@security-actions/[email protected]

4.0.0 (2025-01-03)

✨ Features

• release: independent releases for public shared actions (#201) (3d24b7f)

Breaking changes

• release: - Each project within Public Shared Action is now treated as an independent package.

• Each package will have its own versioned release.
• Releases tag example "@security-actions/[email protected]".
• Markdown (.md) files will be ignored when determining changes for releases.

2.8.0 (2024-12-02)

✨ Features

• security-actions/scan-docker-image: support trivy_db_cache as alternate (#184) (0ccacff)

2.6.0 (2024-09-19)

✨ Features

• input to skip Trivy scan (#156) (ecbcd70)

2.5.1 (2024-09-03)

2.5.0 (2024-08-27)

🐛 Bug Fixes

• omitted severity flags in docker image scan action (#142) (f19e9a7)

2.4.1 (2024-08-22)

2.4.0 (2024-08-16)

2.3.0 (2024-05-20)

2.2.1 (2024-04-17)

2.2.0 (2024-04-16)

♻️ Chores

• readme: Add usage examples to security actions (#106) (d9e10a3)
• readme: Add vulnerability migration and breakglass strategy for SCA and CVE action (#107) (ad89a25)

2.0.3 (2024-03-04)

⚙️ Continuous Integrations

• .github: deprecate reuse of sca scan action in docker image scan (#95) (60c9b13)

2.0.1 (2024-02-07)

⚙️ Continuous Integrations

• .github: fix sca action path and ref for image scan (#93) (17456e7)

2.0.0 (2024-02-01)

⚙️ Continuous Integrations

• .github: generalize sca scan for non docker artifacts (#89) (7f27a2b)

1.15.0 (2024-01-22)

1.13.0 (2023-09-18)

1.11.0 (2023-07-06)

✨ Features

• ingore unfixed for trivy image scan (#51) (1c1db81)

🐛 Bug Fixes

• ci: Fix grype output file and dependency (#38) (45d3c9a)

1.3.0 (2023-06-08)

✨ Features

• cd: add trivy docker-cis scan (#1) (84f743c)
• cd: Use pinned tags instead of latest (4b6870c)

🐛 Bug Fixes

• cd: only pass input flag to trivy action when docker tar is present (cbe4f65)

♻️ Chores

• docs: update readme to include trivy docker-cis (ab12bb2)
• sbom-action: bump sbom action to 0.13.4 (396a2e4)

@security-actions/[email protected]

4.0.0 (2025-01-03)

✨ Features

• release: independent releases for public shared actions (#201) (3d24b7f)

Breaking changes

• release: - Each project within Public Shared Action is now treated as an independent package.

• Each package will have its own versioned release.
• Releases tag example "@security-actions/[email protected]".
• Markdown (.md) files will be ignored when determining changes for releases.

2.5.1 (2024-09-03)

2.5.0 (2024-08-27)

2.4.1 (2024-08-22)

2.4.0 (2024-08-16)

2.3.0 (2024-05-20)

2.2.1 (2024-04-17)

2.2.0 (2024-04-16)

♻️ Chores

• readme: Add usage examples to security actions (#106) (d9e10a3)
• readme: Add vulnerability migration and breakglass strategy for SCA and CVE action (#107) (ad89a25)

2.0.3 (2024-03-04)

⚙️ Continuous Integrations

• .github: deprecate reuse of sca scan action in docker image scan (#95) (60c9b13)

2.0.2 (2024-02-12)

✨ Features

• Add optional "config" input to sca syft action (#94) (b0ef627)

⚙️ Continuous Integrations

• .github: generalize sca scan for non docker artifacts (#89) (7f27a2b)

@pr-previews/[email protected]

4.0.0 (2025-01-03)

✨ Features

• release: independent releases for public shared actions (#201) (3d24b7f)

🐛 Bug Fixes

• moving actions that deal with PR preview packages from shared-actions [KHCP-7461] (#18) (a61b6ff)
• validate: check all pr formats (#52) (052816f)

Breaking changes

• release: - Each project within Public Shared Action is now treated as an independent package.

• Each package will have its own versioned release.
• Releases tag example "@security-actions/[email protected]".
• Markdown (.md) files will be ignored when determining changes for releases.

@pr-previews/[email protected]

4.0.0 (2025-01-03)

✨ Features

• release: independent releases for public shared actions (#201) (3d24b7f)

🐛 Bug Fixes

• moving actions that deal with PR preview packages from shared-actions [KHCP-7461] (#18) (a61b6ff)

Breaking changes

• release: - Each project within Public Shared Action is now treated as an independent package.

