Skip to content

Releases: mindersec/minder

v0.0.19

28 Nov 20:34
12b3c2a
Compare
Choose a tag to compare

What's Changed

  • Update README.md with quickstart screencast by @rdimitrov in #1697
  • Add option to set default selected choice for minder prompts by @rdimitrov in #1698
  • Use missingkey=error for text/template by @jhrozek in #1682
  • build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.25.3 to 1.25.4 by @dependabot in #1701
  • build(deps): bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace from 1.20.0 to 1.21.0 by @dependabot in #1702
  • build(deps): bump github.com/aws/aws-sdk-go-v2/feature/rds/auth from 1.3.3 to 1.3.4 by @dependabot in #1700
  • build(deps): bump anchore/sbom-action from 0.14.3 to 0.15.0 by @dependabot in #1699
  • Update the docs with the quickstart command by @rdimitrov in #1707
  • Remove unused empty file by @jhrozek in #1709
  • build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.25.4 to 1.25.5 by @dependabot in #1713
  • build(deps): bump golang from 57bf74a to 4521f9d by @dependabot in #1712
  • build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1 by @dependabot in #1711
  • Add PostgreSQL Messaging Pub/Sub Watermill by @teodor-yanev in #1680
  • Increase entropy of repo ID generation for tests by @JAORMX in #1717
  • Bump sqlc to 1.24.0 by @jhrozek in #1720
  • build(deps): bump golang from 4521f9d to 9baee0e by @dependabot in #1714
  • run go mod tidy by @jhrozek in #1723
  • Allow regex matching of artifacts with artifact ingester by @JAORMX in #1716
  • Return only the raw evaluation error message without prefix by @jhrozek in #1726
  • Use frizbee to add a new function ListGithubActions to the rego library by @jhrozek in #1725
  • Trigger documentation update only on release by @eleftherias in #1724
  • Update the stale action configuration by @rdimitrov in #1722
  • Add an optional violation_format to rego rules by @jhrozek in #1728
  • Add a yes flag to skip prompts for CLI commands by @hemakshis in #1730
  • Auto-generated cli documentation update - 2023-11-28 07:08:52 by @github-actions in #1731
  • build(deps): bump golang.org/x/term from 0.14.0 to 0.15.0 by @dependabot in #1736
  • build(deps): bump mobx from 6.11.0 to 6.12.0 in /docs by @dependabot in #1738
  • build(deps): bump github.com/go-git/go-git/v5 from 5.10.0 to 5.10.1 by @dependabot in #1734
  • build(deps): bump golang.org/x/tools from 0.15.0 to 0.16.0 in /tools by @dependabot in #1737
  • build(deps): bump golang.org/x/oauth2 from 0.14.0 to 0.15.0 by @dependabot in #1733
  • Remove leftover branch protection API by @JAORMX in #1742
  • Tiny change to the quickstart guide by @andresgalante in #1763

New Contributors

Full Changelog: v0.0.18...v0.0.19

v0.0.18

20 Nov 12:45
82bdf69
Compare
Choose a tag to compare

What's Changed

  • build(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.46.0 to 0.46.1 by @dependabot in #1685
  • build(deps): bump go.opentelemetry.io/otel/sdk from 1.20.0 to 1.21.0 by @dependabot in #1688
  • build(deps): bump github.com/signalfx/splunk-otel-go/instrumentation/github.com/lib/pq/splunkpq from 1.10.0 to 1.11.0 by @dependabot in #1684
  • Upgrade otelgrpc to v0.46.1 by @jhrozek in #1689
  • Remove combined.yml from gitignore by @JAORMX in #1690
  • build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.25.1 to 1.25.3 by @dependabot in #1692
  • build(deps): bump github.com/lestrrat-go/jwx/v2 from 2.0.16 to 2.0.17 by @dependabot in #1691
  • build(deps): bump github.com/zitadel/oidc/v2 from 2.11.0 to 2.12.0 by @dependabot in #1693
  • build(deps): bump go.opentelemetry.io/otel/exporters/prometheus from 0.43.0 to 0.44.0 by @dependabot in #1695
  • Update quickstart command message layout by @rdimitrov in #1696

