95 releases 129 tags

RSS feed

• v1.3.3 0533fb7aab

  Compare

  v1.3.3 Stable

  gitchegumi released this 2026-09-06 08:55:34 -05:00 | 277 commits to main since this release

  v1.3.3

  This release fixes scan failures on container-image configuration findings and makes security artifacts more useful for investigation.

  Fixes

  • Handle Trivy image Dockerfile checks that omit source line numbers while preserving strict source-manifest validation.
  • Correct garbled characters in report headings.

  Improved scan artifacts

  • Add summary.md with blockers first, finding explanations, remediation guidance, and advisory links.
  • Add findings.csv for filtering and sharing findings.
  • Enrich decision.json with affected packages, installed and fixed versions, finding categories, policy reasons, and mitigation details.
  • Clearly distinguish CVEs, configuration checks, source checks, and scanner errors.
  • Include readable reports in source, container, bundle, deployment, and PV-provisioning scan artifacts.

  Finding fingerprints and enforcement remain unchanged. No findings are waived, and secret matches and raw source snippets remain excluded.

  Validation

  All 62 unit tests, 16 scaffold cases, and hosted CI checks pass. Regression coverage verifies report generation for successful scans, policy rejection, and scanner failures.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads