Releases: mindersec/minder
Releases · mindersec/minder
v0.0.19
What's Changed
- Update README.md with quickstart screencast by @rdimitrov in #1697
- Add option to set default selected choice for minder prompts by @rdimitrov in #1698
- Use missingkey=error for text/template by @jhrozek in #1682
- build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.25.3 to 1.25.4 by @dependabot in #1701
- build(deps): bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace from 1.20.0 to 1.21.0 by @dependabot in #1702
- build(deps): bump github.com/aws/aws-sdk-go-v2/feature/rds/auth from 1.3.3 to 1.3.4 by @dependabot in #1700
- build(deps): bump anchore/sbom-action from 0.14.3 to 0.15.0 by @dependabot in #1699
- Update the docs with the quickstart command by @rdimitrov in #1707
- Remove unused empty file by @jhrozek in #1709
- build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.25.4 to 1.25.5 by @dependabot in #1713
- build(deps): bump golang from
57bf74a
to4521f9d
by @dependabot in #1712 - build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1 by @dependabot in #1711
- Add PostgreSQL Messaging Pub/Sub Watermill by @teodor-yanev in #1680
- Increase entropy of repo ID generation for tests by @JAORMX in #1717
- Bump sqlc to 1.24.0 by @jhrozek in #1720
- build(deps): bump golang from
4521f9d
to9baee0e
by @dependabot in #1714 - run go mod tidy by @jhrozek in #1723
- Allow regex matching of artifacts with artifact ingester by @JAORMX in #1716
- Return only the raw evaluation error message without prefix by @jhrozek in #1726
- Use frizbee to add a new function ListGithubActions to the rego library by @jhrozek in #1725
- Trigger documentation update only on release by @eleftherias in #1724
- Update the stale action configuration by @rdimitrov in #1722
- Add an optional violation_format to rego rules by @jhrozek in #1728
- Add a yes flag to skip prompts for CLI commands by @hemakshis in #1730
- Auto-generated cli documentation update - 2023-11-28 07:08:52 by @github-actions in #1731
- build(deps): bump golang.org/x/term from 0.14.0 to 0.15.0 by @dependabot in #1736
- build(deps): bump mobx from 6.11.0 to 6.12.0 in /docs by @dependabot in #1738
- build(deps): bump github.com/go-git/go-git/v5 from 5.10.0 to 5.10.1 by @dependabot in #1734
- build(deps): bump golang.org/x/tools from 0.15.0 to 0.16.0 in /tools by @dependabot in #1737
- build(deps): bump golang.org/x/oauth2 from 0.14.0 to 0.15.0 by @dependabot in #1733
- Remove leftover branch protection API by @JAORMX in #1742
- Tiny change to the quickstart guide by @andresgalante in #1763
New Contributors
- @hemakshis made their first contribution in #1730
Full Changelog: v0.0.18...v0.0.19
v0.0.18
What's Changed
- build(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.46.0 to 0.46.1 by @dependabot in #1685
- build(deps): bump go.opentelemetry.io/otel/sdk from 1.20.0 to 1.21.0 by @dependabot in #1688
- build(deps): bump github.com/signalfx/splunk-otel-go/instrumentation/github.com/lib/pq/splunkpq from 1.10.0 to 1.11.0 by @dependabot in #1684
- Upgrade otelgrpc to v0.46.1 by @jhrozek in #1689
- Remove
combined.yml
from gitignore by @JAORMX in #1690 - build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.25.1 to 1.25.3 by @dependabot in #1692
- build(deps): bump github.com/lestrrat-go/jwx/v2 from 2.0.16 to 2.0.17 by @dependabot in #1691
- build(deps): bump github.com/zitadel/oidc/v2 from 2.11.0 to 2.12.0 by @dependabot in #1693
- build(deps): bump go.opentelemetry.io/otel/exporters/prometheus from 0.43.0 to 0.44.0 by @dependabot in #1695
- Update quickstart command message layout by @rdimitrov in #1696
Full Changelog: v0.0.17...v0.0.18
v0.0.17
What's Changed
- Remove trailing slash from rules-and-profiles entry in gitignore by @JAORMX in #1661
- Re-introduce entity validation for rule types by @JAORMX in #1662
- Add
Validate
check to our rule type tests by @JAORMX in #1663 - Rename
medev
tomindev
by @JAORMX in #1667 - Downgrade otelgrpc to work around open-telemetry/opentelemetry-go-contrib#4547 by @jhrozek in #1668
- Add trivyignore file with risk acceptance by @JAORMX in #1669
- Add
X-Forwarded-For
to default logging by @JAORMX in #1670 - build(deps): bump github.com/bufbuild/buf from 1.28.0 to 1.28.1 in /tools by @dependabot in #1672
