v0.4.0-rc.5

Changelog

• 1e755ce: ci: add go setup for ko-publish job (@janfuhrer)

Full Changelog: v0.4.0-rc.4...v0.4.0-rc.5

Docker Images

• ghcr.io/janfuhrer/podsalsa:0.4.0-rc.5
• ghcr.io/janfuhrer/podsalsa:latest

v0.3.1

Changelog

• b01bcda: chore(deps): bump actions/checkout from 4.1.3 to 4.1.4 (@dependabot[bot])
• 118579c: chore(deps): bump actions/dependency-review-action from 4.2.5 to 4.3.2 (@dependabot[bot])
• 026842e: chore(deps): bump actions/setup-go from 5.0.0 to 5.0.1 (@dependabot[bot])
• 7a441fb: chore(deps): bump golangci/golangci-lint-action from 5.0.0 to 5.3.0 (@dependabot[bot])
• 4078deb: chore(deps): bump securego/gosec (@dependabot[bot])
• ee781d4: ci: fix cosign verify job (@janfuhrer)
• 3453fc3: feat: add health endpoint (@janfuhrer)
• e01fe0c: feat: add kyverno registry policy (@janfuhrer)

v0.3.0

Changelog

• ef2e93a: docs: add kubernetes enforcement documentation, add Archive documentation (@janfuhrer)
• 1238c94: feat: add kubernetes docs (@janfuhrer)
• 50add68: feat: move slsa attestation files to new repository (@janfuhrer)

v0.2.2

Changelog

• 3091603: chore(deps): bump actions/upload-artifact from 4.3.2 to 4.3.3 (@dependabot[bot])
• e62c02e: chore(deps): bump anchore/sbom-action from 0.15.10 to 0.15.11 (@dependabot[bot])
• 290ab44: chore(deps): bump github/codeql-action from 3.25.1 to 3.25.3 (@dependabot[bot])
• 2bf4c81: chore(deps): bump golangci/golangci-lint-action from 4.0.0 to 5.0.0 (@dependabot[bot])
• 0f20ac7: chore(deps): bump slsa-framework/slsa-github-generator (@dependabot[bot])
• 15aa670: chore: update SECURITY-INSIGHTS.yml (@janfuhrer)
• b0c6015: docs: update sbom documentation (@janfuhrer)

v0.2.1

Changelog

• c692bca: docs: add container sbom verification (@janfuhrer)
• a83f5a7: docs: finish release workflow documentation (@janfuhrer)
• 6f0126b: docs: improve security documentation (@janfuhrer)
• 01d5225: feat: add .allstar config files (@janfuhrer)
• 9be1f6b: feat: add SECURITY-INSIGHTS.yml (@janfuhrer)
• a982b4b: feat: use separate package registry for container sbom artifacts (@janfuhrer)

v0.2.0

Changelog

• 169b646: ci: fix cosign parameter (@janfuhrer)
• 9c93b4c: ci: only sign checksum file, add certificate artifact (@janfuhrer)

v0.2.0-rc.2

Changelog

• 1e5af08: ci: fix permission for gorelease workflow (@janfuhrer)
• 6e1ac0b: ci: improve release workflow & signing (@janfuhrer)
• 0621899: ci: improve release workflow and signing (@janfuhrer)

v0.2.0-rc.1

Changelog

• 545023e: ci: add syft to release workflow (@janfuhrer)

v0.1.0

Changelog

• 43d0d20: Add best-practises, add more workflows (#1) (@janfuhrer)
• a4a74e4: [StepSecurity] Apply security best practices (@step-security-bot)
• 977e1e5: chore(deps): bump actions/checkout from 3.6.0 to 4.1.2 (@dependabot[bot])
• 25b78e2: chore(deps): bump actions/checkout from 4.1.2 to 4.1.3 (@dependabot[bot])
• 99bd1d4: chore(deps): bump actions/dependency-review-action from 2.5.1 to 4.2.5 (@dependabot[bot])
• 15209f2: chore(deps): bump actions/upload-artifact from 4.3.1 to 4.3.2 (@dependabot[bot])
• 84661cb: chore(deps): bump github/codeql-action from 3.24.10 to 3.25.0 (@dependabot[bot])
• 5a51d54: chore(deps): bump github/codeql-action from 3.25.0 to 3.25.1 (@dependabot[bot])
• 9ef3766: chore(deps): bump securego/gosec (@dependabot[bot])
• 18ca2a2: ci: change release workflow to gorelease with provenance (@janfuhrer)
• 7d245da: docs: add FOSSA badges, fix: code scanning alerts (#14) (@janfuhrer)
• 0f500a1: docs: add OpenSSF badge documentation (@janfuhrer)
• cf35075: docs: add codecov badge (@janfuhrer)
• b0e447e: docs: add workflow documentation (@janfuhrer)
• e8b2df7: docs: improve best practices (@janfuhrer)
• 7e0070a: docs: improve best-practises (#4) (@janfuhrer)
• 2ae41c3: feat: add buildconfigs directory (@janfuhrer)
• e662643: feat: add codecov workflow (@janfuhrer)
• 2f01d7e: feat: improve workflows, add golang-ci workflow (#13) (@janfuhrer)
• 49e10e8: feat: improve workflows, improve docker build and Makefile (@janfuhrer)
• 2291f9d: feat: remove harden runner (@janfuhrer)
• af09fb4: fix: codecov workflow (@janfuhrer)
• 5771538: fix: codeql make command for go build (@janfuhrer)
• 53c5e0a: fix: codeql workflow (#3) (@janfuhrer)
• a8b4737: fix: codeql workflow (@janfuhrer)
• 19b0aaf: fix: openssf-scorecard link (@janfuhrer)

v0.0.1

Initial release