67 lines (39 loc) · 1.9 KB

Changelog

[Unreleased]

Migrated license enrichment PURL lookup to the org-scoped endpoint (POST /v0/orgs/{slug}/purl) from the deprecated global endpoint (POST /v0/purl).

2.2.80

Hardened GitHub Actions workflows.
Fixed broken links on PyPI page.

2.2.79

Updated minimum required Python version.
Tweaked CI checks.

2.2.78

Fixed reachability filtering.
Added config file support.

2.2.77

Fixed has_manifest_files failing to match root-level manifest files.

2.2.76

Added SARIF file output support.
Improved reachability filtering.

2.2.75

Fixed workspace flag regression by updating SDK dependency.

2.2.74

Added --workspace flag to CLI args.
Added GitLab branch protection flag.
Added e2e tests for full scans and full scans with reachability.
Bumped dependencies: cryptography, virtualenv, filelock, urllib3.

2.2.71

Added strace to the Docker image for debugging purposes.

2.2.70

Set the scan to 'socket_tier1' when using the --reach flag. This ensures Tier 1 scans are properly integrated into the organization-wide alerts.

2.2.69

Added --reach-enable-analysis-splitting flag to enable analysis splitting (disabled by default).
Added --reach-detailed-analysis-log-file flag to print detailed analysis log file path.
Added --reach-lazy-mode flag to enable lazy mode for reachability analysis.
Changed default behavior: analysis splitting is now disabled by default. The old --reach-disable-analysis-splitting flag is kept as a hidden no-op for backwards compatibility.

2.2.64

Included PyPy in the Docker image.

2.2.57

Fixed Dockerfile to set GOROOT to /usr/lib/go when using system Go (GO_VERSION=system) instead of always using /usr/local/go.

2.2.56

Removed process timeout from reachability analysis subprocess. Timeouts are now only passed to the Coana CLI via the --analysis-timeout flag.