- Add support for sidecars to migrate and minder, add tests for same by @evankanderson in #1671
- build(deps): bump golang from
81cd210
to57bf74a
by @dependabot in #1676 - build(deps): bump github.com/aws/aws-sdk-go-v2/feature/rds/auth from 1.3.2 to 1.3.3 by @dependabot in #1675
- build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.25.0 to 1.25.1 by @dependabot in #1674
- build(deps): bump k8s.io/apimachinery from 0.28.3 to 0.28.4 by @dependabot in #1673
- Use
helm-docs
to auto-generate documentation for our chart by @JAORMX in #1677 - Add documentation for helm values by @JAORMX in #1678
- Auto-generated helm documentation update - 2023-11-16 12:15:00 by @github-actions in #1679
- Update package-lock.json parsing strategy by @eleftherias in #1666
- Process entity events in exclusively and in parallel by @JAORMX in #1654
- Auto-generated DB schema update - 2023-11-16 14:16:47 by @github-actions in #1681
- Implement a quickstart command for minder by @rdimitrov in #1660
- Auto-generated cli documentation update - 2023-11-16 17:40:44 by @github-actions in #1683
Full Changelog: v0.0.16...v0.0.17
v0.0.16
What's Changed
- Set SIGSTORE_NO_CACHE=true in minder by @rdimitrov in #1611
- Auto-generated cli documentation update - 2023-11-09 12:31:12 by @github-actions in #1612
- Makes issue templates forms by @andresgalante in #1578
- build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.22.3 to 1.23.0 by @dependabot in #1613
- Add switch to migrate up/down to do one step migration, add migrate version by @jhrozek in #1614
- docs: adds prerequisites to the register a repo getting started page by @andresgalante in #1615
- Adds a link to docs readme to contribution guidelines by @andresgalante in #1616
- Convert owner name to lowercase when building container image reference by @JAORMX in #1617
- Update README.md by @dussab in #1622
- Add issuer_url for running minder outside of docker-compose by @rdimitrov in #1620
- Return EvaluatioError, not generic error on finding vulnerable or low-scoring packages by @jhrozek in #1619
- Implement profile update by @JAORMX in #1566
- Auto-generated cli documentation update - 2023-11-13 13:48:59 by @github-actions in #1629
- WIP: Upgrade otel dependencies by @jhrozek in #1628
- Auto-generated DB schema update - 2023-11-13 13:48:59 by @github-actions in #1630
- build(deps): bump github.com/bufbuild/buf from 1.27.2 to 1.28.0 in /tools by @dependabot in #1623
- build(deps): bump github.com/signalfx/splunk-otel-go/instrumentation/database/sql/splunksql from 1.9.0 to 1.10.0 by @dependabot in #1627
- build(deps): bump mobx from 6.10.2 to 6.11.0 in /docs by @dependabot in #1624
- build(deps): bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace from 1.19.0 to 1.20.0 by @dependabot in #1625
- Add a stored procedure to handle entity deletions by @jhrozek in #1618
- Normalize python package names before sending to OSV by @eleftherias in #1634
- Link PRs with rule_evaluation_status properly by @jhrozek in #1635
- build(deps): bump github.com/sigstore/cosign/v2 from 2.2.0 to 2.2.1 by @dependabot in #1585
- build(deps): bump github.com/signalfx/splunk-otel-go/instrumentation/github.com/lib/pq/splunkpq from 1.9.0 to 1.10.0 by @dependabot in #1637
- build(deps): bump go.opentelemetry.io/otel/sdk/metric from 1.19.0 to 1.20.0 by @dependabot in #1640
- build(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.45.0 to 0.46.0 by @dependabot in #1638
- build(deps): bump go.opentelemetry.io/otel/exporters/prometheus from 0.42.0 to 0.43.0 by @dependabot in #1639
- build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.23.0 to 1.24.0 by @dependabot in #1641
- Log the full remediation and alert error by @jhrozek in #1643
- Suggest smallest delta in PR vulnerability check by @eleftherias in #1632
- Remove IsProtected for roles and projects and other authz functions by @rdimitrov in #1646
- Auto-generated DB schema update - 2023-11-14 14:22:49 by @github-actions in #1647
- Print project list as multiple rows in
whoami
subcommand by @JAORMX in #1648 - Handle PR statuses when setting branch protection rules by @jhrozek in #1644
- Print multiple projects in
