Skip to content

Commit

Permalink
Update snaps and make changelog
Browse files Browse the repository at this point in the history
  • Loading branch information
another-rex committed Feb 12, 2025
1 parent 0e95af5 commit 34ab616
Show file tree
Hide file tree
Showing 4 changed files with 68 additions and 51 deletions.
25 changes: 21 additions & 4 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
@@ -1,3 +1,20 @@
# v2.0.0-beta2

This second beta release brings a series of fixes and improvements to the previous release.

### Improvements:
- [Feature #1561](https://github.com/google/osv-scanner/pull/1561) Updated HTML report for better contrast and usability
- [Feature #1569](https://github.com/google/osv-scanner/pull/1569) Add support for bun.lock lockfiles.
- [Feature #1584](https://github.com/google/osv-scanner/pull/1584) Make skip root git repository the default behavior.
- [Feature #1547](https://github.com/google/osv-scanner/pull/1547) Add experimental config support to the image command.
- [Feature #1557](https://github.com/google/osv-scanner/pull/1557) Allow setting port number when using the `--serve` flag with the new `--port` flag.

### Fixes
- [Fix #1585](https://github.com/google/osv-scanner/pull/1585) Fixed issue where base images are occasionally duplicated.
- [Fix #1597](https://github.com/google/osv-scanner/pull/1597) Fixed issue where SBOM parsers are not correctly parsing CycloneDX files when using the `bom.xml` filename.
- [Fix #1566](https://github.com/google/osv-scanner/pull/1566) Fixed issue where offline scanning returns different results from online scanning.
- [Fix #1538](https://github.com/google/osv-scanner/pull/1538) Reduce memory usage when using guided remediation.

# v2.0.0-beta1

The first beta of OSV-Scanner V2 is here! This beta release introduces significant enhancements, including refactored dependency extraction capabilities, container image scanning, and guided remediation for Maven.
Expand All @@ -21,10 +38,10 @@ A significant new feature is a rewritten, layer-aware container scanning support
This layer analysis leverages [OSV-Scalibr](https://github.com/google/osv-scalibr), and supports the following OSes and languages:
| Distro Support | Language Artifacts Support |
| -------------- | -------------------------- |
| Alpine OS | Go |
| Debian | Java |
| Ubuntu | Node |
| | Python |
| Alpine OS | Go |
| Debian | Java |
| Ubuntu | Node |
| | Python |

Base image identification also leverages a new experimental API provided by https://deps.dev.

Expand Down
8 changes: 4 additions & 4 deletions cmd/osv-scanner/__snapshots__/main_test.snap
Original file line number Diff line number Diff line change
Expand Up @@ -95,7 +95,7 @@ Loaded filter from: <rootdir>/fixtures/locks-many/osv-scanner.toml
"informationUri": "https://github.com/google/osv-scanner",
"name": "osv-scanner",
"rules": [],
"version": "2.0.0-beta1"
"version": "2.0.0-beta2"
}
},
"results": []
Expand Down Expand Up @@ -260,7 +260,7 @@ Loaded Alpine local db from <tempdir>/osv-scanner/Alpine/all.zip
}
}
],
"version": "2.0.0-beta1"
"version": "2.0.0-beta2"
}
},
"artifacts": [
Expand Down Expand Up @@ -1090,7 +1090,7 @@ No issues found
---

[TestRun/version - 1]
osv-scanner version: 2.0.0-beta1
osv-scanner version: 2.0.0-beta2
commit: n/a
built at: n/a

Expand Down Expand Up @@ -1298,7 +1298,7 @@ Scanned <rootdir>/fixtures/locks-insecure/osv-scanner-flutter-deps.json file as
}
}
],
"version": "2.0.0-beta1"
"version": "2.0.0-beta2"
}
},
"artifacts": [
Expand Down
Loading

0 comments on commit 34ab616

Please sign in to comment.