Releases: mindersec/minder
Releases · mindersec/minder
v0.0.22
What's Changed
- Set documentation for context appropriately by @JAORMX in #1939
- Reset timeout for each file processed by
ruletype
create
/apply
by @JAORMX in #1938 - Update docs for profile status command by @eleftherias in #1940
- Take into account frizbee configuration in repository by @JAORMX in #1943
- Upgrade golangci-lint to v1.55.2 in CI by @JAORMX in #1948
- Remove invalid validation for projects in reconcilers by @JAORMX in #1947
- Don't attempt to reopen a PR after updating a branch if it already exists by @jhrozek in #1944
- Use a dedicated GH API call to get the e-mail address by @jhrozek in #1951
- Add CODEOWNERS to minder by @JAORMX in #1941
- Use zerolog everywhere by @JAORMX in #1952
- Log successful event handling in watermill middleware by @JAORMX in #1953
- Default to v1 and profile if profile type or version are not set to fix old clients by @jhrozek in #1954
- Security Process for Minder by @lukehinds in #1955
- Add discord badge by @lukehinds in #1958
- build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 by @dependabot in #1963
- build(deps): bump google.golang.org/grpc from 1.60.0 to 1.60.1 by @dependabot in #1964
- build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 in /tools by @dependabot in #1962
- build(deps): bump github.com/spf13/viper from 1.18.1 to 1.18.2 by @dependabot in #1965
- Allow tools to depend on targets in the rest of the minder repo by @evankanderson in #1959
- Fix "Get Hacking" page service name by @teodor-yanev in #1966
- Artifact list: filter per repo by @jhrozek in #1967
- Upgrade frizbee to v0.1.12 by @JAORMX in #1968
- Pass through error messages from AuthFromMD for debugging by @evankanderson in #1960
- Add simplified FGA model and tests for same by @evankanderson in #1790
- Auto-generated cli documentation update - 2023-12-19 15:14:07 by @github-actions in #1969
- Minder CLI improvements - table interface, refactor use of flags, context, etc. by @rdimitrov in #1919
- Auto-generated cli documentation update - 2023-12-19 17:19:23 by @github-actions in #1971
- build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 by @dependabot in #1972
- Fix alert docs and update key value column width by @rdimitrov in #1973
- Fix styling for discord badge in Readme by @rdimitrov in #1975
- Fix pull_request remediation from branch by @jhrozek in #1976
- build(deps): bump golang from
2ff79bc
to1a9d253
by @dependabot in #1980 - build(deps): bump google.golang.org/grpc from 1.60.0 to 1.60.1 by @dependabot in #1978
- build(deps): bump styled-components from 6.1.1 to 6.1.2 in /docs by @dependabot in #1981
- Quickstart updates - bump timeout and show all registered repos by @rdimitrov in #1977
- Remove config parsing from
mindev
by @JAORMX in #1983 - Replace unpinned actions with pinned action by @stacklokbot in #1984
- Add table output to artifact get, make it the default by @jhrozek in #1986
- Auto-generated cli documentation update - 2023-12-20 13:56:42 by @github-actions in #1987
- Ensure output format is supported at artifact_get.go by @rdimitrov in #1988
- build(deps): bump github/codeql-action from 1743d02c67be5a24134dacfe540706cbe6652208 to b374143c1149a9115d881581d29b8390bbcbb59c by @dependabot in #1996
- build(deps): bump peaceiris/actions-gh-pages from 4a2e02b36f31d8974a0d09d3bb9f3172aa2d0d0d to 373f7f263a76c20808c831209c920827a82a2847 by @dependabot in #1997
- build(deps): bump github.com/golang-migrate/migrate/v4 from 4.16.2 to 4.17.0 by @dependabot in #1999
- build(deps): bump golang from
1a9d253
to672a228
by @dependabot in #1998 - build(deps): bump github.com/open-policy-agent/opa from 0.59.0 to 0.60.0 by @dependabot in #2000
- Add
type
to diff ingester protobuf by @JAORMX in #1993 - Fix screenshots for OAuth app creation (social and provider enrollment) by @rdimitrov in #1995