auth login
subcommand by @JAORMX in #1649 - Add a repository count gauge by @jhrozek in #1651
- build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.24.0 to 1.25.0 by @dependabot in #1656
- Don't log skipping rules as errors by @jhrozek in #1658
Full Changelog: v0.0.15...v0.0.16
v0.0.15
What's Changed
- Update README with info about our release provenance by @rdimitrov in #1530
- Add Minder instance info in README. by @JAORMX in #1531
- Clean up docs by @eleftherias in #1529
- update logo by @dussab in #1534
- Update install_cli.md by @eryn-muetzel in #1535
- Update branch_protection.md by @eryn-muetzel in #1536
- Refine getting started docs to remove duplication by @evankanderson in #1537
- Update activity.md by @eryn-muetzel in #1538
- Update vulnerabilities.md by @eryn-muetzel in #1539
- Update README.md by @ninfriendos1 in #1540
- Update license.md by @eryn-muetzel in #1541
- Re-arrange how-to docs under 'Using Minder', including profile docs by @evankanderson in #1542
- Update roadmap.md by @dussab in #1543
- Move Roadmap to 'About', move FAQ to commercial site by @evankanderson in #1544
- Rename category file to match docusaurus pattern by @evankanderson in #1545
- Update header with new stacklok image by @dussab in #1547
- Show the JSON output of profile_status list in docs by @jhrozek in #1546
- Combine profile introduction and concept by @evankanderson in #1548
- Remove one level of nesting on CLI docs. by @evankanderson in #1549
- Update register_repos.md by @craigmcl in #1550
- Update profiles.md by @dussab in #1554
- Update setup-alerts.md by @eryn-muetzel in #1553
- Update setup-autoremediation.md by @eryn-muetzel in #1552
- Update manage_profiles.md by @eryn-muetzel in #1551
- build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.22.0 to 1.22.1 by @dependabot in #1558
- build(deps): bump styled-components from 5.3.11 to 6.1.0 in /docs by @dependabot in #1557
- build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.18.0 to 2.18.1 by @dependabot in #1559
- build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.18.0 to 2.18.1 in /tools by @dependabot in #1556
- Update login instructions in docs by @eleftherias in #1560
- Improve getting started documentation by @eleftherias in #1561
- Update README.md by @dussab in #1563
- PathEscape artifact name to process artifacts with slash in the name by @jhrozek in #1564
- OSS: Installing Minder docs by @teodor-yanev in #1567
- Add artifact_signature reference by @jhrozek in #1568
- Add sigstore signing for minder-server and helm/minder by @rdimitrov in #1569
- Install cosign in chart-publish.yaml by @rdimitrov in #1570
- Use latest cosign and fix cosign helm chart reference for chart-publish.yaml by @rdimitrov in #1572
- Remove optional parameters from
GoTestTools/gotestfmt-action@v2
action instantiation by @JAORMX in #1571 - Update Minder Helm Installation by @teodor-yanev in #1573
- Replace plus to underscore for signing the helm chart by @rdimitrov in #1574
- Organise make targets into separate makefiles by @rdimitrov in #1565
- docs: fixes broken link to CLI docs on the readme by @andresgalante in #1575
- Docs: adds a link to the API to the readme by @andresgalante in #1576
- build(deps): bump slsa-framework/slsa-verifier from 2.4.0 to 2.4.1 by @dependabot in #1580
- Instantiate mock client for each test in branch protection remediations test by @JAORMX in #1587
- build(deps): bump sigstore/cosign-installer from 3.1.2 to 3.2.0 by @dependabot in #1581
- Fix flaky database tests by @JAORMX in #1588
- build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.22.1 to 1.22.2 by @dependabot in #1584
- build(deps): bump golang from 1.21.3 to 1.21.4 by @dependabot in #1579
- build(deps): bump golang.org/x/term from 0.13.0 to 0.14.0 by @dependabot in #1586
- build(deps): bump styled-components from 6.1.0 to 6.1.1 in /docs by @dependabot in #1583
- Hook up minder healthcheck to database health by @JAORMX in #1590
- Enable skipping teardown when using the
run-docker
Makefile target by @JAORMX in #1591 - Fix resolving of KO_DOCKER_REPO for run-docker by @rdimitrov in #1592
- Make repo deletion message consistent with similar commands by @eleftherias in #1593
