v0.0.2 #878

Closed Pinned

lukehinds announced in Announcements

lukehinds
Sep 6, 2023

What's Changed

build(deps): bump slsa-framework/slsa-github-generator from 1.8.0 to 1.9.0 by @dependabot in build(deps): bump slsa-framework/slsa-github-generator from 1.8.0 to 1.9.0 #757
rule_type create: Add option to create multiple rule types at once or read all filed in directory by @JAORMX in rule_type create: Add option to create multiple rule types at once or read all filed in directory #748
Auto-generated cli documentation update - 2023-08-25 13:04:37 by @github-actions in Auto-generated cli documentation update - 2023-08-25 13:04:37 #759
remove unused internal/engine/entities.go by @jhrozek in remove unused internal/engine/entities.go #762
Update Epic template to remove SaaS engineering section by @dussab in Update Epic template to remove SaaS engineering section #763
Split rule type format to show explicit ingestion and evaluation by @JAORMX in Split rule type format to show explicit ingestion and evaluation #758
build(deps): bump slsa-framework/slsa-verifier from 2.3.0 to 2.4.0 by @dependabot in build(deps): bump slsa-framework/slsa-verifier from 2.3.0 to 2.4.0 #769
build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.17.0 to 2.17.1 by @dependabot in build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.17.0 to 2.17.1 #768
build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.17.0 to 2.17.1 in /tools by @dependabot in build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.17.0 to 2.17.1 in /tools #770
Update docs with new rule type syntax by @JAORMX in Update docs with new rule type syntax #767
small refactor: Move files around for testability by @JAORMX in small refactor: Move files around for testability #771
engine: Handle skipped rules and silent skips by @JAORMX in engine: Handle skipped rules and silent skips #776
.gitignore: Ignore test coverage file by @JAORMX in .gitignore: Ignore test coverage file #774
util: Use dedicated test package for unit tests by @JAORMX in util: Use dedicated test package for unit tests #772
build(deps): bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc from 0.42.0 to 0.43.0 by @dependabot in build(deps): bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc from 0.42.0 to 0.43.0 #779
build(deps): bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace from 1.16.0 to 1.17.0 by @dependabot in build(deps): bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace from 1.16.0 to 1.17.0 #780
build(deps): bump github.com/go-playground/validator/v10 from 10.15.1 to 10.15.2 by @dependabot in build(deps): bump github.com/go-playground/validator/v10 from 10.15.1 to 10.15.2 #782
util: Add test coverage for JSON/YAML utilities by @JAORMX in util: Add test coverage for JSON/YAML utilities #773
build(deps): bump go.opentelemetry.io/otel/sdk/metric from 0.39.0 to 0.40.0 by @dependabot in build(deps): bump go.opentelemetry.io/otel/sdk/metric from 0.39.0 to 0.40.0 #781
build(deps): bump mobx from 6.10.0 to 6.10.1 in /docs by @dependabot in build(deps): bump mobx from 6.10.0 to 6.10.1 in /docs #789
build(deps): bump go.opentelemetry.io/otel/exporters/prometheus from 0.39.0 to 0.40.0 by @dependabot in build(deps): bump go.opentelemetry.io/otel/exporters/prometheus from 0.39.0 to 0.40.0 #790
build(deps): bump github.com/go-playground/validator/v10 from 10.15.2 to 10.15.3 by @dependabot in build(deps): bump github.com/go-playground/validator/v10 from 10.15.2 to 10.15.3 #791
Improve artifact support by storing artifact_id in the rule evaluation table and store artifact information during webhook processing by @jhrozek in Improve artifact support by storing artifact_id in the rule evaluation table and store artifact information during webhook processing #760
Auto-generated DB schema update - 2023-08-30 09:22:38 by @github-actions in Auto-generated DB schema update - 2023-08-30 09:22:38 #792
Increase timeout for syncing repositories by @JAORMX in Increase timeout for syncing repositories #788
engine: Add rego evaluation engine by @JAORMX in engine: Add rego evaluation engine #784
Use IS NOT DISTINCT FROM for comparing rule eval status on upsert by @JAORMX in Use IS NOT DISTINCT FROM for comparing rule eval status on upsert #799
Add guidance to rule types by @JAORMX in Add guidance to rule types #797
Auto-generated DB schema update - 2023-08-30 16:06:13 by @github-actions in Auto-generated DB schema update - 2023-08-30 16:06:13 #802
build(deps): bump github.com/open-policy-agent/opa from 0.52.0 to 0.55.0 by @dependabot in build(deps): bump github.com/open-policy-agent/opa from 0.52.0 to 0.55.0 #809
Use a generic version of JQ accessor, called JQGetTypedFromAccessor to parse GitHub payload by @jhrozek in Use a generic version of JQ accessor, called JQGetTypedFromAccessor to parse GitHub payload #801
engine: Make ErrEvaluationSkipSilently not so silent by @JAORMX in engine: Make ErrEvaluationSkipSilently not so silent #803
Adjust group.order so that PI can claim URLs in the same host by @evankanderson in Adjust group.order so that PI can claim URLs in the same host #815
repositories: Add clone URL to data we track by @JAORMX in repositories: Add clone URL to data we track #793
Auto-generated DB schema update - 2023-08-31 17:21:34 by @github-actions in Auto-generated DB schema update - 2023-08-31 17:21:34 #816
