Skip to content

Releases: wetransform/gha-trivy

v2.3.1

18 Nov 19:46
Compare
Choose a tag to compare

2.3.1 (2024-11-18)

Bug Fixes

  • deps: update jaxxstorm/action-install-gh-release action to v1.13.0 (95c3841)
  • deps: update mikepenz/action-junit-report action to v5 (0267604)
  • use alternate repos also for Java DB, don't default to ghcr (a831eea)

v2.3.0

24 Oct 12:12
Compare
Choose a tag to compare

2.3.0 (2024-10-24)

Features

  • update trivy action and add fallback registry (498d53a)

Bug Fixes

  • deps: update actions/cache action to v4.1.0 (34d09a6)
  • deps: update actions/cache action to v4.1.2 (f86f716)
  • deps: update actions/upload-artifact action to v4.4.1 (96ec1ef)
  • deps: update all non-major dependencies (c11af89)
  • fix access broken access to default templates after update (99d93e2)

v2.2.1

02 Oct 15:23
Compare
Choose a tag to compare

2.2.1 (2024-10-02)

Bug Fixes

  • ignore error saving trivy cache (9105dfb)

v2.2.0

25 Sep 13:39
Compare
Choose a tag to compare

2.2.0 (2024-09-25)

Features

Bug Fixes

  • deps: update actions/cache action to v4.0.2 (624ec10)
  • deps: update actions/upload-artifact action to v4.3.4 (0bce74b)
  • deps: update actions/upload-artifact action to v4.3.6 (5056a0f)
  • deps: update actions/upload-artifact action to v4.4.0 (057aa51)
  • deps: update mikepenz/action-junit-report action to v4.3.1 (60a7fc2)
  • deps: update trivy action to 0.24.0 (a5557a0)

v2.1.0

21 Jun 17:45
Compare
Choose a tag to compare

2.1.0 (2024-06-21)

Features

  • make summary creation optional (5364d6c)
  • support using existing SBOM (607a0c2)

Bug Fixes

  • deps: update mikepenz/action-junit-report action to v4.3.0 (722da5d)
  • don't create artifacts for existing SBOM (5393f25)
  • SBOM should be created even if no JUnit report is created (8143d9b)

v2.0.1

19 Jun 13:30
Compare
Choose a tag to compare

2.0.1 (2024-06-19)

Bug Fixes

  • avoid using invalid characters for artifact name (d6c04e7)

v2.0.0

19 Jun 11:10
Compare
Choose a tag to compare

2.0.0 (2024-06-19)

⚠ BREAKING CHANGES

  • Reports are no longer uploaded to the same shared
    artifact, because of the update to upload-artifact version 4

Features

  • add CSV representation of SBOM (2bc1659)
  • generate SBOM and use if for repeated scans (ad54fe9)

Bug Fixes

  • deps: pin dependencies (1de9f8e)
  • deps: update all non-major dependencies (666b486)
  • sanitize SBOM file names (d71a0be)

v1.1.1

12 Apr 20:26
Compare
Choose a tag to compare

1.1.1 (2024-04-12)

Bug Fixes

  • deps: pin aquasecurity/trivy-action action to d710430 (11f10f8)
  • deps: pin wetransform/gha-docker-nonroot action to 163ae1a (a510291)
  • deps: update all non-major dependencies (79fe060)
  • deps: update all non-major dependencies (0b2b80d)
  • deps: update mikepenz/action-junit-report action to v4 (1173670)
  • deps: update wetransform/gha-docker-nonroot action to v1.0.3 (a9b37f0)
  • deps: update wetransform/gha-docker-nonroot digest to f46f552 (2abca52)
  • update trivy-action to 0.19.0 (174b873)

v1.1.0

26 Mar 13:04
Compare
Choose a tag to compare

1.1.0 (2024-03-26)

Features

  • add Docker image user check (9b9d36b)

Initial release

16 Nov 13:19
Compare
Choose a tag to compare
v1.0.0

fixup! refactor: add icon and color