • allow adding scopes to the backend info
    (48a949f)
  • expand vexination API to allow deletion of VEX docs
    (d43d76f),
    closes #438
  • allow adding additional scopes based on OIDC client config
    (3e60f0f)
  • minor naming tweaks and docs for integs
    (3e925cb),
    closes #401
    #424
  • add container with integration test binaries
    (317a13a)
  • allow building tests without building all of trustification
    (dcbdfdd)
  • point the integs at a remote trustification server
    (918c159),
    closes #401
  • add indexing timestamp
    (86e0567)
  • add get related packages query
    (a9085f7)
  • add get dependents for a package
    (5ba652c)
  • add get dependencies logic
    (ad2825e)
  • make each integ test run use a unique identifier
    (dab3864)
  • factor event waiting logic into a more useful helper fn
    (d9ea1d9),
    closes #363
  • make index size configurable
    (9cd37df)
  • support using s3 directly as index backing store
    (fe2d820),
    closes #333
  • allow configuring reindex at startup
    (c572eb2)
  • add reindexing support
    (71cd5ea),
    closes #379
    #9
  • allow disabling authorization
    (8c72dd9),
    closes #372
  • implement sorting for search indexes
    (d6f6351),
    closes #247
  • add vuln-counters
    (14e7720)
  • show support URL
    (79b3215)
  • enable custom scoring for vexination
    (29662a0),
    closes #348
  • add CVE severity count to document summaries
    ([d43d...
Read more

0.1.0-nightly.d652456d

22 Sep 01:44
Compare
Choose a tag to compare
Pre-release

Changelog

Unreleased (2023-09-21)

Fixes

  • reuse single client instance
    (6f90dc7)
  • add oidc params to vex walker
    (3d29d1d),
    closes #547
  • don't log access tokens
    (fc9deaf)
  • fix broken s3 paths on s3
    (f9cb8b3)

v0.1.0-nightly.faf47378 (2023-09-20)

Features

  • allow getting by ID
    (9ef59da)
  • add TLS support to most of the clients
    (eacdac8)
  • add Http endpoint builder, and migrate Bombastic to it
    (8c36365)
  • add readiness probe for API search availability
    (d8ca663),
    closes #532
  • add real health checks
    (9a29169)
  • allow setting a base path for the database
    (832002b)
  • Add NVD collector
    (6f49312)
  • allow searching advisory and cve dates separately
    (f6bc29f),
    closes #519
  • implement default values for radio groups
    (e9fd0c0)
  • allow using javascript snippets to generate search terms
    (d7d735f)
  • add radio button support
    (10be1e6)
  • Enable async guac ingest and adapt config
    (ea9b60f)
  • providing support for getting encoded objects from the storage
    (53ffbc4)
  • add --devmode to collector osv
    (bbfa135)
  • bring --devmode to oidc client config
    (8c0263e)
  • add oidc token providers to clients
    (d5cd3e3)
  • add token provider to v11y client
    (8f788bd)
  • add a simpler way to use no-op tokens
    (1516ff6)
  • add welcome hint for scanner
    (6dcfe05)
  • add "SBOM by dependency" tab
    (d9d6fad)
  • upgrade to tantivy 0.20
    (70afb82),
    closes #283
  • add markdown parser to CSAF notes
    (aadc133)
  • allow searching without fetching document summaries
    (0d52589),
    closes #450
  • make more things configurable
    (519a990)
  • allow adding scopes to the backend info
    (48a949f)
  • expand vexination API to allow deletion of VEX docs
    (d43d76f),
    closes #438
  • allow adding additional scopes based on OIDC client config
    (3e60f0f)
  • minor naming tweaks and docs for integs
    (3e925cb),
    closes #401
    #424
  • add container with integration test binaries
    (317a13a)
  • allow building tests without building all of trustification
    (dcbdfdd)
  • point the integs at a remote trustification server
    (918c159),
    closes #401
  • add indexing timestamp
    (86e0567)
  • add get related packages query
    (a9085f7)
  • add get dependents for a package
    (5ba652c)
  • add get dependencies logic
    (ad2825e)
  • make each integ test run use a unique identifier
    (dab3864)
  • factor event waiting logic into a more useful helper fn
    (d9ea1d9),
    closes #363
  • make index size configurable
    (9cd37df)
  • support using s3 directly as index backing store
    (fe2d820),
    closes #333
  • allow configuring reindex at startup
    (c572eb2)
  • add reindexing support
    (71cd5ea),
    closes #379
    #9
  • allow disabling authorization
    (8c72dd9),
    closes #372
  • implement sorting for search indexes
    (d6f6351),
    closes #247
  • add vuln-counters
    (14e7720)
  • show support URL
    (79b3215)
  • enable custom scoring for vexination
    (29662a0),
    closes #348
  • add CVE severity count to document summaries
    (d43d342)
  • add the "clear all" button
    (0adc2dd)
  • add pre-defined query for "products"
    (1caab7b)
  • provide a unified search experience
    (16d956b)
  • exhort analysis delegates to collectorist fanout
    (290d5b4)
  • modify response structure to include vurl's for each purl
    (25b69a2)
  • plumb the collectorist api for triggering fan-out
    (839d9b0)
  • listen for the SIGINT and SIGTERM signal
    ([04722c0](https://gi...
Read more

