Skip to content

Releases: defenseunicorns/lula

v0.4.2

12 Jul 19:13
08075f7
Compare
Choose a tag to compare

0.4.2 (2024-07-10)

This release fixes several bugs with the evaluate, generate, and upgrade commands, and includes several dependency updates.

Evaluate now allows for setting the threshold property to true for instances where you're running evaluate against an assessment-result that only has one result.

Generate for component-definitions now adds a text block within the component's remark field to describe how to reproduce the generation of the component.

Upgrade now handles errors for instances when the file selected does not exist. It also has the input file flag as a requirement.

Smaller changes of note, the lula.dev website codebase has been removed from the Lula repo into a dedicated repo.

Bug Fixes

  • evaluate: set threshold on single result evaluation (#519) (9424ec5)
  • generate: create annotation in remarks for how to reproduce the generation of a component (#520) (6b59daf)
  • upgrade: error handling for non-existent oscal (#529) (58c03d5)

Miscellaneous

  • deps: update actions/download-artifact action to v4.1.8 (#522) (f628db8)
  • deps: update actions/setup-go action to v5.0.2 (#530) (d6fa46e)
  • deps: update actions/setup-node action to v4.0.3 (#526) (de146f7)
  • deps: update actions/upload-artifact action to v4.3.4 (#523) (1d2334b)
  • deps: update anchore/sbom-action action to v0.16.1 (#528) (ebdf05c)
  • website: website removal (#525) (575044c)

What's Changed

  • fix(evaluate): set threshold on single result evaluation by @brandtkeller in #519
  • fix(generate): reproducing a generation annotation by @brandtkeller in #520
  • fix(upgrade): error handling for non-existent oscal by @brandtkeller in #529
  • chore(deps): update actions/download-artifact action to v4.1.8 by @renovate in #522
  • chore(deps): update actions/upload-artifact action to v4.3.4 by @renovate in #523
  • chore(deps): update actions/setup-node action to v4.0.3 by @renovate in #526
  • chore(deps): update actions/setup-go action to v5.0.2 by @renovate in #530
  • chore(deps): update anchore/sbom-action action to v0.16.1 by @renovate in #528
  • chore(website): website removal by @brandtkeller in #525
  • chore(main): release 0.4.2 by @github-actions in #512

Full Changelog: v0.4.1...v0.4.2

v0.4.1

29 Jun 21:25
292014a
Compare
Choose a tag to compare

v0.4.1 (2024-06-29)

Compare v0.4.1...v0.3.0

This release introduces the ability to create kubernetes resources for use in testing correct functionality of intended applications that monitor kubernetes resources (such as admission and mutation controllers). This is considered an "executable" validation in which Lula will prompt imperative execution to confirm

Linting has been expanded to allow for many files to be linted in a single execution using the lula tools lint -f file1,file2 or lula tools lint -f file1 -f file2 format.

A threshold prop has been added to assessment-results to aid in the discovery of required threshold for evaluate operations.

Additionally the workflow for writing any model to a file now allows for a default stance by model type as well as custom filepath/name when specified with -o filename when applicable. In order to maintain schema compliance - Lula will validate that existing files and merge operations contain the single-targeted model.

⚠ BREAKING CHANGES

  • validate: #408 create resources in kubernetes domain (#415)

Features

Bug Fixes

  • release: proper flag utilization (#511) (ecefd9a)
  • commitlint: pinned dependency issue by extracting into package(-… (#454) (17ac8ca)
  • evaluate: add support for existing control-id becoming satisfied (#498) (471e9c5)
  • evaluate: establish threshold for assessment results result (#457) (4571cb8)
  • generate: resolve parent flag options properly (#442) (5850115)
  • oscal: single model write operations support (#502) (3646650)
  • validate: fix related observations when empty (#448) (f6f6993)

