v0.15.6

Changelog

v0.15.4

Changelog

• 7d53816 feat(trivy): configure --db-repository to get advisory database from OCI registry (#1064)
• 07818de chore(ci): fix release snapshot workflow (#1124)
• 6abccd0 chore(ci): grant contents permission in docs publishing workflow (#1121)
• 09a1a9b chore(deps): bump actions/setup-go from 2 to 3 (#1130)
• fe0c18f chore(deps): bump actions/setup-python from 3.1.0 to 3.1.2 (#1129)
• 9519929 chore(deps): bump codecov/codecov-action from 2 to 3 (#1128)
• d3072b5 chore(deps): bump github.com/emirpasic/gods from 1.12.0 to 1.15.0 (#1132)
• 7562f68 chore: build operator images based on UBI 8 Minimal (#1127)
• 254d1c0 chore: fix Go code formatting (#1137)
• 92124cd fix: GoReleaser manifest (#1135)

Docker Images

• docker pull docker.io/aquasec/starboard:0.15.4
• docker pull docker.io/aquasec/starboard-scanner-aqua:0.15.4
• docker pull docker.io/aquasec/starboard-operator:0.15.4
• docker pull docker.io/aquasec/starboard-operator:0.15.4-ubi8

v0.15.3

Changes

• 8995fb7 fix: critial is a typo (#1117)
• cb5f3b3 fix: limit the num of failure entries in compliance detail report (#1108)
• 4ab64f9 chore(ci): cancel any in-flight jobs for the same PR branch (#1116)
• f3408a9 chore(ci): set permissions granted to the GITHUB_TOKEN (#1119)
• c2d206a chore(deps): bump actions/setup-python from 3.0.0 to 3.1.0 (#1109)
• 38a0b16 chore(deps): bump github.com/open-policy-agent/opa from 0.38.1 to 0.39.0 (#1111)
• c314e34 chore(deps): bump sigs.k8s.io/controller-runtime from 0.11.1 to 0.11.2 (#1110)

Docker Images

• docker pull docker.io/aquasec/starboard:0.15.3
• docker pull docker.io/aquasec/starboard-scanner-aqua:0.15.3
• docker pull docker.io/aquasec/starboard-operator:0.15.3

v0.15.2

Changes

• cb5f3b3 fix: limit the num of failure entries in compliance detail report (#1108)
• c2d206a chore(deps): bump actions/setup-python from 3.0.0 to 3.1.0 (#1109)
• 38a0b16 chore(deps): bump github.com/open-policy-agent/opa from 0.38.1 to 0.39.0 (#1111)
• c314e34 chore(deps): bump sigs.k8s.io/controller-runtime from 0.11.1 to 0.11.2 (#1110)

Docker Images

• docker pull docker.io/aquasec/starboard:0.15.2
• docker pull docker.io/aquasec/starboard-scanner-aqua:0.15.2
• docker pull docker.io/aquasec/starboard-operator:0.15.2

v0.15.1

Changes

• 1c26090 chore: add log context when nsa update fails (#1104)
• 45acabb fix: krew manifest (#1091)
• ac710b6 fix: revert CronJobs to batch/v1beta1 (#1105)

Docker Images

• docker pull docker.io/aquasec/starboard:0.15.1
• docker pull docker.io/aquasec/starboard-scanner-aqua:0.15.1
• docker pull docker.io/aquasec/starboard-operator:0.15.1

v0.15.0

Noteworthy Changes

• New OPA Rego policy-based configuration audit scanner enabled by default
  • The scanner is shipped with Built-in Policies library
  • It also allows Writing Custom Configuration Audit Policies
• Support for NSA, CISA Kubernetes Hardening Guidance
  • New ClusterComplianceReport CRD to define custom compliance reports generated on cron schedule
• Support for ARM architecture

Docker Images

• docker pull docker.io/aquasec/starboard:0.15.0
• docker pull docker.io/aquasec/starboard-scanner-aqua:0.15.0
• docker pull docker.io/aquasec/starboard-operator:0.15.0