0.1.0-nightly.c8f3dbc0

22 Sep 06:42
Compare
Choose a tag to compare
Pre-release

Changelog

Unreleased (2023-09-22)

Features

  • support different reindexing modes
    (a48704e)

Fixes

  • use default the way clippy recommends
    (c8f3dbc)
  • impl default and use in test
    (607bdeb)
  • clippy
    (e725fef)
  • reuse single client instance
    (6f90dc7)
  • add oidc params to vex walker
    (3d29d1d),
    closes #547
  • don't log access tokens
    (fc9deaf)
  • fix broken s3 paths on s3
    (f9cb8b3)

v0.1.0-nightly.faf47378 (2023-09-20)

Features

  • allow getting by ID
    (9ef59da)
  • add TLS support to most of the clients
    (eacdac8)
  • add Http endpoint builder, and migrate Bombastic to it
    (8c36365)
  • add readiness probe for API search availability
    (d8ca663),
    closes #532
  • add real health checks
    (9a29169)
  • allow setting a base path for the database
    (832002b)
  • Add NVD collector
    (6f49312)
  • allow searching advisory and cve dates separately
    (f6bc29f),
    closes #519
  • implement default values for radio groups
    (e9fd0c0)
  • allow using javascript snippets to generate search terms
    (d7d735f)
  • add radio button support
    (10be1e6)
  • Enable async guac ingest and adapt config
    (ea9b60f)
  • providing support for getting encoded objects from the storage
    (53ffbc4)
  • add --devmode to collector osv
    (bbfa135)
  • bring --devmode to oidc client config
    (8c0263e)
  • add oidc token providers to clients
    (d5cd3e3)
  • add token provider to v11y client
    (8f788bd)
  • add a simpler way to use no-op tokens
    (1516ff6)
  • add welcome hint for scanner
    (6dcfe05)
  • add "SBOM by dependency" tab
    (d9d6fad)
  • upgrade to tantivy 0.20
    (70afb82),
    closes #283
  • add markdown parser to CSAF notes
    (aadc133)
  • allow searching without fetching document summaries
    (0d52589),
    closes #450
  • make more things configurable
    (519a990)
  • allow adding scopes to the backend info
    (48a949f)
  • expand vexination API to allow deletion of VEX docs
    (d43d76f),
    closes #438
  • allow adding additional scopes based on OIDC client config
    (3e60f0f)
  • minor naming tweaks and docs for integs
    (3e925cb),
    closes #401
    #424
  • add container with integration test binaries
    (317a13a)
  • allow building tests without building all of trustification
    (dcbdfdd)
  • point the integs at a remote trustification server
    (918c159),
    closes #401
  • add indexing timestamp
    (86e0567)
  • add get related packages query
    (a9085f7)
  • add get dependents for a package
    (5ba652c)
  • add get dependencies logic
    (ad2825e)
  • make each integ test run use a unique identifier
    (dab3864)
  • factor event waiting logic into a more useful helper fn
    (d9ea1d9),
    closes #363
  • make index size configurable
    (9cd37df)
  • support using s3 directly as index backing store
    (fe2d820),
    closes #333
  • allow configuring reindex at startup
    (c572eb2)
  • add reindexing support
    (71cd5ea),
    closes #379
    #9
  • allow disabling authorization
    (8c72dd9),
    closes #372
  • implement sorting for search indexes
    (d6f6351),
    closes #247
  • add vuln-counters
    (14e7720)
  • show support URL
    (79b3215)
  • enable custom scoring for vexination
    (29662a0),
    closes #348
  • add CVE severity count to document summaries
    (d43d342)
  • add the "clear all" button
    (0adc2dd)
  • add pre-defined query for "products"
    (1caab7b)
  • provide a unified search experience
    ([16d956b](16d956b57e111419cfe353e04273...
Read more