handlers_policy: return more information on artifacts by @jhrozek in handlers_policy: return more information on artifacts #812
containers: Suppress error message when trying to fetch signatures by @jhrozek in containers: Suppress error message when trying to fetch signatures #811
build(deps): bump github.com/open-policy-agent/opa from 0.55.0 to 0.56.0 by @dependabot in build(deps): bump github.com/open-policy-agent/opa from 0.55.0 to 0.56.0 #818
build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.18.37 to 1.18.38 by @dependabot in build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.18.37 to 1.18.38 #821
build(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.0 by @dependabot in build(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.0 #820
build(deps): bump mobx from 6.10.1 to 6.10.2 in /docs by @dependabot in build(deps): bump mobx from 6.10.1 to 6.10.2 in /docs #822
tests: Add a test to initialize the artifact ingester by @jhrozek in tests: Add a test to initialize the artifact ingester #823
Add git ingester by @JAORMX in Add git ingester #775
Putting it all together: Enables us to run rego rules on git contents by @JAORMX in Putting it all together: Enables us to run rego rules on git contents #825
build(deps): bump github.com/sigstore/sigstore from 1.7.2 to 1.7.3 by @dependabot in build(deps): bump github.com/sigstore/sigstore from 1.7.2 to 1.7.3 #828
build(deps): bump golang.org/x/term from 0.11.0 to 0.12.0 by @dependabot in build(deps): bump golang.org/x/term from 0.11.0 to 0.12.0 #827
rego: Introduce file.ls which allows us to list files by @JAORMX in rego: Introduce file.ls which allows us to list files #829
builtin: Return evalerrors.ErrEvaluationSkipSilently in case the builtin evaluator doesn't match the entity by @jhrozek in builtin: Return evalerrors.ErrEvaluationSkipSilently in case the builtin evaluator doesn't match the entity #800
Return why an artifact was skipped from the artifact ingester by @jhrozek in Return why an artifact was skipped from the artifact ingester #810
Remove pr-size action by @lukehinds in Remove pr-size action #840
fix: use consistent sql.ErrNoRow error comparision by @rdimitrov in fix: use consistent sql.ErrNoRow error comparision #832
Implements Dependabot Checks by @lukehinds in Implements Dependabot Checks #843
build(deps): bump actions/checkout from 3 to 4 by @dependabot in build(deps): bump actions/checkout from 3 to 4 #849
Policy to verify actions are pinned to sha1 by @lukehinds in Policy to verify actions are pinned to sha1 #845
tools: Add setup.sh script by @JAORMX in tools: Add setup.sh script #853
refactor: Move webhook event parsing logic to webhook handler by @JAORMX in refactor: Move webhook event parsing logic to webhook handler #841
dev: Add log message when rule violation happens by @JAORMX in dev: Add log message when rule violation happens #854
cleanup: Remove commented out entries from policy by @JAORMX in cleanup: Remove commented out entries from policy #851
cleanup: remove unnecessary checkups from rule by @JAORMX in cleanup: remove unnecessary checkups from rule #852
Add policy init and reconcile policy support for artifacts by @jhrozek in Add policy init and reconcile policy support for artifacts #844
Auto-generated cli documentation update - 2023-09-05 16:39:02 by @github-actions in Auto-generated cli documentation update - 2023-09-05 16:39:02 #855
rules: Fix actions_check_pinned_tags rule by @JAORMX in rules: Fix actions_check_pinned_tags rule #857
Fix migratedown target by @eleftherias in Fix migratedown target #858
Avoid log spam on CheckHealth by @evankanderson in Avoid log spam on CheckHealth #864
build(deps): bump golang.org/x/tools from 0.12.0 to 0.13.0 in /tools by @dependabot in build(deps): bump golang.org/x/tools from 0.12.0 to 0.13.0 in /tools #866
build(deps): bump github.com/daixiang0/gci from 0.11.0 to 0.11.1 in /tools by @dependabot in build(deps): bump github.com/daixiang0/gci from 0.11.0 to 0.11.1 in /tools #867
build(deps): bump golang.org/x/crypto from 0.12.0 to 0.13.0 by @dependabot in build(deps): bump golang.org/x/crypto from 0.12.0 to 0.13.0 #868
build(deps): bump golang.org/x/oauth2 from 0.11.0 to 0.12.0 by @dependabot in build(deps): bump golang.org/x/oauth2 from 0.11.0 to 0.12.0 #869
build(deps): bump github.com/ThreeDotsLabs/watermill from 1.3.3 to 1.3.4 by @dependabot in build(deps): bump github.com/ThreeDotsLabs/watermill from 1.3.3 to 1.3.4 #870
build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.18.38 to 1.18.39 by @dependabot in build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.18.38 to 1.18.39 #871
rego: Fix constraints evaluation type and prettify result by @JAORMX in rego: Fix constraints evaluation type and prettify result #863
medev: a CLI tool to work with mediator by @JAORMX in medev: a CLI tool to work with mediator #865
Handle type cast errors by @eleftherias in Handle type cast errors #850
Auto-generated cli documentation update - 2023-09-06 16:08:57 by @github-actions in Auto-generated cli documentation update - 2023-09-06 16:08:57 #877

New Contributors

@rdimitrov made their first contribution in fix: use consistent sql.ErrNoRow error comparision #832
@eleftherias made their first contribution in Fix migratedown target #858

Full Changelog: v0.0.1...v0.0.2

This discussion was created from the release v0.0.2.

Replies: 0 comments

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment