- Create a new check which makes sure that certain labels are overridden in layered images.
- Certain remote API calls are now being retried - this should help in environments where network is unreliable.
- Python 2 is now completely unsupported.
- A bunch of usability issues: when things go wrong, colin should not produce more helpful error messages and logs.
- Fix metadata checks (ENV, USER) for podman images.
- Fix Fedora packaging. (Conu was temporarily removed from requirements.)
- Documentation updated.
- Remove support for Python 2.
- You can configure timeout for checks now:
- This can be done via CLI or add
timeout: <seconds>
to a check in a ruleset. - Default timeout is set to 10 minutes.
- This can be done via CLI or add
- Checks can be skipped via CLI option
--skip
.
- Colin searches a value in label now instead of matching it using a regex.
- Output a sensible error message when the check code cannot be found.
- Handle the situation when the instruction FROM is missing in testing image tag.
- Allow setting CLI options via environment variables
- Allow loading rulesets from virtualenv
- Add info subcommand
- switch from docker to podman, thanks to @lachmanfrantisek
- remove
container
target type - new cli arg: target type (defaults to image -- for podman)
- add
ostree
target, thanks to @TomasTomecek - use fmf format in checks, thanks to @jscotka
- allow rulesets in the YAML format, thanks to @SkullTech
- many code style fixes
- use Centos CI, thanks to @jpopelka
- better loading of the ruleset files (subdir -> user -> system), thanks to @SkullTech
- check existence of json output file directory
- simpler loading of checks
- tinker CONTRIBUTING.md
- do not mount whole FS when checking for files
- improve tests quality
Welcome to the first official release of colin. With 0.0.*
releases we tried to iterate on a minimal viable product and with this 0.1.0
release we believe it's finally here.
- Validate a selected artifact against a ruleset.
- Artifacts can be container images, containers and dockerfiles.
- We provide a default ruleset we believe every container should satisfy.
- There is a ruleset to validate an artifact whether it complies to Fedora Container Guidelines
- Colin can list available rulesets and list checks in a ruleset.
- There is a python API available
- Colin can be integrated into your workflow easily - it can provide results in json format.