diff --git a/.github/workflows/pr-validation.yml b/.github/workflows/pr-validation.yml index 319c3dc86b2..6c73b8fbb2b 100644 --- a/.github/workflows/pr-validation.yml +++ b/.github/workflows/pr-validation.yml @@ -216,7 +216,16 @@ jobs: steps: - uses: actions/checkout@v3 + - uses: dorny/paths-filter@v2 + id: filter + with: + filters: | + deps: + - 'go.mod' + - 'go.sum' + - name: Run Trivy vulnerability scanner in repo mode + if: steps.filter.outputs.deps == 'true' uses: aquasecurity/trivy-action@0.6.1 with: scan-type: 'fs' diff --git a/CHANGELOG.md b/CHANGELOG.md index 7207f3f6138..0e7c186c6c6 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -37,27 +37,27 @@ To learn more about our roadmap, we recommend reading [this document](ROADMAP.md ### New -- TODO ([#XXX](https://github.com/kedacore/keda/issue/XXX)) +- TODO ([#XXX](https://github.com/kedacore/keda/issues/XXX)) ### Improvements -- TODO ([#XXX](https://github.com/kedacore/keda/issue/XXX)) +- TODO ([#XXX](https://github.com/kedacore/keda/issues/XXX)) ### Fixes -- TODO ([#XXX](https://github.com/kedacore/keda/issue/XXX)) +- TODO ([#XXX](https://github.com/kedacore/keda/issues/XXX)) ### Deprecations -- TODO ([#XXX](https://github.com/kedacore/keda/issue/XXX)) +- TODO ([#XXX](https://github.com/kedacore/keda/issues/XXX)) ### Breaking Changes -- TODO ([#XXX](https://github.com/kedacore/keda/issue/XXX)) +- TODO ([#XXX](https://github.com/kedacore/keda/issues/XXX)) ### Other -- TODO ([#XXX](https://github.com/kedacore/keda/issue/XXX)) +- **General:** Execute trivy scan (on PRs) only if there are changes in deps ([#3540](https://github.com/kedacore/keda/issues/3540)) ## v2.8.0 @@ -84,8 +84,8 @@ To learn more about our roadmap, we recommend reading [this document](ROADMAP.md - **General:** Add settings for configuring leader election ([#2836](https://github.com/kedacore/keda/issues/2836)) - **General:** `external` extension reduces connection establishment with long links ([#3193](https://github.com/kedacore/keda/issues/3193)) - **General:** Reference ScaledObject's/ScaledJob's name in the scalers log ([3419](https://github.com/kedacore/keda/issues/3419)) -- **General:** Use `mili` scale for the returned metrics ([#3135](https://github.com/kedacore/keda/issue/3135)) -- **General:** Use more readable timestamps in KEDA Operator logs ([#3066](https://github.com/kedacore/keda/issue/3066)) +- **General:** Use `mili` scale for the returned metrics ([#3135](https://github.com/kedacore/keda/issues/3135)) +- **General:** Use more readable timestamps in KEDA Operator logs ([#3066](https://github.com/kedacore/keda/issues/3066)) - **Kafka Scaler:** Handle Sarama errors properly ([#3056](https://github.com/kedacore/keda/issues/3056)) ### Fixes @@ -93,8 +93,8 @@ To learn more about our roadmap, we recommend reading [this document](ROADMAP.md - **General:** Provide patch for CVE-2022-27191 vulnerability ([#3378](https://github.com/kedacore/keda/issues/3378)) - **General:** Refactor adapter startup to ensure proper log initilization. ([2316](https://github.com/kedacore/keda/issues/2316)) - **General:** Scaleobject ready condition 'False/Unknow' to 'True' requeue ([#3096](https://github.com/kedacore/keda/issues/3096)) -- **General:** Use `go install` in the Makefile for downloading dependencies ([#2916](https://github.com/kedacore/keda/issue/2916)) -- **General:** Use metricName from GetMetricsSpec in ScaledJobs instead of `queueLength` ([#3032](https://github.com/kedacore/keda/issue/3032)) +- **General:** Use `go install` in the Makefile for downloading dependencies ([#2916](https://github.com/kedacore/keda/issues/2916)) +- **General:** Use metricName from GetMetricsSpec in ScaledJobs instead of `queueLength` ([#3032](https://github.com/kedacore/keda/issues/3032)) - **ActiveMQ Scaler:** KEDA doesn't respect restAPITemplate ([#3188](https://github.com/kedacore/keda/issues/3188)) - **Azure Eventhub Scaler:** KEDA operator crashes on nil memory panic if the eventhub connectionstring for Azure Eventhub Scaler contains an invalid character ([#3082](https://github.com/kedacore/keda/issues/3082)) - **Azure Pipelines Scaler:** Fix issue with Azure Pipelines wrong PAT Auth. ([#3159](https://github.com/kedacore/keda/issues/3159)) @@ -130,7 +130,7 @@ None. ### Other -- **General**: Fix CVE-2022-21221 in `github.com/valyala/fasthttp` ([#2775](https://github.com/kedacore/keda/issue/2775)) +- **General**: Fix CVE-2022-21221 in `github.com/valyala/fasthttp` ([#2775](https://github.com/kedacore/keda/issues/2775)) - **General**: Bump Golang to 1.17.9 ([#3016](https://github.com/kedacore/keda/issues/3016)) - **General**: Fix autoscaling behaviour while paused. ([#3009](https://github.com/kedacore/keda/issues/3009)) diff --git a/RELEASE-PROCESS.md b/RELEASE-PROCESS.md index 64a1cfed1c5..2c4713c44f7 100644 --- a/RELEASE-PROCESS.md +++ b/RELEASE-PROCESS.md @@ -55,7 +55,7 @@ Here are the new deprecation(s) as of this release: Learn how to deploy KEDA by reading [our documentation](https://keda.sh/docs/INSERT-CORRECT-VERSION/deploy/). 🗓️ The next KEDA release is currently being estimated for , learn more in our [roadmap](https://github.com/kedacore/keda/blob/main/ROADMAP.md#upcoming-release-cycles). - + ### New -