0.1.0-nightly.faf47378

20 Sep 10:46
Compare
Choose a tag to compare
Pre-release

Changelog

v0.1.0-nightly.faf47378 (2023-09-20)

Features

  • allow getting by ID
    (9ef59da)
  • add TLS support to most of the clients
    (eacdac8)
  • add Http endpoint builder, and migrate Bombastic to it
    (8c36365)
  • add readiness probe for API search availability
    (d8ca663),
    closes #532
  • add real health checks
    (9a29169)
  • allow setting a base path for the database
    (832002b)
  • Add NVD collector
    (6f49312)
  • allow searching advisory and cve dates separately
    (f6bc29f),
    closes #519
  • implement default values for radio groups
    (e9fd0c0)
  • allow using javascript snippets to generate search terms
    (d7d735f)
  • add radio button support
    (10be1e6)
  • Enable async guac ingest and adapt config
    (ea9b60f)
  • providing support for getting encoded objects from the storage
    (53ffbc4)
  • add --devmode to collector osv
    (bbfa135)
  • bring --devmode to oidc client config
    (8c0263e)
  • add oidc token providers to clients
    (d5cd3e3)
  • add token provider to v11y client
    (8f788bd)
  • add a simpler way to use no-op tokens
    (1516ff6)
  • add welcome hint for scanner
    (6dcfe05)
  • add "SBOM by dependency" tab
    (d9d6fad)
  • upgrade to tantivy 0.20
    (70afb82),
    closes #283
  • add markdown parser to CSAF notes
    (aadc133)
  • allow searching without fetching document summaries
    (0d52589),
    closes #450
  • make more things configurable
    (519a990)
  • allow adding scopes to the backend info
    (48a949f)
  • expand vexination API to allow deletion of VEX docs
    (d43d76f),
    closes #438
  • allow adding additional scopes based on OIDC client config
    (3e60f0f)
  • minor naming tweaks and docs for integs
    (3e925cb),
    closes #401
    #424
  • add container with integration test binaries
    (317a13a)
  • allow building tests without building all of trustification
    (dcbdfdd)
  • point the integs at a remote trustification server
    (918c159),
    closes #401
  • add indexing timestamp
    (86e0567)
  • add get related packages query
    (a9085f7)
  • add get dependents for a package
    (5ba652c)
  • add get dependencies logic
    (ad2825e)
  • make each integ test run use a unique identifier
    (dab3864)
  • factor event waiting logic into a more useful helper fn
    (d9ea1d9),
    closes #363
  • make index size configurable
    (9cd37df)
  • support using s3 directly as index backing store
    (fe2d820),
    closes #333
  • allow configuring reindex at startup
    (c572eb2)
  • add reindexing support
    (71cd5ea),
    closes #379
    #9
  • allow disabling authorization
    (8c72dd9),
    closes #372
  • implement sorting for search indexes
    (d6f6351),
    closes #247
  • add vuln-counters
    (14e7720)
  • show support URL
    (79b3215)
  • enable custom scoring for vexination
    (29662a0),
    closes #348
  • add CVE severity count to document summaries
    (d43d342)
  • add the "clear all" button
    (0adc2dd)
  • add pre-defined query for "products"
    (1caab7b)
  • provide a unified search experience
    (16d956b)
  • exhort analysis delegates to collectorist fanout
    (290d5b4)
  • modify response structure to include vurl's for each purl
    (25b69a2)
  • plumb the collectorist api for triggering fan-out
    (839d9b0)
  • listen for the SIGINT and SIGTERM signal
    (04722c0)
  • allow injecting the access token into URL queries
    (5dc63cb)
  • re-add correlated advisories directly related
    (abf4ba0)
  • add a warning that authentication is turned off
    (88b6f3b)
  • deploy a walker client
    (c28390b)
  • allow setting OIDC client argument via env-vars
    ([3e99a3e]...
Read more

