68 Releases 79 Tags

RSS Feed

• v1.5.11 14cde55629

  v1.5.11 Stable

  giteasync released this 2024-05-17 06:53:30 -05:00 | 387 commits to main since this release

  Changelog

  • 14cde55 Merge pull request #215 from r0075h3ll/main
  • 6ac40c5 Minor fix
  • 1d48cf1 Update json_report.go
  • a058f71 Write 'advices' field to json report file
  • 926837e refactor: JSON report generator add upgrade advice - PR #215

  Downloads

  • Source Code (ZIP)
  • Source Code (TAR.GZ)
  • checksums.txt
    452 B
  • multiple.intoto.jsonl
    15 KiB
  • vet_Darwin_arm64.tar.gz
    8.7 MiB
  • vet_Darwin_x86_64.tar.gz
    9.3 MiB
  • vet_Linux_x86_64.tar.gz
    9.2 MiB
• v1.5.10 4eab4092cf

  v1.5.10 Stable

  giteasync released this 2024-04-16 12:32:29 -05:00 | 392 commits to main since this release

  Changelog

  • 818ab81 Merge pull request #205 from safedep/docs/add-pac-doc
  • 4eab409 Merge pull request #206 from safedep/feat/color-code-depgraph-filter-match
  • c044946 feat: Color code nodes matching filter in dependency graph

  Downloads

  • Source Code (ZIP)
  • Source Code (TAR.GZ)
  • checksums.txt
    452 B
  • multiple.intoto.jsonl
    15 KiB
  • vet_Darwin_arm64.tar.gz
    8.7 MiB
  • vet_Darwin_x86_64.tar.gz
    9.3 MiB
  • vet_Linux_x86_64.tar.gz
    9.2 MiB
• v1.5.9 d3c0d7c279

  v1.5.9 Stable

  giteasync released this 2024-04-04 04:08:50 -05:00 | 396 commits to main since this release

  Changelog

  • 948b411 Merge pull request #195 from safedep/chore/vet-integrate-vet
  • 6e6225c Merge pull request #196 from safedep/chore/dependency-upgrade-2024-04-01
  • b5c2b14 Merge pull request #197 from safedep/chore/update-ossf-scorecard-action
  • d3c0d7c Merge pull request #199 from safedep/refactor/docs-2024-04-02
  • ebe5411 chore: Fallback to community mode when auth is unavailable
  • eb6a914 chore: Update Go version and dependencies
  • b523eb5 chore: Update OpenSSF scorecard action
  • eb7f3ca ci: Add vet for vetting PR
  • ab3ee44 ci: Fix e2e test runner rate limiting issue

  Downloads

  • Source Code (ZIP)
  • Source Code (TAR.GZ)
  • checksums.txt
    452 B
  • multiple.intoto.jsonl
    15 KiB
  • vet_Darwin_arm64.tar.gz
    8.7 MiB
  • vet_Darwin_x86_64.tar.gz
    9.3 MiB
  • vet_Linux_x86_64.tar.gz
    9.2 MiB
• v1.5.8 c4fcab47d1

  v1.5.8 Stable

  giteasync released this 2024-03-26 08:57:51 -05:00 | 405 commits to main since this release

  Changelog

  • c4fcab4 Merge pull request #194 from safedep/chore/update-slsa-builder
  • b726033 ci: Update SLSA generator actions version

  Downloads

  • Source Code (ZIP)
  • Source Code (TAR.GZ)
  • checksums.txt
    452 B
  • multiple.intoto.jsonl
    15 KiB
  • vet_Darwin_arm64.tar.gz
    9.0 MiB
  • vet_Darwin_x86_64.tar.gz
    9.5 MiB
  • vet_Linux_x86_64.tar.gz
    9.1 MiB
• v1.5.7 edb40c01cb

  v1.5.7 Stable

  giteasync released this 2024-03-26 08:28:34 -05:00 | 407 commits to main since this release

  Changelog

  • fef3d6d Merge pull request #192 from safedep/feat/summary-report-group-by-direct-deps
  • edb40c0 Merge pull request #193 from safedep/feat/markdown-summary-reporting
  • b6b0381 chore: Add option to render markdown summary report from query command
  • 36f2297 chore: Update go and go deps
  • bfa6300 chore: Update markdown summary report format
  • 7f2f729 feat: Add command line arg for group by direct dependencies
  • 38940ea feat: Add support for markdown summary report generator
  • 79d7cf9 feat: Enhance summary report to show vulnerability risk and sample
  • cbdec10 refactor: Move emoji text to markdown package
  • fbe42b4 refactor: Summary report generator for grouped reporting