Miscellaneous

  • actions: fix code scanning alerts (#446) (aa568c7)
  • deps: add tag to release please action (#496) (3596491)
  • deps: update actions/checkout action to v4.1.7 (#479) (962fd2f)
  • deps: update dependency linkinator to v6.0.5 (#458) (dfa1cbe)
  • deps: update dependency markdownlint-cli to v0.41.0 (#443) (27c0e94)
  • deps: update dependency prettier to v3.3.1 (#459) (c999b78)
  • deps: update github/codeql-action action to v3.25.10 (#476) (e2e74eb)
  • deps: update github/codeql-action action to v3.25.7 (#452) (2583eea)
  • deps: update github/codeql-action action to v3.25.8 (#463) (0e7f844)
  • deps: update googleapis/release-please-action digest to 7987652 (#472) (d50b034)
  • deps: update goreleaser/goreleaser-action action to v6 (#464) (e74b9d5)
  • deps: update kubernetes packages to v0.30.2 (#477) (679d2c8)
  • deps: update module github.com/defenseunicorns/go-oscal to v0.4.3 (#470) (5c78254)
  • deps: update module github.com/defenseunicorns/go-oscal to v0.5.0 (#492) (c5d128f)
  • deps: update module github.com/kyverno/kyverno-json to v0.0.3 (#453) (1dc96e8)
  • deps: update module github.com/open-policy-agent/opa to v0.65.0 (#451) (7867a3c)
  • deps: update module github.com/open-policy-agent/opa to v0.66.0 (#505) (7692e33)
  • deps: update module github.com/spf13/cobra to v1.8.1 (#485) (aaeba70)
  • docs: cleanup unused readme conflicting in docs build (#489) (19a3f61)
  • docs: re-organize docs for docs website consumption (#495) (24c24f0)
  • fix documentation links (#487) (4f96ec5)

v0.4.0

29 Jun 04:05
4cff78b
Compare
Choose a tag to compare

v0.4.0 (2024-06-28)

Warning

Issue with release workflow updates - Use v0.4.1

This release introduces the ability to create kubernetes resources for use in testing correct functionality of intended applications that monitor kubernetes resources (such as admission and mutation controllers).

Linting has been expanded to allow for many files to be linted in a single execution using the lula tools lint -f file1,file2 or lula tools lint -f file1 -f file2 format.

Additionally a threshold prop has been added to assessment-results to aid in the discovery of required threshold for evaluate operations.

⚠ BREAKING CHANGES

  • validate: #408 create resources in kubernetes domain (#415)

Features

Bug Fixes

  • commitlint: pinned dependency issue by extracting into package(-… (#454) (17ac8ca)
  • evaluate: add support for existing control-id becoming satisfied (#498) (471e9c5)
  • evaluate: establish threshold for assessment results result (#457) (4571cb8)
  • generate: resolve parent flag options properly (#442) (5850115)
  • oscal: single model write operations support (#502) (3646650)
  • validate: fix related observations when empty (#448) (f6f6993)

Miscellaneous

  • actions: fix code scanning alerts (#446) (aa568c7)
  • deps: add tag to release please action (#496) (3596491)
  • deps: update actions/checkout action to v4.1.7 (#479) (962fd2f)
  • deps: update dependency linkinator to v6.0.5 (#458) (dfa1cbe)
  • deps: update dependency markdownlint-cli to v0.41.0 (#443) (27c0e94)
  • deps: update dependency prettier to v3.3.1 (#459) (c999b78)
  • deps: update github/codeql-action action to v3.25.10 (#476) (e2e74eb)
  • deps: update github/codeql-action action to v3.25.7 (#452) (2583eea)
  • deps: update github/codeql-action action to v3.25.8 (#463) (0e7f844)
  • deps: update googleapis/release-please-action digest to 7987652 (#472) (d50b034)
  • deps: update goreleaser/goreleaser-action action to v6 (#464) (e74b9d5)
  • deps: update kubernetes packages to v0.30.2 (#477) (679d2c8)
  • deps: update module github.com/defenseunicorns/go-oscal to v0.4.3 (#470) (5c78254)
  • deps: update module github.com/defenseunicorns/go-oscal to v0.5.0 (#492) (c5d128f)
  • deps: update module github.com/kyverno/kyverno-json to v0.0.3 (#453) (1dc96e8)
  • deps: update module github.com/open-policy-agent/opa to v0.65.0 (#451) (7867a3c)
  • deps: update module github.com/open-policy-agent/opa to v0.66.0 (#505) (7692e33)
  • deps: update module github.com/spf13/cobra to v1.8.1 (#485) (aaeba70)
  • docs: cleanup unused readme conflicting in docs build (#489) (19a3f61)
  • docs: re-organize docs for docs website consumption (#495) (24c24f0)
  • fix documentation links (#487) (4f96ec5)

v0.3.0

24 May 19:41
5ff3370
Compare
Choose a tag to compare

0.3.0 (2024-05-24)

This release focuses on development workflows for validations as well as the initial capability to generate OSCAL artifacts. Components now allow being composed using external validations and/or import using the import-component-definitions field.