- Surface git clone errors as failures if the branch doesn't exist by @JAORMX in #2001
- Deploy docs on merges to
main
by @JAORMX in #2002 - Add get-by-name to artifact get by @jhrozek in #1990
New Contributors
- @stacklokbot made their first contribution in #1984
Full Changelog: v0.0.21...v0.0.22
v0.0.21
What's Changed
- Point Trusty helm chart default to public instance by @evankanderson in #1833
- Auto-generated helm documentation update - 2023-12-08 10:56:39 by @github-actions in #1867
- Tidy the helm chart strings for the docs by @rdimitrov in #1868
- Auto-generated helm documentation update - 2023-12-08 11:18:54 by @github-actions in #1869
- Deprecate the "update" subcommands in favour of "apply" in minder CLI by @rdimitrov in #1870
- Auto-generated cli documentation update - 2023-12-08 12:12:46 by @github-actions in #1871
- Make status a sub-command of profile by @eleftherias in #1873
- Get default provider from those enrolled in project by @eleftherias in #1859
- Auto-generated cli documentation update - 2023-12-08 14:46:39 by @github-actions in #1875
- Auto-generated cli documentation update - 2023-12-08 14:48:06 by @github-actions in #1876
- Add CodeQL scanning to Minder by @JAORMX in #1877
- build(deps): bump github.com/go-critic/go-critic from 0.9.0 to 0.10.0 in /tools by @dependabot in #1888
- build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.26.0 to 1.26.1 by @dependabot in #1884
- build(deps): bump golang from
58e14a9
toae34fbf
by @dependabot in #1883 - build(deps): bump github.com/go-git/go-git/v5 from 5.10.1 to 5.11.0 by @dependabot in #1882
- build(deps): bump actions/checkout from 3 to 4 by @dependabot in #1886
- build(deps): bump github.com/daixiang0/gci from 0.11.2 to 0.12.0 in /tools by @dependabot in #1887
- build(deps): bump github.com/spf13/viper from 1.18.0 to 1.18.1 by @dependabot in #1885
- Skip actions on error in the executor by @JAORMX in #1814
- Always return response from github_rest's Do() by @jhrozek in #1890
- Don't
ExitNicelyOnError
on the sub-commands by @JAORMX in #1889 - Replace cli utilities print functions for cobra's by @JAORMX in #1891
- Remove unused crypto config by @eleftherias in #1893
- Replace cosign with sigstore-go by @rdimitrov in #1806
- Add back nonce period config value by @eleftherias in #1896
- Re-enable proto compatibility checks by @evankanderson in #1895
- Retire message Provider -- it is not used by @evankanderson in #1898
- Remove cloud provider provided database password by @JAORMX in #1897
- Use terminal width for Minder output by @evankanderson in #1899
- Remove GetDBURI and cached connection string by @evankanderson in #1900
- Avoid over-large allocation in EncryptBytes by @evankanderson in #1901
- build(deps): bump github.com/stacklok/frizbee from 0.0.5 to 0.0.7 by @dependabot in #1903
- build(deps): bump google.golang.org/grpc from 1.59.0 to 1.60.0 by @dependabot in #1904
- Remove kubernetes dependency from
repo register
sub-command by @JAORMX in #1907 - Setup go in CodeQL action by @JAORMX in #1906
- build(deps): bump sigstore/cosign-installer from 3.2.0 to 3.3.0 by @dependabot in #1905
- Add provider to
FlushAll
call in aggregator by @JAORMX in #1909 - Make pull request remediations extendable, add action pinning remediation by @jhrozek in #1808
- Refactor-add context to grpc reqests v2 by @teodor-yanev in #1911
- build(deps): bump github.com/stacklok/frizbee from 0.0.7 to 0.0.9 by @dependabot in #1915
- build(deps): bump actions/setup-go from 4 to 5 by @dependabot in #1914
- build(deps): bump golang from
ae34fbf
to2ff79bc
by @dependabot in #1912 - build(deps): bump github.com/google/uuid from 1.4.0 to 1.5.0 by @dependabot in #1916
- build(deps): bump golang.org/x/tools from 0.16.0 to 0.16.1 in /tools by @dependabot in #1913