0.1.0-nightly.f9cb8b3e

20 Sep 11:29
Compare
Choose a tag to compare
Pre-release

Changelog

Unreleased (2023-09-20)

Fixes

  • fix broken s3 paths on s3
    (f9cb8b3)

v0.1.0-nightly.faf47378 (2023-09-20)

Features

  • allow getting by ID
    (9ef59da)
  • add TLS support to most of the clients
    (eacdac8)
  • add Http endpoint builder, and migrate Bombastic to it
    (8c36365)
  • add readiness probe for API search availability
    (d8ca663),
    closes #532
  • add real health checks
    (9a29169)
  • allow setting a base path for the database
    (832002b)
  • Add NVD collector
    (6f49312)
  • allow searching advisory and cve dates separately
    (f6bc29f),
    closes #519
  • implement default values for radio groups
    (e9fd0c0)
  • allow using javascript snippets to generate search terms
    (d7d735f)
  • add radio button support
    (10be1e6)
  • Enable async guac ingest and adapt config
    (ea9b60f)
  • providing support for getting encoded objects from the storage
    (53ffbc4)
  • add --devmode to collector osv
    (bbfa135)
  • bring --devmode to oidc client config
    (8c0263e)
  • add oidc token providers to clients
    (d5cd3e3)
  • add token provider to v11y client
    (8f788bd)
  • add a simpler way to use no-op tokens
    (1516ff6)
  • add welcome hint for scanner
    (6dcfe05)
  • add "SBOM by dependency" tab
    (d9d6fad)
  • upgrade to tantivy 0.20
    (70afb82),
    closes #283
  • add markdown parser to CSAF notes
    (aadc133)
  • allow searching without fetching document summaries
    (0d52589),
    closes #450
  • make more things configurable
    (519a990)
  • allow adding scopes to the backend info
    (48a949f)
  • expand vexination API to allow deletion of VEX docs
    (d43d76f),
    closes #438
  • allow adding additional scopes based on OIDC client config
    (3e60f0f)
  • minor naming tweaks and docs for integs
    (3e925cb),
    closes #401
    #424
  • add container with integration test binaries
    (317a13a)
  • allow building tests without building all of trustification
    (dcbdfdd)
  • point the integs at a remote trustification server
    (918c159),
    closes #401
  • add indexing timestamp
    (86e0567)
  • add get related packages query
    (a9085f7)
  • add get dependents for a package
    (5ba652c)
  • add get dependencies logic
    (ad2825e)
  • make each integ test run use a unique identifier
    (dab3864)
  • factor event waiting logic into a more useful helper fn
    (d9ea1d9),
    closes #363
  • make index size configurable
    (9cd37df)
  • support using s3 directly as index backing store
    (fe2d820),
    closes #333
  • allow configuring reindex at startup
    (c572eb2)
  • add reindexing support
    (71cd5ea),
    closes #379
    #9
  • allow disabling authorization
    (8c72dd9),
    closes #372
  • implement sorting for search indexes
    (d6f6351),
    closes #247
  • add vuln-counters
    (14e7720)
  • show support URL
    (79b3215)
  • enable custom scoring for vexination
    (29662a0),
    closes #348
  • add CVE severity count to document summaries
    (d43d342)
  • add the "clear all" button
    (0adc2dd)
  • add pre-defined query for "products"
    (1caab7b)
  • provide a unified search experience
    (16d956b)
  • exhort analysis delegates to collectorist fanout
    (290d5b4)
  • modify response structure to include vurl's for each purl
    (25b69a2)
  • plumb the collectorist api for triggering fan-out
    (839d9b0)
  • listen for the SIGINT and SIGTERM signal
    (04722c0)
  • allow injecting the access token into URL queries
    (5dc63cb)
  • re-add correlated advisories directly related
    (abf4ba0)
  • add a warning that authentication is turned off
    ([88b6f3b](https://github.com/trusti...
Read more

