v0.23.0

Breaking Changes

• Add scan-version command to CVE CLI which allows for easier scans of a single version (tag) of multiple images. (#469)

v0.22.4

New Features

• Add require label to changelog validation to ensure we have valid version (#503)

v0.22.3

This release contained no user-facing changes.

v0.22.2

This release contained no user-facing changes.

v0.22.1

Fixes

• fixed typo in trivy logs (#490)

v0.22.0

Breaking Changes

• Greatly reduced trivy scan time by detecting exit codes to prevent duplicate runs and backoff delays. In the process some originally public functions were made private. (#490)

v0.21.28

Fixes

• Add option to set timeout in grpcutils. (#486)

v0.21.27

Fixes

• Ensure that the handler for the /logging endpoint of the stats server is never nil. (solo-io/gloo#6449)
• Ensure the SecurityScanner scans all images for a set of minor versions. Previously, the scanner would only scan the latest patch release, which would cause docs which depend on these scans (as Gloo Edge does) to show empty scans. (#469)
• Expose a new option 'CreateGithubIssueForLatestPatchVersion', which when enabled, will ensure that the SecurityScanner only creates Github issues to track the latest patch version as opposed to creating an issue for every version (which it has historically done) (#478)

v0.21.26

New Features

• Only create scans for the latest patches in a version (#478)

v0.21.25

Dependency Bumps

• golang/golang.org/x/crypto has been upgraded to v0.0.0-20220315160706-3147a52a75dd.
• golang/go has been upgraded to v1.18.