- Add default branch as a repository field by @JAORMX in #1908
- Auto-generated DB schema update - 2023-12-13 11:17:23 by @github-actions in #1917
- Split minder server and CLI config by @eleftherias in #1918
- Auto-generated helm documentation update - 2023-12-13 19:04:20 by @github-actions in #1921
- build(deps): bump k8s.io/apimachinery from 0.28.4 to 0.29.0 by @dependabot in #1927
- build(deps): bump github/codeql-action from 2 to 3 by @dependabot in #1925
- build(deps): bump github.com/charmbracelet/bubbles from 0.16.1 to 0.17.1 by @dependabot in #1928
- Split files in
pull_request
remediation golang package by @JAORMX in #1929 - Add protobuf for configuring the actions tag-to-sha replacement by @JAORMX in #1926
- Add validation for profile's type and version by @JAORMX in #1930
- Add
excludes
configuration for frizbee by @JAORMX in #1931 - Create context between steps in quickstart by @jhrozek in #1924
- Parse GitHub Action exclusion from rule def by @JAORMX in #1934
- Fix GetProfileById auth perms by @JAORMX in #1937
Full Changelog: v0.0.20...v0.0.21
v0.0.20
What's Changed
- build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.25.5 to 1.25.6 by @dependabot in #1732
- build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.25.6 to 1.25.8 by @dependabot in #1768
- build(deps): bump github.com/aws/aws-sdk-go-v2/feature/rds/auth from 1.3.4 to 1.3.5 by @dependabot in #1767
- Remove KeyService API from Minder by @JAORMX in #1769
- Remove revoke token functions by @JAORMX in #1770
- Adds a bit more clarity to the getting started guide by @andresgalante in #1765
- Auto-generated cli documentation update - 2023-11-29 11:14:55 by @github-actions in #1771
- Extend the EvalParams interface to store ingestion result by @jhrozek in #1772
- Make the pull-request remediator use git-go instead of plan GH API calls by @jhrozek in #1773
- Add a gauge to count the quickstart profiles by @jhrozek in #1775
- build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.25.8 to 1.25.10 by @dependabot in #1778
- build(deps): bump github.com/google/go-containerregistry from 0.16.1 to 0.17.0 by @dependabot in #1777
- Ignore /dist directory generated by goreleaser by @dio in #1785
- build(deps): bump github.com/aws/aws-sdk-go-v2/feature/rds/auth from 1.3.5 to 1.3.7 by @dependabot in #1776
- Don't double-comment on PRs by @jhrozek in #1786
- Make sure each call to NewRand is initialized with a unique seed by @dio in #1787
- build(deps-dev): bump @docusaurus/module-type-aliases from 3.0.0 to 3.0.1 in /docs by @dependabot in #1791
- build(deps): bump github.com/stacklok/frizbee from 0.0.4 to 0.0.5 by @dependabot in #1788
- build(deps): bump github.com/open-policy-agent/opa from 0.58.0 to 0.59.0 by @dependabot in #1789
- Upgrade github-go and drop unused GH API by @jhrozek in #1792
- Run go mod tidy to prune the old go-github version from go.mod and go.sum by @jhrozek in #1793
- Modify
mindev
to haveruletype
subcommand by @JAORMX in #1794 - Introduce
mindev ruletype lint
command by @JAORMX in #1796 - build(deps): bump github.com/lestrrat-go/jwx/v2 from 2.0.17 to 2.0.18 by @dependabot in #1800
- build(deps): bump github.com/itchyny/gojq from 0.12.13 to 0.12.14 by @dependabot in #1801
- build(deps): bump github.com/aws/aws-sdk-go-v2/feature/rds/auth from 1.3.7 to 1.3.8 by @dependabot in #1802
- build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.25.10 to 1.25.11 by @dependabot in #1799
- Switch events configuration reference to English by @JAORMX in #1803
- Adds commit lint to the CI by @andresgalante in #1784
- README: add
ko
as a dependency for minder-server by @ethomson in #1809 - build(deps): bump actions/checkout from 2 to 4 by @dependabot in #1811
- build(deps): bump github.com/sigstore/sigstore from 1.7.5 to 1.7.6 by @dependabot in #1813
- build(deps): bump anchore/sbom-action from 0.15.0 to 0.15.1 by @dependabot in #1812
- Remove commit lint job by @JAORMX in #1817
- Rename Rule Type sub-commands to
ruletype
by @JAORMX in #1816 - Auto-generated cli documentation update - 2023-12-05 11:09:02 by @github-actions in #1818
- Add README to
mindev
command by @JAORMX in #1819 - Simplify identity settings in config.yaml by @eleftherias in #1820
- Auto-generated cli documentation update - 2023-12-05 10:36:13 by @github-actions in #1821
- Add subcommand to apply profiles by @JAORMX in #1815
- Auto-generated cli documentation update - 2023-12-05 12:40:25 by @github-actions in #1822
- Rename groups to projects in comments and logs by @eleftherias in #1823
- Simplify authorization and cleanup unused methods by @eleftherias in #1824
- build(deps): bump golang from 1.21.4 to 1.21.5 by @dependabot in #1829
- build(deps): bump github.com/styrainc/regal from 0.13.0 to 0.14.0 by @dependabot in #1828
- Run tests in a silent mode (error only output) by @rdimitrov in #1830
- Avoid attempting to lock deleted repos by @evankanderson in #1834
- Avoid attempting to lock other deleted resources by @evankanderson in #1835
- Set ProjectID for entities created during FlushAll by @evankanderson in #1838
- build(deps): bump github.com/spf13/viper from 1.17.0 to 1.18.0 by @dependabot in #1840
- build(deps): bump actions/setup-go from 4 to 5 by @dependabot in #1856
- build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.25.11 to 1.25.12 by @dependabot in #1841
- Remove eventer retry middleware and retrable error construct by @JAORMX in #1842
- Remove org field and make req ctx fields optional by @teodor-yanev in #1831
- Add username/password login, and better document setting up login in get-hacking by @evankanderson in #1861
- Add CLI wrapper that passes in a default context and GRPC client by @JAORMX in #1857
- build(deps): bump actions/stale from 8 to 9 by @dependabot in #1865
- build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.25.12 to 1.26.0 by @dependabot in #1864
- Move common
PreRun
calls to cli wrapper by @JAORMX in #1866 - build(deps): bump github.com/aws/aws-sdk-go-v2/feature/rds/auth from 1.3.8 to 1.3.9 by @dependabot in #1863
New Contributors
Full Changelog: v0.0.19...v0.0.20
v0.0.19
What's Changed
- Update README.md with quickstart screencast by @rdimitrov in #1697
- Add option to set default selected choice for minder prompts by @rdimitrov in #1698
- Use missingkey=error for text/template by @jhrozek in #1682
- build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.25.3 to 1.25.4 by @dependabot in #1701
- build(deps): bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace from 1.20.0 to 1.21.0 by @dependabot in #1702
- build(deps): bump github.com/aws/aws-sdk-go-v2/feature/rds/auth from 1.3.3 to 1.3.4 by @dependabot in #1700
- build(deps): bump anchore/sbom-action from 0.14.3 to 0.15.0 by @dependabot in #1699
- Update the docs with the quickstart command by @rdimitrov in #1707
- Remove unused empty file by @jhrozek in #1709
- build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.25.4 to 1.25.5 by @dependabot in #1713
- build(deps): bump golang from
57bf74a
to4521f9d
by @dependabot in #1712 - build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1 by @dependabot in #1711
- Add PostgreSQL Messaging Pub/Sub Watermill by @teodor-yanev in #1680
- Increase entropy of repo ID generation for tests by @JAORMX in #1717
- Bump sqlc to 1.24.0 by @jhrozek in #1720
- build(deps): bump golang from
4521f9d
to9baee0e
by @dependabot in #1714 - run go mod tidy by @jhrozek in #1723
- Allow regex matching of artifacts with artifact ingester by @JAORMX in #1716
- Return only the raw evaluation error message without prefix by @jhrozek in #1726
- Use frizbee to add a new function ListGithubActions to the rego library by @jhrozek in #1725