0.1.0-nightly.bb00ad0f

20 Sep 08:11
Compare
Choose a tag to compare
Pre-release

Changelog

Unreleased (2023-09-20)

Features

  • allow getting by ID
    (9ef59da)
  • add TLS support to most of the clients
    (eacdac8)
  • add Http endpoint builder, and migrate Bombastic to it
    (8c36365)
  • add readiness probe for API search availability
    (d8ca663),
    closes #532
  • add real health checks
    (9a29169)
  • allow setting a base path for the database
    (832002b)
  • Add NVD collector
    (6f49312)
  • allow searching advisory and cve dates separately
    (f6bc29f),
    closes #519
  • implement default values for radio groups
    (e9fd0c0)
  • allow using javascript snippets to generate search terms
    (d7d735f)
  • add radio button support
    (10be1e6)
  • Enable async guac ingest and adapt config
    (ea9b60f)
  • providing support for getting encoded objects from the storage
    (53ffbc4)
  • add --devmode to collector osv
    (bbfa135)
  • bring --devmode to oidc client config
    (8c0263e)
  • add oidc token providers to clients
    (d5cd3e3)
  • add token provider to v11y client
    (8f788bd)
  • add a simpler way to use no-op tokens
    (1516ff6)
  • add welcome hint for scanner
    (6dcfe05)
  • add "SBOM by dependency" tab
    (d9d6fad)
  • upgrade to tantivy 0.20
    (70afb82),
    closes #283
  • add markdown parser to CSAF notes
    (aadc133)

Fixes

  • antora requires git in context
    (bb00ad0)
  • vex walker publishes to api url instead of directly to storage
    (b16586e),
    closes #547
  • don't panic on empty response
    (3e4662c)
  • recreate stream from last page on object retrieval errors
    (b28a2be)
  • improve reliability of Guac integration test
    (04f0f9c)
  • choose a different way to handle drop
    (afb1af3)
  • integration test compilation
    (10be3c9)
  • introduce transient and critical error categories for event bus
    (b695ba6)
  • work around an IPv6 issue
    (de031cc)
  • work around clap-rs/clap#5127
    (d572403)
  • fix use of optional dependency
    (a9b7027)
  • retry objects that fail fetching to avoid failing retrieval process early
    (e3e382d)
  • rename
    (89b7f27)
  • retries for reindexing
    (68e9ddf)
  • tekton pipeline migration
    (9e85fcc)
  • a bug in the reset mechanism didnt set the next state correctly
    (0fb43ff)
  • move buttons outside of card
    (d9d2b86)
  • check permission first
    (4107fcb)
  • reindex starting from an empty index
    (484c95f)
  • remove workspaces
    (460fdfc)
  • remote async ingestor
    (35da46b)
  • hide internal errors in API responses
    (d0b0c17)
  • when analytics is disabled, don't ask for consent
    (13f8603)
  • change order of components to support the context requirements
    (11d61c0)
  • add missing ignore
    (75fd974)
  • update nightly compose version
    (eb5bb44)
  • remove inaccurate comment
    (8a8aa58)
  • remove coarse grained index lock
    (81414c6)
  • reduce API latencies by removing unneeded storage lock
    (7a383d4)
  • align env var and cli arg name
    (6fc5fa2)
  • allow configuring sqs via deterministic env vars
    (7129a4c)
  • sorting by severity requires a different fast field reader
    (fc81c6d)
  • keep sorting config for empty queries
    (9eb5c86)
  • don't show all advisories in case there's no identifier
    (5535e99)
  • limit length of columns and truncate version when necessary
    (aa5b5f1)
  • ensure that directory state is not changed if sync failed
    (246d4c2)
  • speed up by using Rcs to handle SBOMs
    (7dba8f2)
  • clippy
    (aab82c2)
  • ensure index is reloaded only if digest has changed
    (0cdede5)
  • race condition reading from s3
    (8ba64ff),
    closes #447
    #353
    [#343](https://github.com/trustification/...
Read more