⚠ BREAKING CHANGES

  • #388 update types to use pointers (#410)
  • #367 compiling external/remote validations (#384)

refactor

Features

  • #367 compiling external/remote validations (#384) (8bb42b0)
  • oscal: merge on write consolidation (#407) (ef2f9f5)
  • compose: add ability to pull and compose import component defs (#406) (ddf919a)
  • generate: add generate command and initial component generation (#401) (918299a)
  • dev: added Observation logging to dev validate (#396) (c32027e)
  • dev: dev validate with optional resources file input (#394) (f034a97)
  • validate: validation store/cache (#373) (751982f)

Bug Fixes

  • deps: consolidate use of goyaml pkg (#422) (d1abbcc)
  • deps: controller runtime (#379) (7d3aec3)
  • dev: updated result condition to match satisfaction logic (#400) (5feda9d)
  • validate: validation errors mapped to observations (#405) (39e5ebd)
  • validate: fix order of assessment-results results (#437) (a8db208)

Miscellaneous

  • actions: #420 update release process with release-please (#421) (a372df0)
  • deps: bump golang.org/x/net from 0.22.0 to 0.23.0 (#378) (8088bd0)
  • deps: Update actions/checkout action to v4.1.3 (#382) (08eed39)
  • deps: Update actions/download-artifact action to v4.1.6 (#376) (2982b36)
  • deps: Update actions/download-artifact action to v4.1.7 (#387) (92064e6)
  • deps: Update actions/upload-artifact action to v4.3.2 (#377) (f575f82)
  • deps: Update actions/upload-artifact action to v4.3.3 (#383) (26f1f32)
  • deps: update anchore/sbom-action action to v0.16.0 (#426) (a2063a5)
  • deps: update github/codeql-action action to v3.25.6 (#425) (9ef1703)
  • deps: update golang to version 1.22.3 (#423) (aa8cab7)
  • deps: update kubernetes packages to v0.30.1 (#417) (e47a04d)
  • deps: Update module github.com/defenseunicorns/go-oscal to v0.3.2 (#380) (03aa969)
  • deps: update module github.com/defenseunicorns/go-oscal to v0.4.0 (#429) (4ff7775)
  • deps: update module github.com/defenseunicorns/go-oscal to v0.4.1 (#435) (4570658)
  • deps: update module github.com/hashicorp/go-version to v1.7.0 (#438) (4f6de9b)
  • deps: update module sigs.k8s.io/e2e-framework to v0.4.0 (#419) (890a7d8)
  • renovate: update config to handle conventional commit titles (#428) (5f4139a)

What's Changed

Read more

v0.2.1

16 Apr 19:01
v0.2.1
59e1799
Compare
Choose a tag to compare

What's Changed

Another release packed full of updates. This release focuses on refactoring the validation structure and solidifying foundations around intended workflow and separation between OSCAL functionality and Validation functionality.

Note: There are breaking changes - which are currently to be expected as Lula is no yet generally-available - More discovery and learning to do!

This release also includes the support of Kyverno as a provider for evaluation of policy against data collected for adherence review.

Features

Fixes

Documentation

Chores

Dependency Updates

  • deps Update dependency hugo-extended to ^0.124.0 by @renovate in #323
  • deps Update anchore/sbom-action action to v0.15.10 by @renovate in #334
  • deps(go-oscal): upgrade to v0.3.0 by @mike-winberry in #317
  • deps Update module github.com/defenseunicorns/go-oscal to v0.3.1 by @renovate in #351
  • deps Update module github.com/open-policy-agent/opa to v0.63.0 by @renovate in #338
  • deps Update dependency go to v1.22.2 by @renovate in #355
  • deps Update module sigs.k8s.io/controller-runtime to v0.17.3 by @renovate in #359
  • deps Update github/codeql-action action to v3.24.10 by @renovate in #316

New Contributors

Full Changelog: v0.1.0...v0.2.1

v0.1.0

18 Mar 17:32
v0.1.0
6b6fe14
Compare
Choose a tag to compare

What's Changed

This release comes after organizing a team around the project and much discovery in the world of compliance automation.