- Trigger documentation update only on release by @eleftherias in #1724
- Update the stale action configuration by @rdimitrov in #1722
- Add an optional violation_format to rego rules by @jhrozek in #1728
- Add a yes flag to skip prompts for CLI commands by @hemakshis in #1730
- Auto-generated cli documentation update - 2023-11-28 07:08:52 by @github-actions in #1731
- build(deps): bump golang.org/x/term from 0.14.0 to 0.15.0 by @dependabot in #1736
- build(deps): bump mobx from 6.11.0 to 6.12.0 in /docs by @dependabot in #1738
- build(deps): bump github.com/go-git/go-git/v5 from 5.10.0 to 5.10.1 by @dependabot in #1734
- build(deps): bump golang.org/x/tools from 0.15.0 to 0.16.0 in /tools by @dependabot in #1737
- build(deps): bump golang.org/x/oauth2 from 0.14.0 to 0.15.0 by @dependabot in #1733
- Remove leftover branch protection API by @JAORMX in #1742
- Tiny change to the quickstart guide by @andresgalante in #1763
New Contributors
- @hemakshis made their first contribution in #1730
Full Changelog: v0.0.18...v0.0.19
v0.0.18
What's Changed
- build(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.46.0 to 0.46.1 by @dependabot in #1685
- build(deps): bump go.opentelemetry.io/otel/sdk from 1.20.0 to 1.21.0 by @dependabot in #1688
- build(deps): bump github.com/signalfx/splunk-otel-go/instrumentation/github.com/lib/pq/splunkpq from 1.10.0 to 1.11.0 by @dependabot in #1684
- Upgrade otelgrpc to v0.46.1 by @jhrozek in #1689
- Remove
combined.yml
from gitignore by @JAORMX in #1690 - build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.25.1 to 1.25.3 by @dependabot in #1692
- build(deps): bump github.com/lestrrat-go/jwx/v2 from 2.0.16 to 2.0.17 by @dependabot in #1691
- build(deps): bump github.com/zitadel/oidc/v2 from 2.11.0 to 2.12.0 by @dependabot in #1693
- build(deps): bump go.opentelemetry.io/otel/exporters/prometheus from 0.43.0 to 0.44.0 by @dependabot in #1695
- Update quickstart command message layout by @rdimitrov in #1696
Full Changelog: v0.0.17...v0.0.18
v0.0.17
What's Changed
- Remove trailing slash from rules-and-profiles entry in gitignore by @JAORMX in #1661
- Re-introduce entity validation for rule types by @JAORMX in #1662
- Add
Validate
check to our rule type tests by @JAORMX in #1663 - Rename
medev
tomindev
by @JAORMX in #1667 - Downgrade otelgrpc to work around open-telemetry/opentelemetry-go-contrib#4547 by @jhrozek in #1668
- Add trivyignore file with risk acceptance by @JAORMX in #1669
- Add
X-Forwarded-For
to default logging by @JAORMX in #1670 - build(deps): bump github.com/bufbuild/buf from 1.28.0 to 1.28.1 in /tools by @dependabot in #1672
- Add support for sidecars to migrate and minder, add tests for same by @evankanderson in #1671
- build(deps): bump golang from
81cd210
to57bf74a
by @dependabot in #1676 - build(deps): bump github.com/aws/aws-sdk-go-v2/feature/rds/auth from 1.3.2 to 1.3.3 by @dependabot in #1675
- build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.25.0 to 1.25.1 by @dependabot in #1674
- build(deps): bump k8s.io/apimachinery from 0.28.3 to 0.28.4 by @dependabot in #1673
- Use
helm-docs
to auto-generate documentation for our chart by @JAORMX in #1677 - Add documentation for helm values by @JAORMX in #1678
- Auto-generated helm documentation update - 2023-11-16 12:15:00 by @github-actions in #1679
- Update package-lock.json parsing strategy by @eleftherias in #1666
- Process entity events in exclusively and in parallel by @JAORMX in #1654
- Auto-generated DB schema update - 2023-11-16 14:16:47 by @github-actions in #1681
- Implement a quickstart command for minder by @rdimitrov in #1660
- Auto-generated cli documentation update - 2023-11-16 17:40:44 by @github-actions in #1683
Full Changelog: v0.0.16...v0.0.17
v0.0.16
What's Changed
- Set SIGSTORE_NO_CACHE=true in minder by @rdimitrov in #1611
