Releases: devops-kung-fu/bomber
v0.4.0
bomber now supports enrichment of vulnerability data! Our first enrichment adds EPSS scores into the vulnerability output. What's an EPSS score? It tells us the probability that a vulnerability will be exploited. For in depth information, check out the fascinating documentation at https://www.first.org/epss/
Changelog
v0.3.5
86ed119
djschleen
DJ Schleen
This update contains a few bug fixes and updated documentation, and improves the output of all renderers to output that list of files (and hashes) that bomber has processed during scanning.
v0.3.4
bomber has some new functionality hiding underneath the covers. If you are a Snyk customer, you can now use bomber to scan your SBOMs! Our friends at Snyk also contributed a cool feature that allows you to pipe SBOMs to bomber via STDIN.
We still have some documentation to add for the Snyk provider, but that will be coming soon!
Changelog
v0.3.3
v0.3.2
v0.3.1
v0.3.0
v0.2.1
bomber now outputs to JSON as well as to pretty tables! Just add --output=json when running bomber.
This build also fixes some issues where CVE identifiers were not showing, includes other performance and stability fixes, and now sports a pretty OpenSSF Best Practices badge on the README.md. We ensured that we are following the best practices as defined by OpenSSF and will regularly audit the repository.
Changelog
v0.2.0
Packed with a ton of new features!
bomber now uses OSV as it's default vulnerability provider so you don't need to create an account anywhere and deal with passwords or tokens. You'll also see better output containing CVEs (osv provider), and CWEs (osv and ossindex providers).
A big thank you to the community for feature requests and finding some bugs.