v0.4.5 Release

Unreleased

v0.4.5 - 2021-08-10

Chore

• 9793200: v0.4.5 changelog bump

Rpm

• a00ddef: special-case symlinks

v0.4.4 Release

Unreleased

v0.4.4 - 2021-08-06

Chore

• ce6c994: v0.4.4 changelog bump

Indexer

• 302384b: avoid creating a new db pool for the locks
• #408### Rpm
• 9b1d1e3: eagerly change directory permissions

v0.5.1 Release

[Unreleased]

[v0.5.1] - 2021-07-27

Chore

• 38656e0: v0.5.1 changelog bump

Integration

• 81f8501: multiple OS support
• #418
  [Unreleased]: v0.5.1...HEAD
  [v0.5.1]: v0.5.0...v0.5.1

v0.5.0 Release

Unreleased

v0.5.0 - 2021-07-15

All

• 67c0791: use GOMAXPROCS instead of NumCPU
• f7b23aa: switch CODEOWNERS to use clair team
• 6bd0386: remove jzelinskie from CODEOWNERS

Chore

• bbafc5c: v0.5.0 changelog bump

Claircore

• 68e107a: add Enrichments to VulnerabilityReport

Crda

• 7d5927a: remove matcher

Cvss

• 9dd8d38: CVSS enricher

Defaults

• 40282ac: add cvss

Dpkg

• 16993db: replace go-dpkg dependency
• f7a2925: fix path handling
• #381 - Closes #381### Driver
• ed3a555: add enrichment types and interfaces

Fetcher

• 2f1b61d: include response body in error message for non-200 repsonses

Indexer

• f36da9f: avoid creating a new db pool for the locks

Integration

• b2eae4e: use embedded postgres

Introspection

• 3f72eb7: add scanned_before metrics

Java

• dac6715: ignore whiteout files

Jsonblob

• dbd56bb: implement enricher methods

Libindex

• 526e1ba: use new DB testing harness
• d7cea80: fix manifest_index unique constraint

Libvuln

• 391adac: add Enrichment API surface

Makefile

• 2a3634d: update in light of test DB changes

Matcher

• 574497a: add Enrichment support

Postgres

• dbaa2f7: fix query in GetLatestUpdateRefs
• 0db5101: implement enricher methods
• 7b4475f: use new DB testing harness
• e364e13: use new DB testing harness

Rhel

• 80a2826: use new DB testing harness

Updater

• 3de9f4d: remove obsolete package

Updates

• aaea5ba: run enrichment updaters

Vulnstore

• bec40e2: add enrichment interfaces

v0.4.3 Release

Unreleased

v0.4.3 - 2021-06-15

Chore

• 3d4a413: v0.4.3 changelog bump

Crda

• fe112d7: remove matcher

Dpkg

• 11837c4: fix path handling
• #381 - #402### Libindex
• c809930: fix manifest_index unique constraint

v0.1.26 Release

Unreleased

v0.1.26 - 2021-06-15

Chore

• 1e14a8c: v0.1.26 changelog bump

Cicd

• 88527c0: remove chglog fork

Dpkg

• 6d2134e: fix path handling
• #381 - #402### Libindex
• a217608: fix manifest_index unique constraint

Vulnstore

• 32c55bd: enrichment migration

v0.4.2 Release

Unreleased

v0.4.2 - 2021-05-11

Alpine

• f92e1be: implement driver.Configurable

Aws

• 4738610: add http.Client configurability

Chore

• 51f6ca5: v0.4.2 changelog bump

Cicd

• fe6cb92: use golang major version tag for dev env
• 0a04053: use quay.io/projectquay/golang image
• d62b5ad: add golang-image workflow

Crda

• 5146d8c: implement driver.MatcherConfigurable

Debian

• 3d2d700: implement driver.Configurable

Enrichments

• 9a3b349: datamodel updates

Fetcher

• cd6b7fa: remove DefaultClient usage

Jsonblob

• bd2487d: fix copyops

Libindex

• eec427f: use configurable http.Client

Libvuln

• 34de61e: add warn logs when not providing an http.Client

Libvulnhttp

• ef4ee5c: add HTTP client debugging flag

Matchers

• 07fcc40: require http.Client

Oracle

• de18d67: add assertion for Configurable interface

Ovalutil

• d3106a3: implement driver.Configurable

Photon

• 28341b9: add assertion for Configurable interface

Pyupio

• 2cf6a9e: implement driver.Configurable

Registry

• 891a6df: require http.Client

Rhel

• 5c873b4: add assertion for Configurable interface
• 2112153: pass Client through Factory
• ad16c39: make repo2cpe mapping a work stealing scheme

Suse

• 0039063: add assertion for Configurable interface

Ubuntu

• 2976e93: implement driver.Configurable

Updater

• 9145453: report error on nil *http.Client
• ece3005: call Configure method if present

Updates

• 59bec1f: call Configure method if present
• de4be78: drop updater when configuration fails
• 9bc81ca: consolidate update logic
• 9ade4e1: add LockSource interface

Vulnstore

• e9cd964: fix getting update operation diff
• bfafd2f: enrichment migration

v0.4.1 Release

Unreleased

v0.4.1 - 2021-05-04

All

• def957b: return empty byte slices from MarshalText

Chore

• 990cd41: v0.4.1 changelog bump

Cicd

• b764338: remove chglog fork

Crda

• 1405b57: use bulk API in remotematcher

Indexer

• 905d6f3: Implement package indexer for maven
• Fixes #236### Introspection
• 9ecfbb0: Fix a typo in the query label for the distributionbylayer metric

Libindex

• 5877dc1: set concurrency number
• 254c094: AffectedManifests to be bounded

Matcher

• 78f069b: add ability to return multiple matchers from same type

Testing

• bb26dab: add unittest
• d6d7e8e: maxConns to 10

v0.1.25 Release

Unreleased

v0.1.25 - 2021-04-16

Chore

• 6f7bc34: v0.1.25 changelog bump

Cicd

• 9ba3cdc: use git-chglog fork to sort by semver
• aaab793: sort changelog by semver

Indexer

• ed50b6a: filter scanners during manifest check

v0.4.0 Release

Unreleased

v0.4.0 - 2021-04-05

Chore

• f56014b: v0.4.0 changelog bump

Cicd

• ab1208b: update doc building to main

Docs

• 99d6eff: note default updater URLs

Introspection

• 880166b: datastore metrics

Python

• 24aad97: force re-fetch/parse
• 1f881b5: update package scanner version

Rhel

• 8cc2823: discard unaffected vulnerabilities
• ddd2621: treat vulns without FixedInVersion as unfixed