- Improve login success page by @eleftherias in #1597
- build(deps): bump golang.org/x/oauth2 from 0.13.0 to 0.14.0 by @dependabot in #1601
- build(deps): bump github.com/fergusstrange/embedded-postgres from 1.24.0 to 1.25.0 by @dependabot in #1604
- build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.22.2 to 1.22.3 by @dependabot in #1603
- build(deps): bump github.com/aws/aws-sdk-go-v2/feature/rds/auth from 1.3.1 to 1.3.2 by @dependabot in #1602
- build(deps): bump golang.org/x/tools from 0.14.0 to 0.15.0 in /tools by @dependabot in #1605
- Add enhanced user agent informtion to CLI by @JAORMX in #1600
New Contributors
- @ninfriendos1 made their first contribution in #1540
- @craigmcl made their first contribution in #1550
- @andresgalante made their first contribution in #1575
Full Changelog: v0.0.14...v0.0.15
v0.0.14
What's Changed
- Add documentation for Trusty PR check rule by @eleftherias in #1508
- Rename docs chapter from policies to rules by @rdimitrov in #1511
- Make --provider/-p consistent across the cli and docs by @rdimitrov in #1514
- Add the ArtifactService to ingress by @jhrozek in #1513
- Change CLI prompt message and type by @rdimitrov in #1516
- Add reference docs for secret scanning rule by @eleftherias in #1523
- Run PR CI on all PRS by @JAORMX in #1525
- Return errNotHandled silently by @jhrozek in #1517
- Add reference docs for branch protection rules by @eleftherias in #1520
- A nicer error message in case someone forgets to run provider enroll by @jhrozek in #1515
- Fix linter failure by @JAORMX in #1527
- Release minder to microsoft/winget-pkgs and remove private setting for SLSA by @rdimitrov in #1464
- Remove examples and use the official repo instead by @rdimitrov in #1528
Full Changelog: v0.0.13...v0.0.14
v0.0.13
What's Changed
- Add how-to for pull request remediations by @rdimitrov in #1470
- Update remediations.md by @eryn-muetzel in #1477
- Update minder-docs references to https://minder-docs.stacklok.dev by @rdimitrov in #1475
- Update login.md by @eryn-muetzel in #1479
- Update remediation.md by @eryn-muetzel in #1481
- Update profiles.md by @eryn-muetzel in #1482
- Update remediate-pullrequest.md by @eryn-muetzel in #1483
- Add how-tos for alerts and auto-remediation by @rdimitrov in #1478
- Switch some more hardcoded strings from using staging + generate CLI docs to point to prod by @jhrozek in #1476
- Auto-generated cli documentation update - 2023-11-05 23:08:51 by @github-actions in #1485
- Add reference for rule_types that pertain to github actions by @jhrozek in #1484
- Add minder-cli install docs by @rdimitrov in #1486
- Add info to how-to PR remediations by @rdimitrov in #1489
- Remove group-id references from docs by @rdimitrov in #1480
- Add back the trusty rule_type and an example to profile.yaml by @jhrozek in #1488
- Add pypi OSV check to vulnerabilities.md by @jhrozek in #1487
- Add license rule type to profile.yaml by @rdimitrov in #1490
- login docs.md by @evankanderson in #1492
- build(deps): bump redocusaurus from 1.6.4 to 2.0.0 in /docs by @dependabot in #1493
- build(deps): bump github.com/gorilla/securecookie from 1.1.1 to 1.1.2 by @dependabot in #1494
- build(deps): bump github.com/go-playground/validator/v10 from 10.15.5 to 10.16.0 by @dependabot in #1495
- build(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 by @dependabot in #1496
- build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 by @dependabot in #1497
- build(deps): bump github.com/golangci/golangci-lint from 1.55.1 to 1.55.2 in /tools by @dependabot in #1498
- Add refs for codeql, dependabot and presence of a license file by @rdimitrov in #1491
- Remove duplicate section from docs by @eleftherias in #1500
- Remove
apply
subcommand from CLI by @JAORMX in #1499 - Auto-generated cli documentation update - 2023-11-06 10:00:50 by @github-actions in #1502
- Add version information for minder CLI by @JAORMX in #1501
- Auto-generated cli documentation update - 2023-11-06 11:21:48 by @github-actions in #1504
- Confirm enrolling a provider org by @rdimitrov in #1503
- Enable secret scanning doc to "Creating your first profile" by @JAORMX in #1505
- Make getProviderAccessToken private by @rdimitrov in #1506