  Downloads

  • Source Code (ZIP)
  • Source Code (TAR.GZ)
  • checksums.txt
    452 B
  • vet_Darwin_arm64.tar.gz
    9.0 MiB
  • vet_Darwin_x86_64.tar.gz
    9.5 MiB
  • vet_Linux_x86_64.tar.gz
    9.1 MiB
• v1.5.6 c0f9848b77

  v1.5.6 Stable

  giteasync released this 2024-03-16 11:13:19 -05:00 | 417 commits to main since this release

  Changelog

  • f93f786 Merge pull request #173 from safedep/feat/dependency-graph
  • 774323c Merge pull request #187 from safedep/feat/npm-graph-parser
  • c0f9848 Merge pull request #190 from safedep/feat/cyclonedx-parser-handle-dependency-relation
  • be81848 feat: Add data structure to build dependency graph
  • b662145 feat: Refactor CycloneDX parser into CycloneDX Graph Parser
  • debca42 fix: purl parser bug to handle maven group:name convention
  • d0f6a82 refactor: Allow parser configuration
  • 1dba6fd refactor: Parser to use dependency graph parsers
  • 6f3c5ad refactor: Simplify load_exceptions function

  Downloads

  • Source Code (ZIP)
  • Source Code (TAR.GZ)
  • checksums.txt
    452 B
  • multiple.intoto.jsonl
    15 KiB
  • vet_Darwin_arm64.tar.gz
    8.9 MiB
  • vet_Darwin_x86_64.tar.gz
    9.4 MiB
  • vet_Linux_x86_64.tar.gz
    8.9 MiB
• v1.5.5 f6e055d5c5

  v1.5.5 Stable

  giteasync released this 2024-01-01 01:43:23 -06:00 | 426 commits to main since this release

  Changelog

  • f6e055d Merge pull request #182 from safedep/fix/auth-reporting-experience
  • b08c8a4 fix: #180 Ensure version update is available before proposing in summary reporter
  • bd74334 fix: #180 provide explicit instruction to use vet community mode when auth verify fails

  Downloads

  • Source Code (ZIP)
  • Source Code (TAR.GZ)
  • checksums.txt
    452 B
  • multiple.intoto.jsonl
    15 KiB
  • vet_Darwin_arm64.tar.gz
    8.8 MiB
  • vet_Darwin_x86_64.tar.gz
    9.3 MiB
  • vet_Linux_x86_64.tar.gz
    8.9 MiB
• v1.5.4 875d96b4f0

  v1.5.4 Stable

  giteasync released this 2023-12-30 01:11:32 -06:00 | 429 commits to main since this release

  Changelog

  • 273d999 Merge pull request #178 from safedep/fix/lfp_npm_unavailable_package
  • 875d96b Merge pull request #179 from safedep/fix/add-guardrails-against-nil-pkg-in-event
  • d63e927 chore: Add guard rails against nil pkg in event for JSON report generator
  • 79377e3 fix: LFP npm handle missing package

  Downloads

  • Source Code (ZIP)
  • Source Code (TAR.GZ)
  • checksums.txt
    452 B
  • multiple.intoto.jsonl
    15 KiB
  • vet_Darwin_arm64.tar.gz
    8.8 MiB
  • vet_Darwin_x86_64.tar.gz
    9.3 MiB
  • vet_Linux_x86_64.tar.gz
    8.9 MiB
• v1.5.3 ffd73b1e7d

  v1.5.3 Stable

  giteasync released this 2023-12-29 01:51:13 -06:00 | 433 commits to main since this release

  Changelog

  • ffd73b1 Merge pull request #177 from safedep/fix/json-report-spec-threat-id
  • 4efa611 fix: Add identifiers to JSON report spec for threats
  • c3b3e25 fix: Use valid markdown convention for LFP npm

  Downloads

  • Source Code (ZIP)
  • Source Code (TAR.GZ)
  • checksums.txt
    452 B
  • multiple.intoto.jsonl
    15 KiB
  • vet_Darwin_arm64.tar.gz
    8.8 MiB
  • vet_Darwin_x86_64.tar.gz
    9.3 MiB
  • vet_Linux_x86_64.tar.gz
    8.9 MiB
• v1.5.2 f4df5f845f

  v1.5.2 Stable

  giteasync released this 2023-12-29 01:00:38 -06:00 | 436 commits to main since this release

  Changelog

  • f4df5f8 Merge pull request #176 from safedep/patch/extend-json-report-for-lfp-threats
  • 2a27376 feat: Extend JSON report spec to support threats

  Downloads

  • Source Code (ZIP)
  • Source Code (TAR.GZ)
  • checksums.txt
    452 B
  • multiple.intoto.jsonl
    15 KiB
  • vet_Darwin_arm64.tar.gz
    8.8 MiB
  • vet_Darwin_x86_64.tar.gz
    9.3 MiB
  • vet_Linux_x86_64.tar.gz
    8.9 MiB