v0.0.2

[lukehinds]

What's Changed

• build(deps): bump slsa-framework/slsa-github-generator from 1.8.0 to 1.9.0 by @dependabot in build(deps): bump slsa-framework/slsa-github-generator from 1.8.0 to 1.9.0 #757
• rule_type create: Add option to create multiple rule types at once or read all filed in directory by @JAORMX in rule_type create: Add option to create multiple rule types at once or read all filed in directory #748
• Auto-generated cli documentation update - 2023-08-25 13:04:37 by @github-actions in Auto-generated cli documentation update - 2023-08-25 13:04:37 #759
• remove unused internal/engine/entities.go by @jhrozek in remove unused internal/engine/entities.go #762
• Update Epic template to remove SaaS engineering section by @dussab in Update Epic template to remove SaaS engineering section #763
• Split rule type format to show explicit ingestion and evaluation by @JAORMX in Split rule type format to show explicit ingestion and evaluation #758
• build(deps): bump slsa-framework/slsa-verifier from 2.3.0 to 2.4.0 by @dependabot in build(deps): bump slsa-framework/slsa-verifier from 2.3.0 to 2.4.0 #769
• build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.17.0 to 2.17.1 by @dependabot in build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.17.0 to 2.17.1 #768
• build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.17.0 to 2.17.1 in /tools by @dependabot in build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.17.0 to 2.17.1 in /tools #770
• Update docs with new rule type syntax by @JAORMX in Update docs with new rule type syntax #767
• small refactor: Move files around for testability by @JAORMX in small refactor: Move files around for testability #771
• engine: Handle skipped rules and silent skips by @JAORMX in engine: Handle skipped rules and silent skips #776
• .gitignore: Ignore test coverage file by @JAORMX in .gitignore: Ignore test coverage file #774
• util: Use dedicated test package for unit tests by @JAORMX in util: Use dedicated test package for unit tests #772
• build(deps): bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc from 0.42.0 to 0.43.0 by @dependabot in build(deps): bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc from 0.42.0 to 0.43.0 #779
• build(deps): bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace from 1.16.0 to 1.17.0 by @dependabot in build(deps): bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace from 1.16.0 to 1.17.0 #780
• build(deps): bump github.com/go-playground/validator/v10 from 10.15.1 to 10.15.2 by @dependabot in build(deps): bump github.com/go-playground/validator/v10 from 10.15.1 to 10.15.2 #782
• util: Add test coverage for JSON/YAML utilities by @JAORMX in util: Add test coverage for JSON/YAML utilities #773
• build(deps): bump go.opentelemetry.io/otel/sdk/metric from 0.39.0 to 0.40.0 by @dependabot in build(deps): bump go.opentelemetry.io/otel/sdk/metric from 0.39.0 to 0.40.0 #781
• build(deps): bump mobx from 6.10.0 to 6.10.1 in /docs by @dependabot in build(deps): bump mobx from 6.10.0 to 6.10.1 in /docs #789
• build(deps): bump go.opentelemetry.io/otel/exporters/prometheus from 0.39.0 to 0.40.0 by @dependabot in build(deps): bump go.opentelemetry.io/otel/exporters/prometheus from 0.39.0 to 0.40.0 #790
• build(deps): bump github.com/go-playground/validator/v10 from 10.15.2 to 10.15.3 by @dependabot in build(deps): bump github.com/go-playground/validator/v10 from 10.15.2 to 10.15.3 #791
• Improve artifact support by storing artifact_id in the rule evaluation table and store artifact information during webhook processing by @jhrozek in Improve artifact support by storing artifact_id in the rule evaluation table and store artifact information during webhook processing #760
• Auto-generated DB schema update - 2023-08-30 09:22:38 by @github-actions in Auto-generated DB schema update - 2023-08-30 09:22:38 #792
• Increase timeout for syncing repositories by @JAORMX in Increase timeout for syncing repositories #788
• engine: Add rego evaluation engine by @JAORMX in engine: Add rego evaluation engine #784
• Use IS NOT DISTINCT FROM for comparing rule eval status on upsert by @JAORMX in Use IS NOT DISTINCT FROM for comparing rule eval status on upsert #799
• Add guidance to rule types by @JAORMX in Add guidance to rule types #797
• Auto-generated DB schema update - 2023-08-30 16:06:13 by @github-actions in Auto-generated DB schema update - 2023-08-30 16:06:13 #802
• build(deps): bump github.com/open-policy-agent/opa from 0.52.0 to 0.55.0 by @dependabot in build(deps): bump github.com/open-policy-agent/opa from 0.52.0 to 0.55.0 #809
• Use a generic version of JQ accessor, called JQGetTypedFromAccessor to parse GitHub payload by @jhrozek in Use a generic version of JQ accessor, called JQGetTypedFromAccessor to parse GitHub payload #801
• engine: Make ErrEvaluationSkipSilently not so silent by @JAORMX in engine: Make ErrEvaluationSkipSilently not so silent #803
• Adjust group.order so that PI can claim URLs in the same host by @evankanderson in Adjust group.order so that PI can claim URLs in the same host #815
• repositories: Add clone URL to data we track by @JAORMX in repositories: Add clone URL to data we track #793
• Auto-generated DB schema update - 2023-08-31 17:21:34 by @github-actions in Auto-generated DB schema update - 2023-08-31 17:21:34 #816
