Releases: XmirrorSecurity/OpenSCA-cli
v3.0.5
What's Changed
- feat: update to sha256 checksum by @SuperChen-CC in #257
- update: fix syntax errors by @SuperChen-CC in #258
- fix: js lock error by @luotianqi777 in #259
- fix: mvn indirect dependency not inderit dependencies in parent by @luotianqi777 in #260
- fix: delete package.js resolutions by @luotianqi777 in #261
- update: winget identifier by @SuperChen-CC in #262
- fix: npm lock v1 dev depdencies by @luotianqi777 in #263
- update: add Github Actions documentation by @SuperChen-CC in #264
- update: docker container WORKDIR & methods for generating appName by @SuperChen-CC in #265
- update English CICD doc by @Qiuyue1111 in #266
- fix: saas proxy by @luotianqi777 in #267
- Add install script for powershell by @SuperChen-CC in #268
- update: Add installation instructions for Windows users by @SuperChen-CC in #269
- feat: db version range support set format by @luotianqi777 in #270
- feat: set range mix by @luotianqi777 in #271
- fix: readme by @luotianqi777 in #272
- Gomod by @luotianqi777 in #273
- fix: dsdx projectName by @luotianqi777 in #274
- feat: gitlab scanner init by @luotianqi777 in #275
- feat: update support file type by @luotianqi777 in #278
- feat: update by @luotianqi777 in #279
- fix: javascript test example by @luotianqi777 in #280
- feat: task report log by @luotianqi777 in #281
- fix: csv report by @luotianqi777 in #282
- 调整仅保留漏洞组件生效范围 by @yutons in #277
- feat: add package manager support by @SuperChen-CC in #284
- feat: Add ASCII art logo by @SuperChen-CC in #285
- java gradle 编译方式下扫描的路径不在当前目录时, 无法执行gradle命令生成依赖信息 by @hrc8 in #286
- Revert "update: gradle scan dep exists" by @luotianqi777 in #287
- update: Fix the docker build-arg cannot be correctly passed in by @SuperChen-CC in #288
- feat: support war by @luotianqi777 in #289
- update html template & fix mvn bug by @luotianqi777 in #290
- fix: mvn by @luotianqi777 in #292
- Fix mvn by @luotianqi777 in #293
- feat: add OpenSCA Scan Action by @SuperChen-CC in #294
- fix: modify incorrect parameter use by @SuperChen-CC in #295
- fix: mvn download by @luotianqi777 in #297
- fix: check out invalid npm components by @luotianqi777 in #298
- fix: parse dsdx empty by @luotianqi777 in #300
- fix: json2excel by @luotianqi777 in #301
- update: docs by @SuperChen-CC in #276
New Contributors
Full Changelog: v3.0.4...v3.0.5
v3.0.4
Merge pull request #248 from luotianqi777/sarif feat: support sarif
v3.0.3
fix bug: rar and tar file not result
v3.0.2
Bug fix;
Support sync with OpenSCA SaaS.
v3.0.1
Fix special case parsing of Python/Java/JS in windows
Better support for Gradle
v3.0.0
Refactored and upgraded the detection logic;
Allow outputting vulnerability & license info via SBOM;
Support DSDX standard SBOM;
Added interactive UI in CMD/CRT;
Simplified the parameters.
v1.0.13
Multiple formats of local vulnerability database compatible;
Support results in SQLite & CSV;
English HTML report available;
Enhance the logic of parsing JavaScript;
Allow to specify the path of the log file, and scan the directory without decompression.
v1.0.12
Upgrade the ability of license analysis, the license information is available in JSON/HTML/SPDX results;
Solve the HTML loading issue with custom paging;
BUG fix
v1.0.11
Enhance the logic of parsing JAVA;
Allow printing overview & common error messages to CRT;
Support standard SBOM in SWID & Cyclonedx;
Reduce the time cost further.
v1.0.10
- update reademe file
- fix the bug of nil pointer error when using local vulnerability library
- fix the bug of python project with no detection result