New Contributors

• @chen-keinan made their first contribution in #958
• @skuethe made their first contribution in #960
• @jw-s made their first contribution in #956
• @eranshapira made their first contribution in #989
• @dirien made their first contribution in #1003
• @AnaisUrlichs made their first contribution in #1082

Full Changelog: v0.14.1...v0.15.0

v0.15.0-rc7

Docker images

• docker pull docker.io/aquasec/starboard:0.15.0-rc7
• docker pull docker.io/aquasec/starboard-scanner-aqua:0.15.0-rc7
• docker pull docker.io/aquasec/starboard-operator:0.15.0-rc7

v0.15.0-rc6

Docker images

• docker pull docker.io/aquasec/starboard:0.15.0-rc6
• docker pull docker.io/aquasec/starboard-scanner-aqua:0.15.0-rc6
• docker pull docker.io/aquasec/starboard-operator:0.15.0-rc6

v0.14.1

Changelog

• 329c812 fix: handle error when operator cannot start (#930)
• 934e0bd feat: use trivy filesystem scanner (#872)
• e6717c6 chore(deps): bump Go from 1.16 to 1.17 (#928)
• ac8b74c chore(deps): bump Trivy from v0.20.0 to v0.22.0 (#931)
• c18a53e chore(deps): bump controller-runtime from v0.10.0 to v0.11.0 (#927)
• 8cf6936 chore(deps): bump github.com/onsi/gomega from 1.17.0 to 1.18.0 (#920)

Docker images

• docker pull docker.io/aquasec/starboard:0.14.1
• docker pull public.ecr.aws/aquasecurity/starboard:0.14.1
• docker pull docker.io/aquasec/starboard-scanner-aqua:0.14.1
• docker pull public.ecr.aws/aquasecurity/starboard-scanner-aqua:0.14.1
• docker pull docker.io/aquasec/starboard-operator:0.14.1
• docker pull public.ecr.aws/aquasecurity/starboard-operator:0.14.1

v0.14.0

Changelog

• 8b46e5b fix: trivy uses deprecated subcommand (#891)
• b8d8568 fix: typo in GetLogsByJobAndContainerName error message (#869)
• c384c33 feat(helm): make .trivyignore file a configurable value (#885)
• 5ab3973 feat: add TRIVY_NON_SSL config and environment variable (#854)
• 53b6ca8 feat: allow scanning only current revision of deployment (#870)
• ab3974f feat: vulnerability rescan of K8s workloads based on report TTL (#879)
• b2a8c0d feat: allow configuring pod template labels attached to scan jobs (#902)
• 3d0417d refactor: pass client.Object instead of PodSpec to vulnerabilityreport.Plugin (#894)
• e353bb3 refactor: rename kube.Object to kube.ObjectRef (#890)
• 3708c8f refactor: review and cleanup starboard config package (#904)
• 8f637cf chore(ci): test Helm chart in the PR validation workflow (#829)
• 80e50c1 chore(deps): bump actions/setup-python from 2 to 2.3.1 (#896)
• df182b7 chore(deps): bump github.com/caarlos0/env/v6 from 6.8.0 to 6.9.1 (#881)
• 48a5371 chore(deps): bump github.com/google/go-containerregistry (#897)
• 955a527 chore(deps): bump github.com/hashicorp/go-version from 1.3.0 to 1.4.0 (#898)
• f2ba77b chore(deps): bump github.com/spf13/cobra from 1.2.1 to 1.3.0 (#876)
• 4cc5b63 chore(deps): bump helm/chart-testing-action from 2.1.0 to 2.2.0 (#895)
• b4ec2c2 chore: describe release steps (#883)
• 6294d9e chore: scan images for vulnerabilities (#907)

Docker images

• docker pull docker.io/aquasec/starboard:0.14.0
• docker pull public.ecr.aws/aquasecurity/starboard:0.14.0
• docker pull docker.io/aquasec/starboard-scanner-aqua:0.14.0
• docker pull public.ecr.aws/aquasecurity/starboard-scanner-aqua:0.14.0
• docker pull docker.io/aquasec/starboard-operator:0.14.0
• docker pull public.ecr.aws/aquasecurity/starboard-operator:0.14.0