• handlers_policy: return more information on artifacts by @jhrozek in handlers_policy: return more information on artifacts #812
• containers: Suppress error message when trying to fetch signatures by @jhrozek in containers: Suppress error message when trying to fetch signatures #811
• build(deps): bump github.com/open-policy-agent/opa from 0.55.0 to 0.56.0 by @dependabot in build(deps): bump github.com/open-policy-agent/opa from 0.55.0 to 0.56.0 #818
• build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.18.37 to 1.18.38 by @dependabot in build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.18.37 to 1.18.38 #821
• build(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.0 by @dependabot in build(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.0 #820
• build(deps): bump mobx from 6.10.1 to 6.10.2 in /docs by @dependabot in build(deps): bump mobx from 6.10.1 to 6.10.2 in /docs #822
• tests: Add a test to initialize the artifact ingester by @jhrozek in tests: Add a test to initialize the artifact ingester #823
• Add git ingester by @JAORMX in Add git ingester #775
• Putting it all together: Enables us to run rego rules on git contents by @JAORMX in Putting it all together: Enables us to run rego rules on git contents #825
• build(deps): bump github.com/sigstore/sigstore from 1.7.2 to 1.7.3 by @dependabot in build(deps): bump github.com/sigstore/sigstore from 1.7.2 to 1.7.3 #828
• build(deps): bump golang.org/x/term from 0.11.0 to 0.12.0 by @dependabot in build(deps): bump golang.org/x/term from 0.11.0 to 0.12.0 #827
• rego: Introduce file.ls which allows us to list files by @JAORMX in rego: Introduce file.ls which allows us to list files #829
• builtin: Return evalerrors.ErrEvaluationSkipSilently in case the builtin evaluator doesn't match the entity by @jhrozek in builtin: Return evalerrors.ErrEvaluationSkipSilently in case the builtin evaluator doesn't match the entity #800
• Return why an artifact was skipped from the artifact ingester by @jhrozek in Return why an artifact was skipped from the artifact ingester #810
• Remove pr-size action by @lukehinds in Remove pr-size action #840
• fix: use consistent sql.ErrNoRow error comparision by @rdimitrov in fix: use consistent sql.ErrNoRow error comparision #832
• Implements Dependabot Checks by @lukehinds in Implements Dependabot Checks #843
• build(deps): bump actions/checkout from 3 to 4 by @dependabot in build(deps): bump actions/checkout from 3 to 4 #849
• Policy to verify actions are pinned to sha1 by @lukehinds in Policy to verify actions are pinned to sha1 #845
• tools: Add setup.sh script by @JAORMX in tools: Add setup.sh script #853
• refactor: Move webhook event parsing logic to webhook handler by @JAORMX in refactor: Move webhook event parsing logic to webhook handler #841
• dev: Add log message when rule violation happens by @JAORMX in dev: Add log message when rule violation happens #854
• cleanup: Remove commented out entries from policy by @JAORMX in cleanup: Remove commented out entries from policy #851
• cleanup: remove unnecessary checkups from rule by @JAORMX in cleanup: remove unnecessary checkups from rule #852
• Add policy init and reconcile policy support for artifacts by @jhrozek in Add policy init and reconcile policy support for artifacts #844
• Auto-generated cli documentation update - 2023-09-05 16:39:02 by @github-actions in Auto-generated cli documentation update - 2023-09-05 16:39:02 #855
• rules: Fix actions_check_pinned_tags rule by @JAORMX in rules: Fix actions_check_pinned_tags rule #857
• Fix migratedown target by @eleftherias in Fix migratedown target #858
• Avoid log spam on CheckHealth by @evankanderson in Avoid log spam on CheckHealth #864
• build(deps): bump golang.org/x/tools from 0.12.0 to 0.13.0 in /tools by @dependabot in build(deps): bump golang.org/x/tools from 0.12.0 to 0.13.0 in /tools #866
• build(deps): bump github.com/daixiang0/gci from 0.11.0 to 0.11.1 in /tools by @dependabot in build(deps): bump github.com/daixiang0/gci from 0.11.0 to 0.11.1 in /tools #867
• build(deps): bump golang.org/x/crypto from 0.12.0 to 0.13.0 by @dependabot in build(deps): bump golang.org/x/crypto from 0.12.0 to 0.13.0 #868
• build(deps): bump golang.org/x/oauth2 from 0.11.0 to 0.12.0 by @dependabot in build(deps): bump golang.org/x/oauth2 from 0.11.0 to 0.12.0 #869
• build(deps): bump github.com/ThreeDotsLabs/watermill from 1.3.3 to 1.3.4 by @dependabot in build(deps): bump github.com/ThreeDotsLabs/watermill from 1.3.3 to 1.3.4 #870
• build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.18.38 to 1.18.39 by @dependabot in build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.18.38 to 1.18.39 #871
• rego: Fix constraints evaluation type and prettify result by @JAORMX in rego: Fix constraints evaluation type and prettify result #863
• medev: a CLI tool to work with mediator by @JAORMX in medev: a CLI tool to work with mediator #865
• Handle type cast errors by @eleftherias in Handle type cast errors #850
• Auto-generated cli documentation update - 2023-09-06 16:08:57 by @github-actions in Auto-generated cli documentation update - 2023-09-06 16:08:57 #877

New Contributors

• @rdimitrov made their first contribution in fix: use consistent sql.ErrNoRow error comparision #832
• @eleftherias made their first contribution in Fix migratedown target #858

Full Changelog: v0.0.1...v0.0.2

---

This discussion was created from the release v0.0.2.