Skip to content

Release 2.2.0
Compare
Choose a tag to compare
@s-l-teichmann s-l-teichmann released this 14 Jul 09:16
· 282 commits to main since this release
v2.2.0
de27a66
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

Highlights

  • Role based reporting in the checker.
  • Improved output in error cases and in the checker report.
  • The downloader is now able to fetch more than one advisory at once.
  • Needs at least Go 1.20 to build the tools.
  • Various bug fixes.

PRs

  • #391: Complete requirement 4 (ROLIE)
  • #401: Add info for Req 8-10 if direct url was given and as such no checks were performed.
  • #400: Allow http redirects
  • #393: Dont use string comparison to rank labels.
  • #390: Check for advisoryLabel instead of feedlabel.
  • #388: Use Set type
  • #389: Update third party libraries
  • #382: Improve error message if filename does not match document/tracking/id and let it be reported by the proper reporter
  • #357: Empty rolie
  • #373: Role requirements 11-14 or 15-17
  • #378: Burn v2 version into binaries.
  • #370: Fix pmd crash
  • #369: Simplified requirement 15
  • #372: We need at least Go 1.20
  • #371: Fix go.mod and internal dependencies for major verison v2
  • #366: Prepare infrastructure for role based reporting
  • #365: Check that filename matches /document/tracking/id
  • #361: Be more verbose in case of signature check failures
  • #363: Add concurrent downloads to downloader.
  • #362: Update 3rd party libraries.
  • #364: doc: improve rate default documentation
  • #355: Add revive action to workflows
  • #328: Enforce application/json when uploading advisories to provider.
Assets 4
Loading