- Auto-generated cli documentation update - 2023-11-09 12:31:12 by @github-actions in #1612
- Makes issue templates forms by @andresgalante in #1578
- build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.22.3 to 1.23.0 by @dependabot in #1613
- Add switch to migrate up/down to do one step migration, add migrate version by @jhrozek in #1614
- docs: adds prerequisites to the register a repo getting started page by @andresgalante in #1615
- Adds a link to docs readme to contribution guidelines by @andresgalante in #1616
- Convert owner name to lowercase when building container image reference by @JAORMX in #1617
- Update README.md by @dussab in #1622
- Add issuer_url for running minder outside of docker-compose by @rdimitrov in #1620
- Return EvaluatioError, not generic error on finding vulnerable or low-scoring packages by @jhrozek in #1619
- Implement profile update by @JAORMX in #1566
- Auto-generated cli documentation update - 2023-11-13 13:48:59 by @github-actions in #1629
- WIP: Upgrade otel dependencies by @jhrozek in #1628
- Auto-generated DB schema update - 2023-11-13 13:48:59 by @github-actions in #1630
- build(deps): bump github.com/bufbuild/buf from 1.27.2 to 1.28.0 in /tools by @dependabot in #1623
- build(deps): bump github.com/signalfx/splunk-otel-go/instrumentation/database/sql/splunksql from 1.9.0 to 1.10.0 by @dependabot in #1627
- build(deps): bump mobx from 6.10.2 to 6.11.0 in /docs by @dependabot in #1624
- build(deps): bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace from 1.19.0 to 1.20.0 by @dependabot in #1625
- Add a stored procedure to handle entity deletions by @jhrozek in #1618
- Normalize python package names before sending to OSV by @eleftherias in #1634
- Link PRs with rule_evaluation_status properly by @jhrozek in #1635
- build(deps): bump github.com/sigstore/cosign/v2 from 2.2.0 to 2.2.1 by @dependabot in #1585
- build(deps): bump github.com/signalfx/splunk-otel-go/instrumentation/github.com/lib/pq/splunkpq from 1.9.0 to 1.10.0 by @dependabot in #1637
- build(deps): bump go.opentelemetry.io/otel/sdk/metric from 1.19.0 to 1.20.0 by @dependabot in #1640
- build(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.45.0 to 0.46.0 by @dependabot in #1638
- build(deps): bump go.opentelemetry.io/otel/exporters/prometheus from 0.42.0 to 0.43.0 by @dependabot in #1639
- build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.23.0 to 1.24.0 by @dependabot in #1641
- Log the full remediation and alert error by @jhrozek in #1643
- Suggest smallest delta in PR vulnerability check by @eleftherias in #1632
- Remove IsProtected for roles and projects and other authz functions by @rdimitrov in #1646
- Auto-generated DB schema update - 2023-11-14 14:22:49 by @github-actions in #1647
- Print project list as multiple rows in
whoami
subcommand by @JAORMX in #1648 - Handle PR statuses when setting branch protection rules by @jhrozek in #1644
- Print multiple projects in
auth login
subcommand by @JAORMX in #1649 - Add a repository count gauge by @jhrozek in #1651
- build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.24.0 to 1.25.0 by @dependabot in #1656
- Don't log skipping rules as errors by @jhrozek in #1658
Full Changelog: v0.0.15...v0.0.16
v0.0.15
What's Changed
- Update README with info about our release provenance by @rdimitrov in #1530
- Add Minder instance info in README. by @JAORMX in #1531
- Clean up docs by @eleftherias in #1529
- update logo by @dussab in #1534
- Update install_cli.md by @eryn-muetzel in #1535
- Update branch_protection.md by @eryn-muetzel in #1536
- Refine getting started docs to remove duplication by @evankanderson in #1537
- Update activity.md by @eryn-muetzel in #1538
- Update vulnerabilities.md by @eryn-muetzel in #1539
- Update README.md by @ninfriendos1 in #1540
- Update license.md by @eryn-muetzel in #1541
