v2.7.3

What's Changed

• feat(slack): new workflow inputs by @adamdehaven in #163

Full Changelog: v2...v2.7.3

v2.7.2

What's Changed

• fix: success not status by @adamdehaven in #162

Full Changelog: v2...v2.7.2

v2.7.1

What's Changed

• fix(slack): flip failure message by @adamdehaven in #161

Full Changelog: v2...v2.7.1

v2.7.0

What's Changed

• feat: slack workflow conclusion notifications by @adamdehaven in #160

Full Changelog: v2...v2.7.0

v2.6.0

What's Changed

• feat(lua-lint): Add inputs.print_results to lua-lint action. by @monaka in #149
• github-actions(deps): bump anchore/sbom-action from 0.17.1 to 0.17.2 in /security-actions/sca by @dependabot in #146
• github-actions(deps): bump anchore/scan-action from 4.1.1 to 4.1.2 in /security-actions/sca by @dependabot in #145
• github-actions(deps): bump anchore/scan-action from 4.1.1 to 4.1.2 in /security-actions/scan-docker-image by @dependabot in #143
• github-actions(deps): bump anchore/sbom-action from 0.17.1 to 0.17.2 in /security-actions/scan-docker-image by @dependabot in #144
• github-actions(deps): bump docker/login-action from 3.1.0 to 3.3.0 in /security-actions/sign-docker-image by @dependabot in #133
• feat(SEC-1211): update semgrep version by @pankajmouriyakong in #154
• feat: input to skip Trivy scan by @pankajmouriyakong in #156

New Contributors

• @monaka made their first contribution in #149

Full Changelog: v2.5.1...v2.6.0

v2.5.1

What's Changed

• Defaulting to use grype cdn and skip cache by default by @saisatishkarra in #152

Full Changelog: v2.5.0...v2.5.1

v2.5.0

What's Changed

• fix: omitted severity flags in docker image scan action by @pankajmouriyakong in #142
• SEC-1176 - Option to skip Grype DB caching and tradeoff to use Grype CDN by @pankajmouriyakong in #148

New Contributors

• @pankajmouriyakong made their first contribution in #142

Full Changelog: v2...v2.5.0

v2.4.1

What's Changed

• save grype db cache on updates to avoid using stale cache db by @saisatishkarra in #147
• fix grype cache save and avoid marking cache as readonly by @saisatishkarra in 7ef70a7
• use temporary cache key and restore keys for grype cache by @saisatishkarra in 9570979
• Avoid same cache key overwrite issues when saving cache on multiple invocations by @saisatishkarra in 20348b7
• fix grype db logging condition by @saisatishkarra in 5c685ec

Full Changelog: v2...v2.4.1

v2.4.0

What's Changed

• github-actions(deps): bump anchore/scan-action from 3.6.4 to 4.1.1 in /security-actions/sca by @dependabot in #138
• github-actions(deps): bump anchore/scan-action from 3.6.4 to 4.1.1 in /security-actions/scan-docker-image by @dependabot in #136
• github-actions(deps): bump anchore/sbom-action from 0.16.0 to 0.17.1 in /security-actions/sca by @dependabot in #139
• github-actions(deps): bump anchore/sbom-action from 0.16.0 to 0.17.1 in /security-actions/scan-docker-image by @dependabot in #137
• github-actions(deps): bump docker/login-action from 3.1.0 to 3.2.0 in /security-actions/sign-docker-image by @dependabot in #124
• github-actions(deps): bump sigstore/cosign-installer from 3.5.0 to 3.6.0 in /security-actions/sign-docker-image by @dependabot in #135
• Run CVE analysis when DB cache or upstream cdn is live by @saisatishkarra in #141

Full Changelog: v2.3.0...v2.4.0

v2.3.0

What's Changed

• Bump sbom-action from v.0.15.11 to v0.16.0 by @saisatishkarra in #123

Full Changelog: v2.2.3...v2.3.0