Full Changelog: v0.0.17...v0.0.18

v0.0.17

16 Nov 16:05
59e7925
Compare
Choose a tag to compare

What's Changed

  • Remove trailing slash from rules-and-profiles entry in gitignore by @JAORMX in #1661
  • Re-introduce entity validation for rule types by @JAORMX in #1662
  • Add Validate check to our rule type tests by @JAORMX in #1663
  • Rename medev to mindev by @JAORMX in #1667
  • Downgrade otelgrpc to work around open-telemetry/opentelemetry-go-contrib#4547 by @jhrozek in #1668
  • Add trivyignore file with risk acceptance by @JAORMX in #1669
  • Add X-Forwarded-For to default logging by @JAORMX in #1670
  • build(deps): bump github.com/bufbuild/buf from 1.28.0 to 1.28.1 in /tools by @dependabot in #1672
  • Add support for sidecars to migrate and minder, add tests for same by @evankanderson in #1671
  • build(deps): bump golang from 81cd210 to 57bf74a by @dependabot in #1676
  • build(deps): bump github.com/aws/aws-sdk-go-v2/feature/rds/auth from 1.3.2 to 1.3.3 by @dependabot in #1675
  • build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.25.0 to 1.25.1 by @dependabot in #1674
  • build(deps): bump k8s.io/apimachinery from 0.28.3 to 0.28.4 by @dependabot in #1673
  • Use helm-docs to auto-generate documentation for our chart by @JAORMX in #1677
  • Add documentation for helm values by @JAORMX in #1678
  • Auto-generated helm documentation update - 2023-11-16 12:15:00 by @github-actions in #1679
  • Update package-lock.json parsing strategy by @eleftherias in #1666
  • Process entity events in exclusively and in parallel by @JAORMX in #1654
  • Auto-generated DB schema update - 2023-11-16 14:16:47 by @github-actions in #1681
  • Implement a quickstart command for minder by @rdimitrov in #1660
  • Auto-generated cli documentation update - 2023-11-16 17:40:44 by @github-actions in #1683

Full Changelog: v0.0.16...v0.0.17

v0.0.16

15 Nov 12:11
d8c9ae8
Compare
Choose a tag to compare

What's Changed

  • Set SIGSTORE_NO_CACHE=true in minder by @rdimitrov in #1611
  • Auto-generated cli documentation update - 2023-11-09 12:31:12 by @github-actions in #1612
  • Makes issue templates forms by @andresgalante in #1578
  • build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.22.3 to 1.23.0 by @dependabot in #1613
  • Add switch to migrate up/down to do one step migration, add migrate version by @jhrozek in #1614
  • docs: adds prerequisites to the register a repo getting started page by @andresgalante in #1615
  • Adds a link to docs readme to contribution guidelines by @andresgalante in #1616
  • Convert owner name to lowercase when building container image reference by @JAORMX in #1617
  • Update README.md by @dussab in #1622
  • Add issuer_url for running minder outside of docker-compose by @rdimitrov in #1620
  • Return EvaluatioError, not generic error on finding vulnerable or low-scoring packages by @jhrozek in #1619
  • Implement profile update by @JAORMX in #1566
  • Auto-generated cli documentation update - 2023-11-13 13:48:59 by @github-actions in #1629
  • WIP: Upgrade otel dependencies by @jhrozek in #1628
  • Auto-generated DB schema update - 2023-11-13 13:48:59 by @github-actions in #1630
  • build(deps): bump github.com/bufbuild/buf from 1.27.2 to 1.28.0 in /tools by @dependabot in #1623
  • build(deps): bump github.com/signalfx/splunk-otel-go/instrumentation/database/sql/splunksql from 1.9.0 to 1.10.0 by @dependabot in #1627
  • build(deps): bump mobx from 6.10.2 to 6.11.0 in /docs by @dependabot in #1624
  • build(deps): bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace from 1.19.0 to 1.20.0 by @dependabot in #1625
  • Add a stored procedure to handle entity deletions by @jhrozek in #1618
  • Normalize python package names before sending to OSV by @eleftherias in #1634
  • Link PRs with rule_evaluation_status properly by @jhrozek in #1635
  • build(deps): bump github.com/sigstore/cosign/v2 from 2.2.0 to 2.2.1 by @dependabot in #1585
  • build(deps): bump github.com/signalfx/splunk-otel-go/instrumentation/github.com/lib/pq/splunkpq from 1.9.0 to 1.10.0 by @dependabot in #1637
  • build(deps): bump go.opentelemetry.io/otel/sdk/metric from 1.19.0 to 1.20.0 by @dependabot in #1640
  • build(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.45.0 to 0.46.0 by @dependabot in #1638
  • build(deps): bump go.opentelemetry.io/otel/exporters/prometheus from 0.42.0 to 0.43.0 by @dependabot in #1639
  • build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.23.0 to 1.24.0 by @dependabot in #1641
  • Log the full remediation and alert error by @jhrozek in #1643
  • Suggest smallest delta in PR vulnerability check by @eleftherias in #1632
  • Remove IsProtected for roles and projects and other authz functions by @rdimitrov in #1646
  • Auto-generated DB schema update - 2023-11-14 14:22:49 by @github-actions in #1647
  • Print project list as multiple rows in whoami subcommand by @JAORMX in #1648
  • Handle PR statuses when setting branch protection rules by @jhrozek in #1644
  • Print multiple projects in auth login subcommand by @JAORMX in #1649
  • Add a repository count gauge by @jhrozek in #1651
  • build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.24.0 to 1.25.0 by @dependabot in #1656
  • Don't log skipping rules as errors by @jhrozek in #1658

