|
| 1 | +--- |
| 2 | +title: "Trustify: Release 0.1.0-alpha.10" |
| 3 | +authors: ctron |
| 4 | +tags: [ trustify, release ] |
| 5 | +--- |
| 6 | + |
| 7 | +Today we released Trustify `0.1.0-alpha.10`. It's another alpha release as part of our weekly release cadence. |
| 8 | +Read on to learn what's new. |
| 9 | + |
| 10 | +<!--truncate--> |
| 11 | + |
| 12 | +## New and noteworthy |
| 13 | + |
| 14 | +* There are more labels that get applied during the upload process. It also is possible to automatically add labels |
| 15 | + using the importer configuration. |
| 16 | +* The system will now also record the SHA384 and SHA512 digests of uploaded documents. |
| 17 | +* The package API endpoint and corresponding UI have been renamed to "PURL". |
| 18 | + |
| 19 | + The reason for that is pretty simple, the discussion was not. Right now, these "packages" actually had been "PURLs", |
| 20 | + and not much more. That led to confusion about what arguments to pass in, and what information to expect back. |
| 21 | + |
| 22 | + For the future, we still want to collect information about packages, outside the context of an SBOM. However today, |
| 23 | + that model didn't work well. |
| 24 | +* In addition to titles, also descriptions will be returned now for advisories. As many advisories don't have a title, |
| 25 | + this allows the UI to render a title, based on those descriptions instead. |
| 26 | +* Allow setting labels during the upload of a document. |
| 27 | +* There are some incompatible changes to the database migration. While our goal is to provide migrations as good as |
| 28 | + possible, this change was simply too big. So, as we are still in an alpha cycle, the decision was made to simply |
| 29 | + update the schema in a breaking way. |
| 30 | +* The UI can show the relationship between package and vulnerabilities for each entity |
| 31 | + |
| 32 | +## What's next? |
| 33 | + |
| 34 | +Of course, we would recommend you try out the new version! In "[Trying out Trustify, on a local machine](2024-06-27-trying-out-trustify.md)", we introduced a quick and easy way to get there within minutes. |
| 35 | + |
| 36 | +And of course: |
| 37 | + |
| 38 | +* Check out the [release 0.1.0-alpha.10](https://github.com/trustification/trustify/releases/tag/v0.1.0-alpha.10). |
| 39 | +* Reach out to [us on Matrix](https://matrix.to/#/#trustification:matrix.org), and let us know what you think. |
| 40 | + |
0 commit comments