Features

Fixes

Documentation

Dependency Updates
  • deps Upgrade go-oscal package. by @mike-winberry in #283
  • deps Update dependency linkinator to v6.0.4 by @renovate in #212
  • deps Update dependency prettier to v3.2.2 by @renovate in #213
  • deps Update module sigs.k8s.io/controller-runtime to v0.17.0 by @renovate in #214
  • deps Update dependency prettier to v3.2.4 by @renovate in #215
  • deps Update kubernetes packages to v0.29.1 by @renovate in #219
  • deps Update module github.com/pterm/pterm to v0.12.75 by @renovate in #218
  • deps Update dependency autoprefixer to v10.4.17 by @renovate in #216
  • deps Update actions/upload-artifact action to v4.2.0 by @renovate in #221
  • deps Update anchore/sbom-action action to v0.15.4 by @renovate in #220
  • deps Update github/codeql-action action to v3.23.1 by @renovate in #217
  • deps Update anchore/sbom-action action to v0.15.5 by @renovate in #224
  • deps Update module github.com/open-policy-agent/opa to v0.61.0 by @renovate in #231
  • deps Update module github.com/pterm/pterm to v0.12.76 by @renovate in #227
  • deps Update github/codeql-action action to v3.23.2 by @renovate in #233
  • deps Update actions/upload-artifact action to v4.3.0 by @renovate in #225
  • deps Update anchore/sbom-action action to v0.15.6 by @renovate in #236
  • deps Update dependency markdownlint-cli to v0.39.0 by @renovate in #235
  • deps Update anchore/sbom-action action to v0.15.7 by @renovate in #238
  • deps Update dependency hugo-extended to ^0.122.0 by @renovate in #234
  • deps Update dependency @taplo/cli to ^0.7.0 by @renovate in #240
  • deps Update anchore/sbom-action action to v0.15.8 by @renovate in #239
  • deps Update module github.com/pterm/pterm to v0.12.77 by @renovate in #241
  • deps Update github/codeql-action action to v3.24.0 by @renovate in #242
  • deps Update dependency prettier to v3.2.5 by @renovate in #243
  • deps Update module github.com/pterm/pterm to v0.12.78 by @renovate in #244
  • deps Update actions/download-artifact action to v4.1.2 by @renovate in #245
  • deps Update actions/upload-artifact action to v4.3.1 by @renovate in #246
  • Updating codeowner files to be more granular by @brandtkeller in #250
  • deps Update module sigs.k8s.io/controller-runtime to v0.17.1 by @renovate in #251
  • deps Update module github.com/pterm/pterm to v0.12.79 by @renovate in #252
  • deps Update github/codeql-action action to v3.24.1 by @renovate in #256
  • deps Update dependency go to v1.22.0 by @renovate in #248
  • deps Update github/codeql-action action to v3.24.3 by @renovate in #259
  • deps Update kubernetes packages to v0.29.2 by @renovate in #258
  • deps Update module sigs.k8s.io/controller-runtime to v0.17.2 by @renovate in #260
  • deps Update github/codeql-action action to v3.24.4 by @renovate in #266
  • deps Update dependency hugo-extended to ^0.123.0 by @renovate in #264
  • deps Update github/codeql-action action to v3.24.5 by @renovate in #268
  • deps Update actions/download-artifact action to v4.1.3 by @renovate in #277
  • deps Update dependency hugo-extended to v0.123.6 by @renovate in #269
  • deps Update module github.com/open-policy-agent/opa to v0.62.0 by @renovate in #282
  • deps Update github/codeql-action action to v3.24.6 by @renovate in #279
  • deps Update actions/download-artifact action to v4.1.4 by @renovate in #286
  • deps Update anchore/sbom-action action to v0.15.9 by @renovate in #291
  • deps Update module github.com/open-policy-agent/opa to v0.62.1 by @renovate in #293
  • deps Update dependency hugo-extended to v0.123.7 by @renovate in #288
  • deps Update dependency autoprefixer to v10.4.18 by @renovate in #287
  • deps Update dependency go to v1.22.1 by @renovate in #303
  • deps Update github/codeql-action action to v3.24.7 by @renovate in #304
  • deps Update kubernetes packages to v0.29.3 by @renovate in #314

New Contributors

Full Changelog: v0.0.2...v0.1.0

v0.0.2

13 Jan 03:20
v0.0.2
b2484eb
Compare
Choose a tag to compare

What's Changed

  • deps Update dependency go to v1.21.6 by @renovate in #198
  • deps Update actions/download-artifact action to v4.1.1 by @renovate in #199
  • fix: 197 add input-file flag validation for validate command by @kislerdm in #205
  • Fix: assessment result file provenance by @brandtkeller in #209
  • deps Update actions/upload-artifact action to v4.1.0 by @renovate in #207
  • deps Update dependency prettier to v3.2.1 by @renovate in #208
  • fix: add detection/error for inability to connect to cluster by @brandtkeller in #211

New Contributors

Full Changelog: v0.0.1...v0.0.2

v0.0.1

08 Jan 23:58
v0.0.1
781edf4
Compare
Choose a tag to compare

What's Changed

Read more