v0.17.9

v0.17.9

Bug Fixes

• Disallow all bare try-except clauses [#310]

Additional Changes

• new http wrapper in rhel provider [#392 @willmurphyscode]
• improved handling CVSS V3 parsing [#404 @westonsteimel]
• replace usage of json with orjson [#407 @westonsteimel]

(Full Changelog)

v0.17.8

v0.17.8

Bug Fixes

• remove filtering on vuln ids for wolfi and chainguard [#399 @westonsteimel]

(Full Changelog)

v0.17.7

v0.17.7

Bug Fixes

• NVD api key should not be required [#397 @westonsteimel]

(Full Changelog)

v0.17.6

v0.17.6

Additional Changes

• bump dockerfile to python 3.11 [#391 @westonsteimel]

(Full Changelog)

v0.17.5

v0.17.5

Bug Fixes

• respect GitHub rate limiting [#377 @willmurphyscode]

Additional Changes

• introduce http get wrapper; use it in mariner provider [#376
  @willmurphyscode]
• Move nightly quality gate to be roughly after the latest DB build [#381 @wagoodman]
• Only ask for release on quality gate step [#378 @wagoodman]

(Full Changelog)

v0.17.4

v0.17.4

Additional Changes

• remove remaining blanket noqas [#375 @willmurphyscode]
• remove file noqa from utils fdb [#373 @willmurphyscode]
• remove file scoped noqa for ubuntu parser [#372 @willmurphyscode]
• bump yardstick [#374 @willmurphyscode]

(Full Changelog)

v0.17.3

v0.17.3

Additional Changes

• Make troubleshooting quality gate failures easier [#360 #364 @wagoodman]
• remove file scoped noqa in RHEL parser [#369 @willmurphyscode]
• remove file noqa on SLES parser [#367 @willmurphyscode]
• remove file noqa for utils oval parser [#366 @willmurphyscode]
• remove file noqa ubuntu git provider [#365 @willmurphyscode]
• remove file noqa from rhel oval parser [#361 @willmurphyscode]
• ignore trailing slash in GH CVSS strings [#357 @willmurphyscode]
• remove file-scoped noqa from NVD [#355 @willmurphyscode]
• Remove file noqa on alpine parser [#353 @willmurphyscode]
• Remove bare "except:" clauses except those that re-raise [#351 @willmurphyscode]
• remove file noqa from utils OVAL V2 parser [#368 @willmurphyscode]
• Remove incorrect quality gate configuration [#354 @wagoodman]

(Full Changelog)

v0.17.2

v0.17.2

Bug Fixes

• align retry timeout for NVD requests with the rate limit rolling window [#321 @westonsteimel]

Additional Changes

• test chainguard provider via snapshots [#339 @willmurphyscode]
• fix "make build-grype" [#338 @willmurphyscode]
• test alpine provider via snapshots [#336 @willmurphyscode]
• Add snapshot tests to debian provider [#318 @willmurphyscode]
• Fix nightly quality gate notification [#324 @wagoodman]
• Update vunnel list output in README.md [#316 @andrew]
• improve unit tests in debian provider [#311 @willmurphyscode]

(Full Changelog)

v0.17.1

v0.17.1

Bug Fixes

• Revert #284 + fix namespace resolution for quality gate testing [#307 @wagoodman]

Additional Changes

• Bump chronicle to v0.8.0 [#312 @wagoodman]

(Full Changelog)

v0.17.0

Changelog

v0.17.0 (2023-09-27)

Full Changelog

Added Features

• Add GitHub Security Advisory data for Swift [Issue #293] [PR #302] [westonsteimel]
• Add GitHub Security Advisory data for Dart packages [Issue #294] [PR #302] [westonsteimel]