• Each package will have its own versioned release.
• Releases tag example "@security-actions/[email protected]".
• Markdown (.md) files will be ignored when determining changes for releases.

@pr-previews/[email protected]

4.0.0 (2025-01-03)

✨ Features

• limit cleanup to versions created in last X days [KHCP-7885] (#58) (3c05dce)
• release: independent releases for public shared actions (#201) (3d24b7f)

🐛 Bug Fixes

• cleanup starting with newer PR versions [KHCP-7461] (#44) (92fb10e)
• do not attempt to proceed already removed version [KHCP-7885] (#59) (32dac54)
• moving actions that deal with PR preview packages from shared-actions [KHCP-7461] (#18) (a61b6ff)

Breaking changes

• release: - Each project within Public Shared Action is now treated as an independent package.

• Each package will have its own versioned release.
• Releases tag example "@security-actions/[email protected]".
• Markdown (.md) files will be ignored when determining changes for releases.

@code-check-actions/[email protected]

4.0.0 (2025-01-03)

✨ Features

• release: independent releases for public shared actions (#201) (3d24b7f)

♻️ Chores

• ci: configurable failure mode for semgrep (#55) (bc77fa6)
• readme: Add vulnerability migration and breakglass strategy for SCA and CVE action (#107) (ad89a25)

Breaking changes

• release: - Each project within Public Shared Action is now treated as an independent package.

• Each package will have its own versioned release.
• Releases tag example "@security-actions/[email protected]".
• Markdown (.md) files will be ignored when determining changes for releases.

1.10.0 (2023-06-26)

1.8.0 (2023-06-26)

📦 Code Refactoring

• sca: Separate linters and sca for rust (#46) (b037b99)

@code-check-actions/[email protected]

4.0.0 (2025-01-03)

✨ Features

• release: independent releases for public shared actions (#201) (3d24b7f)

Breaking changes

• release: - Each project within Public Shared Action is now treated as an independent package.

• Each package will have its own versioned release.
• Releases tag example "@security-actions/[email protected]".
• Markdown (.md) files will be ignored when determining changes for releases.

2.2.3 (2024-05-07)

✨ Features

• lua-lint: add an option to make the action fail if the linting fails (#121) (a98be01)

♻️ Chores

• readme: Add vulnerability migration and breakglass strategy for SCA and CVE action (#107) (ad89a25)

1.15.0 (2024-01-22)

1.14.0 (2024-01-12)

🐛 Bug Fixes

• lint: does not specify global standard in luacheck command line arguments (#57) (2804623)

♻️ Chores

• ci: configurable failure mode for semgrep (#55) (bc77fa6)

1.10.0 (2023-06-26)

1.8.0 (2023-06-26)

📦 Code Refactoring

• sca: Separate linters and sca for rust (#46) (b037b99)

@code-build-actions/[email protected]

4.0.0 (2025-01-03)

✨ Features

• release: independent releases for public shared actions (#201) (3d24b7f)

🐛 Bug Fixes

• build-js-sdk: hardcode src as the output directory (#49) (4517bad)
• use input string instead of boolean (#50) (3d93b96)

♻️ Chores

• move build-js-sdk to public (#34) (7119dd2)

Breaking changes

• release: - Each project within Public Shared Action is now treated as an independent package.

• Each package will have its own versioned release.
• Releases tag example "@security-actions/[email protected]".
• Markdown (.md) files will be ignored when determining changes for releases.

v2.8.0

What's Changed

• chore(deps): bump github/codeql-action/upload-sarif from v2 to v3 by @Water-Melon in #169
• github-actions(deps): bump anchore/sbom-action from 0.17.2 to 0.17.8 in /security-actions/sca by @dependabot in #194
• github-actions(deps): bump anchore/sbom-action from 0.17.2 to 0.17.8 in /security-actions/scan-docker-image by @dependabot in #191
• chore(docs): update semgrep readme by @saisatishkarra in #195
• feat(security-actions/scan-docker-image): support trivy_db_cache as alternate by @dndx in #184

New Contributors

• @Water-Melon made their first contribution in #169
• @dndx made their first contribution in #184

Full Changelog: v2...v2.8.0

v2.7.3

What's Changed

• feat(slack): new workflow inputs by @adamdehaven in #163

Full Changelog: v2...v2.7.3