Full Changelog: v0.0.15...v0.0.16

v0.0.15

09 Nov 10:48
925e7ba
Compare
Choose a tag to compare

What's Changed

New Contributors

Full Changelog: v0.0.14...v0.0.15

v0.0.14

06 Nov 15:53
ca84dd1
Compare
Choose a tag to compare

What's Changed

Full Changelog: v0.0.13...v0.0.14

v0.0.13

06 Nov 11:28
71f1c1e
Compare
Choose a tag to compare

What's Changed

Full Changelog: v0.0.12...v0.0.13

v0.0.12

05 Nov 15:24
9c3f815
Compare
Choose a tag to compare

What's Changed

  • Fix GitHub Actions deprecated warnings by @rdimitrov in #1463
  • Point CLI to production by default by @JAORMX in #1460
  • Make ingress annotations configurable by @JAORMX in #1467
  • Update README.md and other docs by @rdimitrov in #1468
  • Pass the staging/prod build tag through a Makefile env variable by @jhrozek in #1466
  • Reference the minder docs from a SA minder alert by @rdimitrov in #1469
  • Don't print informational values to stdout by @jhrozek in #1472
  • Don't reuse the configured Trusty http endpoint for the PR reply, use a constant instead by @jhrozek in #1473
  • Add pypi vulnerability check configuration to the example profile by @jhrozek in #1471

