|
| 1 | +## v0.17.0 (2024-11-27) |
| 2 | + |
| 3 | +### Feat |
| 4 | + |
| 5 | +- warning errors to bubble up as cli exit code |
| 6 | +- beautify GitLab report with reason and some disaclaimers |
| 7 | +- acknowledge vulnerabilities |
| 8 | +- report to individual slack channels |
| 9 | +- scan groups and or projects |
| 10 | +- config file and refactor |
| 11 | +- adding structured logging to zerolog calls |
| 12 | +- use context with timeout for shell commands |
| 13 | +- fetch group projects with pagination |
| 14 | +- testing flag to enable public channels |
| 15 | +- improve cli with better flags and specific command |
| 16 | +- tests for the git service |
| 17 | +- tests for the main scan method |
| 18 | +- coverage ignore functionality |
| 19 | +- add slack service tests |
| 20 | +- add gitlab service tests |
| 21 | +- Add fix available to the vulnerability and the report |
| 22 | +- Severity categories and some tests |
| 23 | +- gitlab report slight from custom report |
| 24 | +- slack message format slight improvement |
| 25 | +- add custom report format |
| 26 | +- support paginating slack channels |
| 27 | +- support scanning subgroups |
| 28 | +- add ci |
| 29 | +- initial implementation |
| 30 | +- initial commit |
| 31 | + |
| 32 | +### Fix |
| 33 | + |
| 34 | +- show only date in GL report header |
| 35 | +- report slack project channel flag boolean |
| 36 | +- oops, removing unnecessary file |
| 37 | +- separate logging from messaging to the user |
| 38 | +- removing pointer to a slice |
| 39 | +- slack message limitations |
| 40 | +- docker image with more functionality for gitlab |
| 41 | +- making some stuff private |
| 42 | +- vulnerability issue title |
| 43 | +- fix version bump in main.go again |
| 44 | +- version bump in main.go |
| 45 | +- had dyslexia some with available fix, is now fixed PR this |
| 46 | +- group vulnerabilities by categories defined directly from osvss |
| 47 | +- incorrect warning message was missing one param |
| 48 | +- sort vulnerabilities by CVSS score within a group casting to floats |
| 49 | +- report is a double reference in osv.Scan |
| 50 | +- do not close inexistant issue |
| 51 | +- fix docker |
| 52 | + |
| 53 | +### Refactor |
| 54 | + |
| 55 | +- remove gitlab project pointers |
| 56 | +- remove unnecessary pointer to report in slice |
| 57 | +- simplify group fetching |
| 58 | +- make vulnScanners format their own report |
| 59 | +- change name of some packages, and merge report packages |
| 60 | +- remove unneded `newService` private trick |
| 61 | +- test osv scan and refactor shell stuff |
| 62 | +- gitlab and slack service and better error handling |
| 63 | + |
| 64 | +### Perf |
| 65 | + |
| 66 | +- use goroutines and channels to run scan in parallel |
| 67 | +- use goroutines for creating GitLab issues |
| 68 | + |
| 69 | +### CI |
| 70 | + |
| 71 | +- add version bumping with commitizen |
| 72 | +- add workflows |
| 73 | +- fix docker again |
| 74 | +- add code coverage in gitlab-ci |
| 75 | +- improve docker by not installing osv-scanner |
| 76 | +- improve ci job definition |
| 77 | + |
| 78 | +### Docs |
| 79 | + |
| 80 | +- add godoc comments to all exported functions |
| 81 | + |
| 82 | +### Technical |
| 83 | + |
| 84 | +- add flag to enable project slack reports |
| 85 | +- add warning when no projects to report |
| 86 | +- add logs for sheriff configuration |
| 87 | +- log warnings when project-config has unrecognized keys |
| 88 | +- sheriff is patrolling |
| 89 | +- sheriff is in town |
| 90 | +- improve docker image |
| 91 | +- minor improvements to ci job and sorting |
| 92 | +- post multiple project reports |
| 93 | +- improve logging |
| 94 | + |
| 95 | +### Tests |
| 96 | + |
| 97 | +- add test for gitlab issue url |
| 98 | +- test publish to slack |
| 99 | +- add tests for console publisher |
| 100 | +- move to testify assertions |
0 commit comments