v0.4.15

Changelog

• 5436857 update goreleaser.yaml (#273)
• e081561 update releaser action (#272)
• 110509a update release buildfile (#271)
• acafcfd remove CVE-2024-41110 (#270)
• e75a27f add .env file to suspicious files list (#269)
• d815082 Add parameters for sensitive files and sensitive file extensions (#267)
• d8e1572 Censor suspicious environment variables (#268)
• 35c5446 add /.vex (#264)
• e3f1396 Bump github.com/opencontainers/runc from 1.1.10 to 1.1.12 (#253)

v0.4.14

Changelog

• 61a2fcc add archives release for loong64 (#245)
• b08d9a3 update library version and go version (#252)
• 9f6e900 update caching suspicious directories and files (#247)
• e8d60f4 add loong64 build support (#240)
• 99677e8 fix referred typo (#238)
• 2766b1e all flag use EnvVars (#237)
• f15f69c add result summary at the sarif part (#236)
• ecfb9e5 action files use go v1.20 (#235)
• a104d5d update go version v1.20 (#234)
• 3c8fd18 chore: remove refs to deprecated io/ioutil (#233)

v0.4.13

Changelog

• a63473b update goreleaser format (#232)
• update deckoder for package updates (#231)
• check password format in Password assessor (#230)
• allow first add statement in config files (#229)

Full Changelog: v0.4.11...v0.4.13

v0.4.11

Changelog

• a8fc623 update deckoder and docker version (#219)
• 62645c1 Update README to fix wrong license listing (#216)
• 8d04827 add instruction for github action (#214)

v0.4.10

Changelog

• 7ebf663 remove docker scheme from filename (#213)
• 9b57734 Update go version v1.19 (#212)

v0.4.9

Changelog

• 09d597c update github.com/sylabs/sif/v2 for CVE-2022-39237 (#205)
• 7d067d8 fix: Include artifact locations in SARIF reports (#204)

v0.4.8

Changelog

• 3fbe4cf env key should not contain space (#203)

v0.4.7

Changelog

• 87ae713 add use-xdg option (#201)

v0.4.6

Changelog

• 43736af remove windows build from goreleaser
• ff13dd0 Skip assessment if environment variable is empty (#194)
• d62b963 Add version-up confirmation flag and skip the latest version confirmation by default (#193)
• b7b64e3 pkg/assessor/manifest: Add sensitive variable names checks (#189)
• da1a15c Avoid casting the result of fetchLocation (#192)
• fce73ce Add instructions for Microsoft PowerShell (#190)
• becf0d8 fix command of removing setgid permission (#187)
• d8c63cb Verbose "not found version patterns" error (#184)
• 08071c0 Fix fetch of latest version (#183)
• b9072c9 Move new app initialization out of main (#178)

v0.4.5

Changelog

• f39e932 update modules (#177)
• 5a874fb add a cert-path parameter to allow private docker certs for tcp connections (#176)