Full Changelog: v0.0.11...v0.0.12

v0.0.11

04 Nov 11:21
87281fe
Compare
Choose a tag to compare

What's Changed

Full Changelog: v0.0.10...v0.0.11

v0.0.10

04 Nov 11:10
1c8c8c4
Compare
Choose a tag to compare

What's Changed

  • build(deps): bump github.com/docker/docker from 24.0.6+incompatible to 24.0.7+incompatible in /tools by @dependabot in #1328
  • build(deps): bump github.com/docker/docker from 24.0.0+incompatible to 24.0.7+incompatible by @dependabot in #1327
  • Use stacklokbot for commit author at homebrew-tap by @rdimitrov in #1330
  • Add watermill event histogram by @jhrozek in #1329
  • Read the Pi hostname from config instead of rule_type by @jhrozek in #1313
  • remove unused Vulncheck protobuf message contents by @jhrozek in #1331
  • Remove Go ecosystem config from the Pi rule-type by @jhrozek in #1332
  • Update CONTRIBUTING.md by @dussab in #1334
  • Update SECURITY.md by @dussab in #1335
  • Delete .github/ISSUE_TEMPLATE/epic.md by @dussab in #1336
  • Update user_story.md by @dussab in #1337
  • Update README.md by @dussab in #1338
  • Update CONTRIBUTING.md by @dussab in #1339
  • Rename mediator.proto to minder.proto, implement bridge by @evankanderson in #1340
  • Great client-side rename by @evankanderson in #1341
  • build(deps): bump github.com/lestrrat-go/jwx/v2 from 2.0.15 to 2.0.16 by @dependabot in #1345
  • build(deps): bump sigstore/cosign-installer from 3.1.1 to 3.1.2 by @dependabot in #1346
  • cli: Remove mediatorv1 from rule type commands by @JAORMX in #1342
  • Add a bunch of skeleton docs by @evankanderson in #1344
  • chore: Move rego eval to use minder instead of mediator by @JAORMX in #1343
  • fix: helpers: use viper instance instead of global by @JAORMX in #1348
  • fix: config: Fix usage of global viper instance by @JAORMX in #1349
  • chore: Add -race flag to test invocation by @JAORMX in #1347
  • Rename keycloak clients to minder by @eleftherias in #1350
  • Adjust Pi evaluator reply structure to the API response by @jhrozek in #1353
  • Fix vulncheck's repo cache to be concurrency-friendly by @JAORMX in #1351
  • Rename the package_intelligence evaluator to trusty evaluator by @jhrozek in #1354
  • Add support for publishing minder to winget (Windows) by @rdimitrov in #1333
  • Add read_only flag to docker-compose by @JAORMX in #1355
  • Close publisher and subsriber when closing eventer by @JAORMX in #1359
  • Update CODE_OF_CONDUCT.md by @dussab in #1361
  • Update README.md by @dussab in #1363
  • build(deps): bump github.com/aws/aws-sdk-go-v2/feature/rds/auth from 1.2.21 to 1.3.0 by @dependabot in #1365
  • build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.19.1 to 1.20.0 by @dependabot in #1364
  • build(deps-dev): bump @docusaurus/module-type-aliases from 2.4.3 to 3.0.0 in /docs by @dependabot in #1366
  • Setup go before building with ko and update go.mod by @rdimitrov in #1362
  • Restructure minder CLI docs by @eleftherias in #1367
  • Fix Stacklok logo in staging by @eleftherias in #1358
  • Print debug message if a particular project has private repos enabled by @JAORMX in #1368
  • Add setup-go step to helm chart publish job by @JAORMX in #1369
  • Add more debugging when registering private repos by @jhrozek in #1372
  • Rename mediator to minder in service health check by @JAORMX in #1375
  • Stop logging health checks again by @JAORMX in #1376
  • Fix credentials path to use minder by @eleftherias in #1377
  • Update contact mail for published packages by @rdimitrov in #1379
  • Implement whoami command for minder by @rdimitrov in #1378
  • Auto-generated cli documentation update - 2023-11-01 15:20:14 by @github-actions in #1380
  • Double the client timeout by @jhrozek in #1382
  • Use the context in rule_type create for each rule_type by @jhrozek in #1384
  • Implement repo delete for minder by @rdimitrov in #1371
  • Auto-generated cli documentation update - 2023-11-01 16:17:00 by @github-actions in #1386
  • rule_type list had confused -oyaml and -ojson by @jhrozek in #1385
  • Show which server minder is connecting to by @rdimitrov in #1387
  • Add how-to for enabling PR reviews by @eleftherias in #1388
  • Add tutorial for registering repos and profiles by @eleftherias in #1381
  • Update index.md by @dussab in #1390
  • Update category.yml by @dussab in #1392
  • Update index.md by @dussab in #1395
  • Expose several errors in handlers_repositories to the user by @jhrozek in #1394
  • Allow ServiceAccounts to be passed in to the chart by @evankanderson in #1396
  • build(deps): bump golang from 24a0937 to 5206873 by @dependabot in #1397
  • build(deps): bump github.com/aws/aws-sdk-go-v2/feature/rds/auth from 1.3.0 to 1.3.1 by @dependabot in #1398
  • build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.20.0 to 1.21.0 by @dependabot in #1399
  • Point to Trusty instance via an environment variable by @jhrozek in #1401
  • Add metrics for outbound API calls by @jhrozek in #1360
  • Rename mediator to minder in engine/actions by @rdimitrov in #1400
  • Add a tutorial on automatic remediations by @jhrozek in #1391
  • Show minder server on new user register table by @rdimitrov in #1402
  • Skip 404 when listing handlers; add several log messages by @jhrozek in #1403
  • Return nicer erorr messages if a token or a profile already exist by @jhrozek in #1406
  • Don't report fatal error if there are no tokens for the provider during token revocation by @jhrozek in #1407
  • The migrate container is now called minder_migrate_1 by @jhrozek in #1410
  • Remove old token key secrets since we're using Keycloak by @evankanderson in #1411
  • Update docs with minder logo by @dussab in #1412
  • Add docs for profiles by @rdimitrov in #1405
  • Add docs for alerts by @rdimitrov in #1404
  • Add a document describing how to enroll an org by @jhrozek in #1408
  • Extend the PR vuln check docs with commit status by @jhrozek in #1409
  • Fixes to the OSV rule_type and profile by @jhrozek in #1416
  • Implement a LICENSE rule type by @rdimitrov in #1419
  • Add a reference about the pr_vulnerability_check type by @jhrozek in #1418
  • build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.21.0 to 1.22.0 by @dependabot in #1421
  • build(deps): bump golang from 5206873 to b113af1 by @dependabot in #1420
  • Run minder in a read-only filesystem by @JAORMX in #1422
  • Only append the status code label in http telemetry if we get a reply by @jhrozek in #1426
  • Fix newline in auth login by @JAORMX in #1427
  • Don't fail provider enroll if browser wasn't opened by @JAORMX in #1425
  • change register repository calls to use one call per repo by @JAORMX in #1429
  • Skip non JSON or YAML files when doing rule type create by @JAORMX in #1430
  • Add how-to create a profile by @eleftherias in https://gi...
Read more