- Don't require superadmin on ListArtifacts by @jhrozek in #1507
- Link contributing guidelines in documentation by @eleftherias in #1509
Full Changelog: v0.0.12...v0.0.13
v0.0.12
What's Changed
- Fix GitHub Actions deprecated warnings by @rdimitrov in #1463
- Point CLI to production by default by @JAORMX in #1460
- Make ingress annotations configurable by @JAORMX in #1467
- Update README.md and other docs by @rdimitrov in #1468
- Pass the staging/prod build tag through a Makefile env variable by @jhrozek in #1466
- Reference the minder docs from a SA minder alert by @rdimitrov in #1469
- Don't print informational values to stdout by @jhrozek in #1472
- Don't reuse the configured Trusty http endpoint for the PR reply, use a constant instead by @jhrozek in #1473
- Add pypi vulnerability check configuration to the example profile by @jhrozek in #1471
Full Changelog: v0.0.11...v0.0.12
v0.0.11
What's Changed
- update to image by @dussab in #1445
- Update providers.md by @eryn-muetzel in #1446
- Update register_repo_create_profile.md by @eryn-muetzel in #1448
- Update pr_reviews.md by @eryn-muetzel in #1450
- Fix .goreleaser.yaml by @rdimitrov in #1449
- Part 1 - Rename stacklok.com/mediator to stacklok.com/minder by @rdimitrov in #1447
- Improve docs for profiles and providers by @eleftherias in #1451
- Add documentation for explaining alerts and remediation by @eleftherias in #1452
- Update vulnerabilities.md by @eryn-muetzel in #1454
- Part 2 - The rest of the minder renaming by @rdimitrov in #1457
- Fix deprecated msg for docs build by @rdimitrov in #1455
- Filter when to run compose-migrate.yml by @rdimitrov in #1456
- Update index.md by @eryn-muetzel in #1413
- Make secret names configurable in helm chart by @JAORMX in #1458
- Fix db schema job by @rdimitrov in #1459
- Change default reference to keycloak in docker-compose file by @JAORMX in #1461
- Add caching to goreleaser setup by @JAORMX in #1462
Full Changelog: v0.0.10...v0.0.11
v0.0.10
What's Changed
- build(deps): bump github.com/docker/docker from 24.0.6+incompatible to 24.0.7+incompatible in /tools by @dependabot in #1328
- build(deps): bump github.com/docker/docker from 24.0.0+incompatible to 24.0.7+incompatible by @dependabot in #1327
- Use stacklokbot for commit author at homebrew-tap by @rdimitrov in #1330
- Add watermill event histogram by @jhrozek in #1329
- Read the Pi hostname from config instead of rule_type by @jhrozek in #1313
- remove unused Vulncheck protobuf message contents by @jhrozek in #1331
- Remove Go ecosystem config from the Pi rule-type by @jhrozek in #1332
- Update CONTRIBUTING.md by @dussab in #1334
- Update SECURITY.md by @dussab in #1335
- Delete .github/ISSUE_TEMPLATE/epic.md by @dussab in #1336
- Update user_story.md by @dussab in #1337
- Update README.md by @dussab in #1338
- Update CONTRIBUTING.md by @dussab in #1339
- Rename mediator.proto to minder.proto, implement bridge by @evankanderson in #1340
- Great client-side rename by @evankanderson in #1341
- build(deps): bump github.com/lestrrat-go/jwx/v2 from 2.0.15 to 2.0.16 by @dependabot in #1345
- build(deps): bump sigstore/cosign-installer from 3.1.1 to 3.1.2 by @dependabot in #1346
- cli: Remove
mediatorv1
from rule type commands by @JAORMX in #1342 - Add a bunch of skeleton docs by @evankanderson in #1344
- chore: Move rego eval to use minder instead of mediator by @JAORMX in #1343
- fix: helpers: use viper instance instead of global by @JAORMX in #1348
- fix: config: Fix usage of global viper instance by @JAORMX in #1349
- chore: Add
-race
flag to test invocation by @JAORMX in #1347 - Rename keycloak clients to minder by @eleftherias in #1350
- Adjust Pi evaluator reply structure to the API response by @jhrozek in #1353
- Fix vulncheck's repo cache to be concurrency-friendly by @JAORMX in #1351
- Rename the package_intelligence evaluator to trusty evaluator by @jhrozek in #1354
- Add support for publishing minder to winget (Windows) by @rdimitrov in #1333
- Add
read_only
flag to docker-compose by @JAORMX in #1355 - Close publisher and subsriber when closing eventer by @JAORMX in #1359
- Update CODE_OF_CONDUCT.md by @dussab in #1361
- Update README.md by @dussab in #1363
- build(deps): bump github.com/aws/aws-sdk-go-v2/feature/rds/auth from 1.2.21 to 1.3.0 by @dependabot in #1365
- build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.19.1 to 1.20.0 by @dependabot in #1364
- build(deps-dev): bump @docusaurus/module-type-aliases from 2.4.3 to 3.0.0 in /docs by @dependabot in #1366
- Setup go before building with ko and update go.mod by @rdimitrov in #1362
- Restructure minder CLI docs by @eleftherias in #1367
- Fix Stacklok logo in staging by @eleftherias in #1358
- Print debug message if a particular project has private repos enabled by @JAORMX in #1368
- Add
setup-go
step to helm chart publish job by @JAORMX in #1369 - Add more debugging when registering private repos by @jhrozek in #1372
- Rename
mediator
tominder
in service health check by @JAORMX in #1375 - Stop logging health checks again by @JAORMX in #1376
- Fix credentials path to use minder by @eleftherias in #1377
- Update contact mail for published packages by @rdimitrov in #1379
- Implement whoami command for minder by @rdimitrov in #1378
- Auto-generated cli documentation update - 2023-11-01 15:20:14 by @github-actions in #1380
- Double the client timeout by @jhrozek in #1382
- Use the context in rule_type create for each rule_type by @jhrozek in #1384
- Implement repo delete for minder by @rdimitrov in #1371
- Auto-generated cli documentation update - 2023-11-01 16:17:00 by @github-actions in #1386
- rule_type list had confused -oyaml and -ojson by @jhrozek in #1385
- Show which server minder is connecting to by @rdimitrov in #1387
- Add how-to for enabling PR reviews by @eleftherias in #1388
- Add tutorial for registering repos and profiles by @eleftherias in #1381
- Update index.md by @dussab in #1390
- Update category.yml by @dussab in #1392
- Update index.md by @dussab in #1395
- Expose several errors in handlers_repositories to the user by @jhrozek in #1394
- Allow ServiceAccounts to be passed in to the chart by @evankanderson in #1396
- build(deps): bump golang from
24a0937
to5206873
by @dependabot in #1397 - build(deps): bump github.com/aws/aws-sdk-go-v2/feature/rds/auth from 1.3.0 to 1.3.1 by @dependabot in #1398
- build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.20.0 to 1.21.0 by @dependabot in #1399
- Point to Trusty instance via an environment variable by @jhrozek in #1401
- Add metrics for outbound API calls by @jhrozek in #1360
- Rename mediator to minder in engine/actions by @rdimitrov in #1400
- Add a tutorial on automatic remediations by @jhrozek in #1391
- Show minder server on new user register table by @rdimitrov in #1402
- Skip 404 when listing handlers; add several log messages by @jhrozek in #1403
- Return nicer erorr messages if a token or a profile already exist by @jhrozek in #1406
- Don't report fatal error if there are no tokens for the provider during token revocation by @jhrozek in #1407
- The migrate container is now called minder_migrate_1 by @jhrozek in #1410
- Remove old token key secrets since we're using Keycloak by @evankanderson in #1411
- Update docs with minder logo by @dussab in #1412
- Add docs for profiles by @rdimitrov in #1405
- Add docs for alerts by @rdimitrov in #1404
- Add a document describing how to enroll an org by @jhrozek in #1408
- Extend the PR vuln check docs with commit status by @jhrozek in #1409
- Fixes to the OSV rule_type and profile by @jhrozek in #1416
- Implement a LICENSE rule type by @rdimitrov in #1419
- Add a reference about the pr_vulnerability_check type by @jhrozek in #1418
- build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.21.0 to 1.22.0 by @dependabot in #1421
- build(deps): bump golang from
5206873
tob113af1
by @dependabot in #1420 - Run minder in a read-only filesystem by @JAORMX in #1422
- Only append the status code label in http telemetry if we get a reply by @jhrozek in #1426
- Fix newline in auth login by @JAORMX in #1427
- Don't fail provider enroll if browser wasn't opened by @JAORMX in #1425
- change register repository calls to use one call per repo by @JAORMX in #1429
- Skip non JSON or YAML files when doing rule type create by @JAORMX in #1430
- Add how-to create a profile by @eleftherias in https://gi...