Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore: merge changes from upstream #6

Merged
merged 95 commits into from
Nov 8, 2024
Merged

chore: merge changes from upstream #6

merged 95 commits into from
Nov 8, 2024

Conversation

albertodonato
Copy link
Collaborator

In particular, this gets the fix to set missing variables as null from aquasecurity#7669

nikpivkin and others added 30 commits September 18, 2024 06:02
@nikpivkin
chore(deps): bump go-ebs-file (aquasecurity#7513)
d1d7132 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
@DmitriyLewen
fix(sbom): parse type framework as library when unmarshalling `Cy…
aeb7039 
…cloneDX` files (aquasecurity#7527)
@nikpivkin
refactor(misconf): pass options to Rego scanner as is (aquasecurity#7529
dbd2dd6 
)

Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
@afdesk @knqyf263
fix(sbom): export bom-ref when converting a package to a component (a…
5dd94eb 
…quasecurity#7340)

Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: amf <amf@macbook.local>
Co-authored-by: knqyf263 <knqyf263@gmail.com>
@nikpivkin
perf(misconf): use port ranges instead of enumeration (aquasecurity#7549
1f9fc13 
)

Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
@bloomadcariad
fix(misconf): Fixed scope for China Cloud (aquasecurity#7560)
37d549e
@simar7
docs(misconf): Add more info on how to use arbitrary JSON/YAML scan f…
8128ecc 
…eat (aquasecurity#7458)
@lebauce
chore(deps): remove broken replaces for opa and discovery (aquasecuri…
bbc8e1d 
…ty#7600)
@DmitriyLewen
ci: cache test images for integration, VM and module tests (aqu…
fea7250 
…asecurity#7599)
@DmitriyLewen
ci: add workflow_dispatch trigger for test workflow. (aquasecurity#…
1fdf30a 
…7606)
@dependabot @knqyf263
chore(deps): bump the common group across 1 directory with 20 updates (…
3fa24e8 
…aquasecurity#7604)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: knqyf263 <knqyf263@gmail.com>
@DmitriyLewen
fix(db): check DownloadedAt for trivy-java-db (aquasecurity#7592)
13ef3e7
@nikpivkin
fix: allow access to '..' in mapfs (aquasecurity#7575)
a8fbe46 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
@knqyf263
test: use a local registry for remote scanning (aquasecurity#7607)
9baf658 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
@nikpivkin
fix(misconf): escape all special sequences (aquasecurity#7558)
ea0cf03 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
@nikpivkin @simar7
feat(misconf): add ability to disable checks by ID (aquasecurity#7536)
ef0a27d 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
Co-authored-by: Simar <simar@linux.com>
@msmeissn @knqyf263
feat(suse): added SUSE Linux Enterprise Micro support (aquasecurity#7294
efdb68d 
)

Signed-off-by: Marcus Meissner <meissner@suse.de>
Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: knqyf263 <knqyf263@gmail.com>
@nikpivkin
fix(misconf): disable DS016 check for image history analyzer (aquasec…
de40df9 
…urity#7540)

Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
@DmitriyLewen
ci: split save and restore cache actions (aquasecurity#7614)
cb16d43
@knqyf263
refactor: fix auth error handling (aquasecurity#7615)
9d1be41 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
@afdesk @knqyf263
feat(secret): enhance secret scanning for python binary files (aquase…
60725f8 
…curity#7223)

Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: knqyf263 <knqyf263@gmail.com>
@DmitriyLewen @knqyf263
feat(java): add empty versions if pom.xml dependency versions can't…
b836232 
… be detected (aquasecurity#7520)

Co-authored-by: Teppei Fukuda <knqyf263@gmail.com>
@knqyf263
test: use loaded image names (aquasecurity#7617)
d4edeb5 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
@DmitriyLewen
ci: don't use cache for setup-go (aquasecurity#7622)
7602d14
@nikpivkin
feat: support multiple DB repositories for vulnerability and Java DB (a…
3562529 
…quasecurity#7605)

Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
@simar7 @nikpivkin
feat(misconf): Support --skip-* for all included modules (aquasecur…
c0e8da3 
…ity#7579)

Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
Co-authored-by: nikpivkin <nikita.pivkin@smartforce.io>
@knqyf263 @simar7
chore: add prefixes to log messages (aquasecurity#7625)
1faf529 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: simar7 <1254783+simar7@users.noreply.github.com>
@simar7
fix(misconf): Disable deprecated checks by default (aquasecurity#7632)
82e2adc
@simar7
chore(deps): Bump trivy-checks to v1.1.0 (aquasecurity#7631)
8735242
@sgaist
fix(secret): change grafana token regex to find them without unquoted (…
3e1fa21 
…aquasecurity#7627)
afdesk and others added 27 commits October 29, 2024 07:08
@afdesk
fix(k8s): support kubernetes v1.31 (aquasecurity#7810)
7a4f4d8
@smtan-gl @afdesk
fix(k8s)!: support k8s multi container (aquasecurity#7444)
c434775 
Co-authored-by: afdesk <work@afdesk.com>
@simar7
refactor(misconf): Deprecate EXCEPTIONS for misconfiguration scanni…
c70b6fa 
…ng (aquasecurity#7776)

Signed-off-by: Simar <simar@linux.com>
@nikpivkin
fix(helm): properly handle multiple archived dependencies (aquasecuri…
6fab88d 
…ty#7782)

Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
@nikpivkin
fix(cli): add config name to skip-policy-update alias (aquasecurity#7820
b661d68 
)

Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
@DmitriyLewen
fix(sbom): use Annotation instead of AttributionTexts for SPDX …
f2bb9c6 
…formats (aquasecurity#7811)
@afdesk
fix(k8s): skip resources without misconfigs (aquasecurity#7797)
7882776
@Rutam21 @DmitriyLewen
fix(go): Do not trim v prefix from versions in Go Mod Analyzer (aquas…
e872ec0 
…ecurity#7733)

Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
@simar7
chore(deps): Bump trivy-checks (aquasecurity#7819)
194d4ab
@nikpivkin
docs: add example of creating whitelist of checks (aquasecurity#7821)
7654b2e 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
@DmitriyLewen
docs(java): add info about supported scopes (aquasecurity#7842)
dc44946
@knqyf263
feat(db): append errors (aquasecurity#7843)
5e78b6c 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
@knqyf263
chore: lint errors.Join (aquasecurity#7845)
7632625 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
@aqua-bot
release: v0.57.0 [main] (aquasecurity#7710)
efec326
@knqyf263
chore: bump golangci-lint to v1.61.0 (aquasecurity#7853)
4da59bd 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
@dependabot
chore(deps): bump the github-actions group across 1 directory with 2 …
a9b557d 
…updates (aquasecurity#7854)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@DmitriyLewen
test: save containerd image into archive and use in tests (aquasecu…
a6a45b3 
…rity#7816)
@Yeatesss
refactor(secret): optimize performance by moving ToLower operation ou…
2529b58 
…tside loop (aquasecurity#7862)
@dependabot
chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 (a…
ed2288f 
…quasecurity#7868)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@afdesk
feat(k8s): add default commands for unknown platform (aquasecurity#7863)
b1c7f55
@bpfoster
fix: Improve version comparisons when build identifiers are present (a…
eda4d76 
…quasecurity#7873)
@knqyf263
chore: bump containerd to v2.0.0 (aquasecurity#7875)
6e3252b 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
@dependabot @knqyf263
chore(deps): bump the common group across 1 directory with 20 updates (…
6018461 
…aquasecurity#7876)

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: knqyf263 <knqyf263@gmail.com>
@jinroh
fix(fs): add missing defered Cleanup() call to post analyzer fs (aqua…
ab32297 
…security#7882)
@nikpivkin
fix(misconf): handle null properties in CloudFormation templates (aqu…
99b2db3 
…asecurity#7813)

Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
@albertodonato
fix(terraform): set null value as fallback for missing variables (aqu…
611558e 
…asecurity#7669)
@albertodonato
Merge upstream main to get latest changes
ee932cd
@albertodonato albertodonato changed the title Merge changes from upstream chore: merge changes from upstream Nov 8, 2024
ajkerrigan
ajkerrigan approved these changes Nov 8, 2024
View reviewed changes
Copy link
Member

@ajkerrigan ajkerrigan left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sounds good, thanks @albertodonato ! 👍

@ajkerrigan ajkerrigan merged commit f5a02f3 into cloud-custodian:main Nov 8, 2024
16 of 17 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@ajkerrigan ajkerrigan ajkerrigan approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.