v0.5.3

Changelog

• 3a7c9e3: 🌱 bump github/codeql-action from 3.25.10 to 3.25.11 (@dependabot[bot])
• 9669d98: 🌱 bump google/osv-scanner-action from 1.7.4 to 1.8.1 (@dependabot[bot])
• de1aacb: ci: update .goreleaser.yml for version 2 (@janfuhrer)

Full Changelog: v0.5.2...v0.5.3

Docker Images

• ghcr.io/janfuhrer/podsalsa:v0.5.3
• ghcr.io/janfuhrer/podsalsa:latest

v0.5.2

Changelog

• 1b53976: ci: add cosign installer (@janfuhrer)
• f6f99a8: ci: fix variables (@janfuhrer)
• 710b817: ci: fix GITHUB_REF_NAME var (@janfuhrer)
• 2aa49be: ci: improve release workflow (@janfuhrer)

Full Changelog: v0.5.1...v0.5.2

Docker Images

• ghcr.io/janfuhrer/podsalsa:v0.5.2
• ghcr.io/janfuhrer/podsalsa:latest

v0.5.2-rc.1

What's Changed

• ci: improve release workflow by @janfuhrer in #87
• ci: fix variables by @janfuhrer in #88

Full Changelog: v0.5.1...v0.5.2-rc.1

Docker Images

• ghcr.io/janfuhrer/podsalsa:v0.5.2-rc.1

v0.5.1

Changelog

• f80bcfc: 🌱 bump actions/checkout from 4.1.6 to 4.1.7 (@dependabot[bot])
• 76f99c0: chore(deps): bump actions/dependency-review-action from 4.3.2 to 4.3.3 (@dependabot[bot])
• d989aeb: chore(deps): bump docker/login-action from 3.1.0 to 3.2.0 (@dependabot[bot])
• 7586ada: chore(deps): bump github.com/spf13/viper from 1.18.2 to 1.19.0 (@dependabot[bot])
• d798d40: chore(deps): bump github/codeql-action from 3.25.6 to 3.25.10 (@dependabot[bot])
• 870b062: chore(deps): bump google/osv-scanner-action from 1.7.3 to 1.7.4 (@dependabot[bot])
• 5d8b776: chore(deps): bump goreleaser/goreleaser-action from 5.1.0 to 6.0.0 (@dependabot[bot])
• 91f8eb4: chore: update go to 1.22.4 (@janfuhrer)
• 795d32d: ci: fix permissions for osv-scan 1.7.4 (@janfuhrer)
• 209b8b8: ci: improve release workflow (@janfuhrer)
• 3e0639f: docs: fix typos (@janfuhrer)

Full Changelog: v0.5.0...v0.5.1

Docker Images

• ghcr.io/janfuhrer/podsalsa:v0.5.1
• ghcr.io/janfuhrer/podsalsa:latest

v0.5.0

⚠️ Important changes ⚠️

• The SBOMs of the Go binary packages now has the suffix .tar.gz.sbom.json (previously .tar.gz.sbom).

Changelog

• 742bbfd: chore(deps): bump actions/checkout from 4.1.4 to 4.1.5 (@dependabot[bot])
• 3c1ba0f: chore(deps): bump actions/checkout from 4.1.5 to 4.1.6 (@dependabot[bot])
• ced81d4: chore(deps): bump anchore/sbom-action from 0.15.11 to 0.16.0 (@dependabot[bot])
• 5757db6: chore(deps): bump github/codeql-action from 3.25.3 to 3.25.4 (@dependabot[bot])
• 304af66: chore(deps): bump github/codeql-action from 3.25.4 to 3.25.5 (@dependabot[bot])
• 734ef01: chore(deps): bump github/codeql-action from 3.25.5 to 3.25.6 (@dependabot[bot])
• c7db808: chore(deps): bump golangci/golangci-lint-action from 5.3.0 to 6.0.1 (@dependabot[bot])
• 417641d: chore(deps): bump google/osv-scanner-action from 1.7.1 to 1.7.3 (@dependabot[bot])
• c574002: chore(deps): bump goreleaser/goreleaser-action from 5.0.0 to 5.1.0 (@dependabot[bot])
• 90dce83: chore(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3 (@dependabot[bot])
• d589366: chore(deps): bump securego/gosec (@dependabot[bot])
• 1ac5af2: chore(deps): bump securego/gosec (@dependabot[bot])
• 351ae44: chore: update golangci-lint (@janfuhrer)
• aa81711: ci: fix asset verification (@janfuhrer)
• e5cac38: ci: update gosec & golangci (@janfuhrer)
• 194c8f7: ci: use fix go toolchain for gosec (@janfuhrer)
• 10188e9: docs: add dependency-track documentation (@janfuhrer)
• a1702c5: docs: improve compoenent analysis (@janfuhrer)
• 07cb04d: docs: improve documentation (@janfuhrer)
• 5189457: docs: improve documentation (@janfuhrer)
• 5b02e2a: docs: improve documentation (@janfuhrer)
• d5e0d4f: docs: improve documentation (@janfuhrer)
• 17df209: docs: update docs for new *.sbom.json artifact names (@janfuhrer)

Full Changelog: v0.4.1...v0.5.0

Docker Images

• ghcr.io/janfuhrer/podsalsa:v0.5.0
• ghcr.io/janfuhrer/podsalsa:latest

v0.4.1

Changelog

• 454cd81: fix: add missing files (@janfuhrer)

Full Changelog: v0.4.0...v0.4.1

Docker Images

• ghcr.io/janfuhrer/podsalsa:v0.4.1
• ghcr.io/janfuhrer/podsalsa:latest

v0.4.0

⚠️ Important changes ⚠️

• SBOMs of the go archives are now also in CycloneDX format (previously in SPDX)
• Docker images are now signed with cosign
• SBOMs are now only available for the multi-arch image (not the platform specific ones)
• Container SBOM is now signed and can be verified with cosign verify-attestation (see verfication-docs)

Changelog

• feat: add guac docs, update ci by @janfuhrer in #51
• ci: fix ko-publish job by @janfuhrer in #52
• ci: fix makefile and workflow by @janfuhrer in #53
• ci: fix typo in Makefile by @janfuhrer in #54
• ci: add go setup for ko-publish job by @janfuhrer in #55

Full Changelog: v0.3.1...v0.4.0

Docker Images

• ghcr.io/janfuhrer/podsalsa:v0.4.0
• ghcr.io/janfuhrer/podsalsa:latest

v0.4.0-rc.9

Changelog

• fd7662a: ci: fix goreleaser typo (@janfuhrer)

Full Changelog: v0.4.0-rc.8...v0.4.0-rc.9

Docker Images

• ghcr.io/janfuhrer/podsalsa:0.4.0-rc.9

v0.4.0-rc.7

Changelog

• b51bec9: ci: disable ko sboms (@janfuhrer)

Full Changelog: v0.4.0-rc.6...v0.4.0-rc.7

Docker Images

• ghcr.io/janfuhrer/podsalsa:0.4.0-rc.7
• ghcr.io/janfuhrer/podsalsa:latest

v0.4.0-rc.6

Changelog

• 98b207c: ci: update cosign sbom attestation (@janfuhrer)

Full Changelog: v0.4.0-rc.5...v0.4.0-rc.6

Docker Images

• ghcr.io/janfuhrer/podsalsa:0.4.0-rc.6
• ghcr.io/janfuhrer/podsalsa:latest