- Re-arrange how-to docs under 'Using Minder', including profile docs by @evankanderson in #1542
- Update roadmap.md by @dussab in #1543
- Move Roadmap to 'About', move FAQ to commercial site by @evankanderson in #1544
- Rename category file to match docusaurus pattern by @evankanderson in #1545
- Update header with new stacklok image by @dussab in #1547
- Show the JSON output of profile_status list in docs by @jhrozek in #1546
- Combine profile introduction and concept by @evankanderson in #1548
- Remove one level of nesting on CLI docs. by @evankanderson in #1549
- Update register_repos.md by @craigmcl in #1550
- Update profiles.md by @dussab in #1554
- Update setup-alerts.md by @eryn-muetzel in #1553
- Update setup-autoremediation.md by @eryn-muetzel in #1552
- Update manage_profiles.md by @eryn-muetzel in #1551
- build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.22.0 to 1.22.1 by @dependabot in #1558
- build(deps): bump styled-components from 5.3.11 to 6.1.0 in /docs by @dependabot in #1557
- build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.18.0 to 2.18.1 by @dependabot in #1559
- build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.18.0 to 2.18.1 in /tools by @dependabot in #1556
- Update login instructions in docs by @eleftherias in #1560
- Improve getting started documentation by @eleftherias in #1561
- Update README.md by @dussab in #1563
- PathEscape artifact name to process artifacts with slash in the name by @jhrozek in #1564
- OSS: Installing Minder docs by @teodor-yanev in #1567
- Add artifact_signature reference by @jhrozek in #1568
- Add sigstore signing for minder-server and helm/minder by @rdimitrov in #1569
- Install cosign in chart-publish.yaml by @rdimitrov in #1570
- Use latest cosign and fix cosign helm chart reference for chart-publish.yaml by @rdimitrov in #1572
- Remove optional parameters from
GoTestTools/gotestfmt-action@v2
action instantiation by @JAORMX in #1571 - Update Minder Helm Installation by @teodor-yanev in #1573
- Replace plus to underscore for signing the helm chart by @rdimitrov in #1574
- Organise make targets into separate makefiles by @rdimitrov in #1565
- docs: fixes broken link to CLI docs on the readme by @andresgalante in #1575
- Docs: adds a link to the API to the readme by @andresgalante in #1576
- build(deps): bump slsa-framework/slsa-verifier from 2.4.0 to 2.4.1 by @dependabot in #1580
- Instantiate mock client for each test in branch protection remediations test by @JAORMX in #1587
- build(deps): bump sigstore/cosign-installer from 3.1.2 to 3.2.0 by @dependabot in #1581
- Fix flaky database tests by @JAORMX in #1588
- build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.22.1 to 1.22.2 by @dependabot in #1584
- build(deps): bump golang from 1.21.3 to 1.21.4 by @dependabot in #1579
- build(deps): bump golang.org/x/term from 0.13.0 to 0.14.0 by @dependabot in #1586
- build(deps): bump styled-components from 6.1.0 to 6.1.1 in /docs by @dependabot in #1583
- Hook up minder healthcheck to database health by @JAORMX in #1590
- Enable skipping teardown when using the
run-docker
Makefile target by @JAORMX in #1591 - Fix resolving of KO_DOCKER_REPO for run-docker by @rdimitrov in #1592
- Make repo deletion message consistent with similar commands by @eleftherias in #1593
- Improve login success page by @eleftherias in #1597
- build(deps): bump golang.org/x/oauth2 from 0.13.0 to 0.14.0 by @dependabot in #1601
- build(deps): bump github.com/fergusstrange/embedded-postgres from 1.24.0 to 1.25.0 by @dependabot in #1604
- build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.22.2 to 1.22.3 by @dependabot in #1603
- build(deps): bump github.com/aws/aws-sdk-go-v2/feature/rds/auth from 1.3.1 to 1.3.2 by @dependabot in #1602
- build(deps): bump golang.org/x/tools from 0.14.0 to 0.15.0 in /tools by @dependabot in #1605
