- chore: Set result in github summary default to true (#81) (Lei Jin)(a14f2af)
- fix: remove tests folder (#72) (Pengyuan Zhao)(0a0bd15)
- chore:Upgrade inline scanner version to 0.27.0 (#75) (Lei Jin)(74fb2c2)
- ci: version bump to v1.4.2-dev (Lacework)(975a4e1)
- docs(CONTRIBUTING.md): Fix link (#63) (Mateusz Wroński)(2d20deb)
- docs(readme): fix typo (#64) (Mateusz Wroński)(24a046e)
- chore(tests): Use newer docker actions as old version use deprecated node version. (#67) (Tim Arenz)(04dc248)
- chore(deps): lw-scanner to version 0.23.2 (#65) (lacework-releng)(a4dae24)
- ci: fix workflow url in slack message (#69) (Pengyuan Zhao)(cf13c01)
- ci: migrate Codefresh pipelines to Github Actions (#68) (Pengyuan Zhao)(35b05ef)
- ci: version bump to v1.4.1-dev (Lacework)(4127bc0)
- feat: add github summary integration (#57) (Jean-Yves CAMIER)(2e9e3ce)
- feat: add github summury integration (#52) (Jean-Yves CAMIER)(065f92e)
- fix: output for non job-summary runs (#60) (Tim Arenz)(439c2c5)
- chore(deps): lw-scanner to version 0.22.0 (#58) (lacework-releng)(b9e56e6)
- chore(deps): lw-scanner to version 0.22.0 (#50) (lacework-releng)(97373a6)
- ci: run tests on pull requests (#55) (Tim Arenz)(84a6732)
- ci: version bump to v1.3.3-dev (Lacework)(55d9ca8)
- chore(deps): lw-scanner to version 0.20.1 (#48) (lacework-releng)(8fd0495)
- ci: update the version-bump script argument check (#46) (Dave Hill)(c518fa9)
- ci: version bump to v1.3.2-dev (Lacework)(74e69ef)
- docs: add environment variable examples (#38) (Tim Arenz)(1b323ac)
- ci: update commit message version-bump.sh (#44) (Salim Afiune)(4fc19f6)
- ci: fix scripts/version-bump.sh (#43) (Salim Afiune)(6cdd7e6)
- ci: fix scripts/version-bump.sh (#41) (Salim Afiune)(2dd82a4)
- ci: fix scripts/version-bump.sh (#40) (Salim Afiune)(e4c98c4)
- ci: add version-bump.sh script (#39) (Salim Afiune)(65fb0c3)
- ci: version bump to v1.3.1-dev (Lacework)(775290a)
- feat(cli): add option to specify additional parameters for the lacework scanner cli (#34) (Stephan Stiefel)(4daf846)
- chore: fix vulnerabilities typo in README.md (#31) (Noah Kreiger)(6d4a629)
- ci: version bump to v1.2.1-dev (Lacework)(7747b15)
- feat: add new output options and use as default (Tim Arenz)(9edcf8f)
- fix: set debug default value and align with comon naming schema (Tim Arenz)(30ee752)
- chore: update scanner version to 0.10.1 (Tim Arenz)(5b10068)
- ci: use v3 actions (Tim Arenz)(f8f0fdb)
- ci: clean up test-actions and use prebuilt image in all jobs (Tim Arenz)(b6a58a0)
- ci: version bump to v1.1.2-dev (Lacework)(9427c17)
- fix: release script (#24) (Salim Afiune)(e0adb9c)
- fix: change debug to argument instead of variable (#20) (Andre Elizondo)(3393a74)
- ci: fix release script to fint latest version (#22) (Salim Afiune)(4027f36)
- ci: fix bug that avoids automatic version bump (Salim Afiune Maya)(9eb8578)
- ci: version bump to v1.1.1 (Salim Afiune Maya)(0657580)
- feat: add debug option to scanner definition (#17) (Andre Elizondo)(0362a01)
- refactor(v1.0.0): Use native policies from the platform (#9) (Salim Afiune)(3fc0763)
- chore: update scanner version to 0.7.0 (#15) (Tim Arenz)(3826818)
- chore: update README.md (#12) (Salim Afiune)(4d3222d)
- ci: fix test-action job (#13) (Salim Afiune)(315fc0b)
- ci: version bump to v0.7.2-dev (Lacework)(32292e5)
- chore: update scanner version to 0.7.0 (#15) (Tim Arenz)(3826818)
- chore: update README.md (#12) (Salim Afiune)(4d3222d)
- ci: fix test-action job (#13) (Salim Afiune)(315fc0b)
- refactor(v1.0.0): Use native policies from the platform (#9) (Salim Afiune)(3fc0763)
- ci: version bump to v0.7.2-dev (Lacework)(32292e5)
- fix(jq): binary missing and logic corrections (#7) (Tim Arenz)(0c6d283)
- ci: version bump to v0.7.1-dev (Lacework)(a49f3c8)
- refactor: update lw-scanner docker image (Salim Afiune Maya)(44a662b)
- chore: add release tooling to project (ipcrm)(ec203ad)
- chore(docs): update documentation and reorg after org move (ipcrm)(8a11419)
- ci: init RELEASE_NOTES.md (#6) (Salim Afiune)(6c01578)
- ci: add nightly builds (Salim Afiune Maya)(e5b0c8d)
- Update lw-scanner to version 0.2.5
- Change logic around scanning non-os packages by default
- Reintroduce fail only if fixable vulnerabilities found
- Update to action description
- Changed variables and how this action works to make the user expirence consitent across differnt CI platforms like Bitbucket, GitHub Actions, CircleCI, etc.
- Changed exit codes, action will fail with exit code 1 regardles of the severity of the vulnerability / policy.
- Fix evalution of found vulnerabilites as json schema changed.
- Remove option to only fail if fixable, as of today it is not mapped to specific severity. If this functionality is required it can be archived using the new policy feature.
- Add support for Lacework policy management feature (beta). To enable set
use_policy
parameter totrue
. As a result allfail_...
parameters will be ignored. - Added overview of exit codes
- Updated Lacework Scanner to version 0.2.2
- Updated Lacework Scanner to version 0.2.1
- Added option to change HTML report file name:
html_report_file_name
- arguments
scan_library_packages
andsave_results_in_lacework
are deprecated and have been replaced with the offical environment variablesLW_SCANNER_SCAN_LIBRARY_PACKAGES
andLW_SCANNER_SAVE_RESULTS
: https://support.lacework.com/hc/en-us/articles/4403780976275-Integrate-the-Lacework-Inline-Scanner-with-CI-Pipelines#configuration-options-for-image-evaluate save_build_report
arugment name changed tosave_html_report