v1.0

A release to match the changes in cve-bin-tool v3.4. More about that release is available here: https://github.com/intel/cve-bin-tool/releases/tag/v3.4

The relevant change for this action is that we're changing to use vex_file instead of triage_input_file to match cve-bin-tool 3.4.

v1.0rc0

Prepping a release to go with cve-bin-tool 3.4's new triage system.

What's Changed

• feat: replace mirror by @b31ngd3v in #38
• build(deps): bump actions/checkout from 3 to 4 by @dependabot in #40
• build(deps-dev): bump black from 23.7.0 to 23.9.1 by @dependabot in #41
• build(deps-dev): bump pre-commit from 3.3.3 to 3.4.0 by @dependabot in #39
• fix: update pre-commit config failing by @b31ngd3v in #44
• fix: support other versions of cyclonedx by @b31ngd3v in #45
• build(deps): bump step-security/harden-runner from 2.5.1 to 2.6.0 by @dependabot in #42
• build(deps): bump stefanzweifel/git-auto-commit-action from 4.16.0 to 5.0.0 by @dependabot in #46
• chore: update spdx header by @github-actions in #63
• build(deps-dev): bump flake8 from 6.1.0 to 7.0.0 by @dependabot in #64
• build(deps-dev): bump black from 23.9.1 to 23.12.1 by @dependabot in #62
• build(deps-dev): bump isort from 5.12.0 to 5.13.2 by @dependabot in #60
• build(deps): bump step-security/harden-runner from 2.6.0 to 2.6.1 by @dependabot in #52
• build(deps): bump actions/upload-artifact from 3 to 4 by @dependabot in #61
• build(deps): bump github/codeql-action from 2 to 3 by @dependabot in #59
• build(deps-dev): bump bandit from 1.7.5 to 1.7.6 by @dependabot in #55
• build(deps): bump actions/setup-python from 4 to 5 by @dependabot in #53
• ci: set read permission only by @terriko in #65
• ci: update pre-commit & related tools by @terriko in #66
• chore: update pre-commit config by @github-actions in #76
• build(deps): bump peter-evans/create-pull-request from 5.0.2 to 6.0.1 by @dependabot in #75
• build(deps-dev): bump pre-commit from 3.6.0 to 3.6.2 by @dependabot in #74
• build(deps): bump step-security/harden-runner from 2.6.1 to 2.7.0 by @dependabot in #70
• build(deps): bump actions/cache from 3 to 4 by @dependabot in #68
• build(deps): bump peter-evans/create-pull-request from 6.0.1 to 6.0.2 by @dependabot in #78
• chore: update pre-commit config by @github-actions in #82
• build(deps): bump actions/setup-python from 5.0.0 to 5.1.0 by @dependabot in #81
• build(deps): bump peter-evans/create-pull-request from 6.0.2 to 6.0.3 by @dependabot in #85
• feat: triage filter option by @mastersans in #86
• build(deps-dev): bump black from 24.3.0 to 24.4.0 by @dependabot in #87
• build(deps): bump git-auto-commit-action to 5.0.1 by @dependabot in #84
• build(deps): bump peter-evans/create-pull-request from 6.0.3 to 6.0.4 by @dependabot in #88
• build(deps): bump peter-evans/create-pull-request from 6.0.4 to 6.0.5 by @dependabot in #90
• ci: make dependabot weekly by @terriko in #91
• chore: update pre-commit config by @github-actions in #93
• build(deps): bump step-security/harden-runner from 2.7.0 to 2.7.1 by @dependabot in #94
• build(deps-dev): bump pre-commit from 3.7.0 to 3.7.1 by @dependabot in #95
• build(deps): bump step-security/harden-runner from 2.7.1 to 2.8.0 by @dependabot in #96
• build(deps): bump step-security/harden-runner from 2.8.0 to 2.8.1 by @dependabot in #98
• build(deps): bump peter-evans/create-pull-request from 6.0.5 to 6.1.0 by @dependabot in #101
• docs: workflow permissions match openssf guidance by @terriko in #97
• chore: update pre-commit config by @github-actions in #102
• build(deps-dev): bump pre-commit from 3.7.1 to 3.8.0 by @dependabot in #105
• build(deps): bump step-security/harden-runner from 2.8.1 to 2.9.0 by @dependabot in #104
• build(deps): bump actions/setup-python from 5.1.0 to 5.1.1 by @dependabot in #103
• chore: update pre-commit config by @github-actions in #106
• build(deps): bump step-security/harden-runner from 2.9.0 to 2.9.1 by @dependabot in #109
• refactor: cbt-action's triage-process by @mastersans in #110
• build(deps): bump actions/setup-python from 5.1.1 to 5.2.0 by @dependabot in #112
• chore: update pre-commit config by @github-actions in #111

New Contributors

• @github-actions made their first contribution in #63
• @mastersans made their first contribution in #86

Full Changelog: v.9...v1.0

CVE Binary Tool GitHub Action 0.9

Release description: Known vulnerability scanning for your GitHub repository using CVE Binary Tool. This Action can scan binaries, component lists and SBOMs for known vulnerabilities and CVEs. It can generate SBOM component lists as well as reports in the Security Tab and in HTML/JSON/PDF format.