- Add enhanced user agent informtion to CLI by @JAORMX in #1600
New Contributors
- @ninfriendos1 made their first contribution in #1540
- @craigmcl made their first contribution in #1550
- @andresgalante made their first contribution in #1575
Full Changelog: v0.0.14...v0.0.15
v0.0.14
What's Changed
- Add documentation for Trusty PR check rule by @eleftherias in #1508
- Rename docs chapter from policies to rules by @rdimitrov in #1511
- Make --provider/-p consistent across the cli and docs by @rdimitrov in #1514
- Add the ArtifactService to ingress by @jhrozek in #1513
- Change CLI prompt message and type by @rdimitrov in #1516
- Add reference docs for secret scanning rule by @eleftherias in #1523
- Run PR CI on all PRS by @JAORMX in #1525
- Return errNotHandled silently by @jhrozek in #1517
- Add reference docs for branch protection rules by @eleftherias in #1520
- A nicer error message in case someone forgets to run provider enroll by @jhrozek in #1515
- Fix linter failure by @JAORMX in #1527
- Release minder to microsoft/winget-pkgs and remove private setting for SLSA by @rdimitrov in #1464
- Remove examples and use the official repo instead by @rdimitrov in #1528
Full Changelog: v0.0.13...v0.0.14
v0.0.13
What's Changed
- Add how-to for pull request remediations by @rdimitrov in #1470
- Update remediations.md by @eryn-muetzel in #1477
- Update minder-docs references to https://minder-docs.stacklok.dev by @rdimitrov in #1475
- Update login.md by @eryn-muetzel in #1479
- Update remediation.md by @eryn-muetzel in #1481
- Update profiles.md by @eryn-muetzel in #1482
- Update remediate-pullrequest.md by @eryn-muetzel in #1483
- Add how-tos for alerts and auto-remediation by @rdimitrov in #1478
- Switch some more hardcoded strings from using staging + generate CLI docs to point to prod by @jhrozek in #1476
- Auto-generated cli documentation update - 2023-11-05 23:08:51 by @github-actions in #1485
- Add reference for rule_types that pertain to github actions by @jhrozek in #1484
- Add minder-cli install docs by @rdimitrov in #1486
- Add info to how-to PR remediations by @rdimitrov in #1489
- Remove group-id references from docs by @rdimitrov in #1480
- Add back the trusty rule_type and an example to profile.yaml by @jhrozek in #1488
- Add pypi OSV check to vulnerabilities.md by @jhrozek in #1487
- Add license rule type to profile.yaml by @rdimitrov in #1490
- login docs.md by @evankanderson in #1492
- build(deps): bump redocusaurus from 1.6.4 to 2.0.0 in /docs by @dependabot in #1493
- build(deps): bump github.com/gorilla/securecookie from 1.1.1 to 1.1.2 by @dependabot in #1494
- build(deps): bump github.com/go-playground/validator/v10 from 10.15.5 to 10.16.0 by @dependabot in #1495
- build(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 by @dependabot in #1496
- build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 by @dependabot in #1497
- build(deps): bump github.com/golangci/golangci-lint from 1.55.1 to 1.55.2 in /tools by @dependabot in #1498
- Add refs for codeql, dependabot and presence of a license file by @rdimitrov in #1491
- Remove duplicate section from docs by @eleftherias in #1500
- Remove
apply
subcommand from CLI by @JAORMX in #1499 - Auto-generated cli documentation update - 2023-11-06 10:00:50 by @github-actions in #1502
- Add version information for minder CLI by @JAORMX in #1501
- Auto-generated cli documentation update - 2023-11-06 11:21:48 by @github-actions in #1504
- Confirm enrolling a provider org by @rdimitrov in #1503
- Enable secret scanning doc to "Creating your first profile" by @JAORMX in #1505
- Make getProviderAccessToken private by @rdimitrov in #1506
- Don't require superadmin on ListArtifacts by @jhrozek in #1507
- Link contributing guidelines in documentation by @eleftherias in #1509
Full Changelog: v0.0.12...v0.0.13