0.1.0-nightly.eacdac87

19 Sep 01:54
Compare
Choose a tag to compare
Pre-release

Changelog

Unreleased (2023-09-18)

Features

  • add TLS support to most of the clients
    (eacdac8)
  • add Http endpoint builder, and migrate Bombastic to it
    (8c36365)
  • add readiness probe for API search availability
    (d8ca663),
    closes #532
  • add real health checks
    (9a29169)
  • allow setting a base path for the database
    (832002b)
  • Add NVD collector
    (6f49312)
  • allow searching advisory and cve dates separately
    (f6bc29f),
    closes #519
  • implement default values for radio groups
    (e9fd0c0)
  • allow using javascript snippets to generate search terms
    (d7d735f)
  • add radio button support
    (10be1e6)
  • Enable async guac ingest and adapt config
    (ea9b60f)
  • providing support for getting encoded objects from the storage
    (53ffbc4)
  • add --devmode to collector osv
    (bbfa135)
  • bring --devmode to oidc client config
    (8c0263e)
  • add oidc token providers to clients
    (d5cd3e3)
  • add token provider to v11y client
    (8f788bd)
  • add a simpler way to use no-op tokens
    (1516ff6)
  • add welcome hint for scanner
    (6dcfe05)
  • add "SBOM by dependency" tab
    (d9d6fad)
  • upgrade to tantivy 0.20
    (70afb82),
    closes #283
  • add markdown parser to CSAF notes
    (aadc133)

Fixes

  • improve reliability of Guac integration test
    (04f0f9c)
  • choose a different way to handle drop
    (afb1af3)
  • integration test compilation
    (10be3c9)
  • introduce transient and critical error categories for event bus
    (b695ba6)
  • work around an IPv6 issue
    (de031cc)
  • work around clap-rs/clap#5127
    (d572403)
  • fix use of optional dependency
    (a9b7027)
  • retry objects that fail fetching to avoid failing retrieval process early
    (e3e382d)
  • rename
    (89b7f27)
  • retries for reindexing
    (68e9ddf)
  • tekton pipeline migration
    (9e85fcc)
  • a bug in the reset mechanism didnt set the next state correctly
    (0fb43ff)
  • move buttons outside of card
    (d9d2b86)
  • check permission first
    (4107fcb)
  • reindex starting from an empty index
    (484c95f)
  • remove workspaces
    (460fdfc)
  • remote async ingestor
    (35da46b)
  • hide internal errors in API responses
    (d0b0c17)
  • when analytics is disabled, don't ask for consent
    (13f8603)
  • change order of components to support the context requirements
    (11d61c0)
  • add missing ignore
    (75fd974)
  • update nightly compose version
    (eb5bb44)
  • remove inaccurate comment
    (8a8aa58)
  • remove coarse grained index lock
    (81414c6)
  • reduce API latencies by removing unneeded storage lock
    (7a383d4)
  • align env var and cli arg name
    (6fc5fa2)
  • allow configuring sqs via deterministic env vars
    (7129a4c)
  • sorting by severity requires a different fast field reader
    (fc81c6d)
  • keep sorting config for empty queries
    (9eb5c86)
  • don't show all advisories in case there's no identifier
    (5535e99)
  • limit length of columns and truncate version when necessary
    (aa5b5f1)
  • ensure that directory state is not changed if sync failed
    (246d4c2)
  • speed up by using Rcs to handle SBOMs
    (7dba8f2)
  • clippy
    (aab82c2)
  • ensure index is reloaded only if digest has changed
    (0cdede5)
  • race condition reading from s3
    (8ba64ff),
    closes #447
    #353
    #343
  • prevent panic if limit is zero
    (2dccd85),
    closes #455

v0.1.0-nightly.f265ee93 (2023-08-30)

Features

  • allow searching without fetching document summaries
    (0d52589),
    closes #450
  • make more things configurable
    (519a990)
  • allow adding scopes to the backend info
    (48a949f)
  • ...
Read more