v0.4.1

CI

• update cid github actions workflow from 0.0.23 to 0.0.24 (#204)

Features

• add module type, spec type and collections to action rule context

Internal

• deps: update dependency go to v1.23.1 (#206)
• deps: update github.com/go-playground/validator/v10 to v10.22.1
• deps: update go-repoanalyzer to 20240908105803
• deps: update go-vcs and cel-go
• deps: update module github.com/cidverse/cidverseutils/filesystem to v0.1.1 (#207)
• deps: update module github.com/go-resty/resty/v2 to v2.14.0 (#202)
• deps: update module github.com/samber/lo to v1.47.0 (#203)

v0.4.0

Bug Fixes

• exit with error code if workflow is not found

CI

• update cid github actions workflow from 0.0.18 to 0.0.19 (#196)

Features

• add empty nix executor
• no-dash uuid in socket file names, support temp dir override
• use versioned api endpoints

Internal

• deps: bump all dependencies
• deps: bump cidverseutils
• deps: bump dependencies
• move zerologconfig into lib
• remove dep on go-funk and go-password
• deps: update github.com/cidverse/cidverseutils to v0.0.0-20240501195623-588d642a5813 (#180)
• deps: update github.com/cidverse/cidverseutils to v0.1.0 (#186)
• deps: update module github.com/cidverse/cidverseutils/redact to v0.1.0 (#187)
• deps: update module github.com/cidverse/normalizeci to 2024.03.23
• deps: update module github.com/cidverse/repoanalyzer to v0.0.0-20240503224543-e134ee835d84 (#179)
• deps: update module github.com/cidverse/repoanalyzer to v0.1.1-0.20240510193438-abb053de8c14
• deps: update module github.com/go-resty/resty/v2 to v2.13.1 (#188)
• deps: update module github.com/hashicorp/go-version to v1.7.0 (#191)
• deps: update module github.com/labstack/echo/v4 to v4.12.0 (#170)
• deps: update module github.com/opencontainers/image-spec to v1.1.0 (#166)
• deps: update module github.com/protonmail/gopenpgp/v2 to v2.7.5 (#165)
• deps: update module github.com/rs/zerolog to v1.33.0 (#190)
• deps: update module github.com/samber/lo to v1.44.0 (#198)
• deps: update module github.com/spf13/cobra to v1.8.1 (#193)
• deps: update module github.com/stretchr/testify to v1.9.0 (#167)
• deps: update module oras.land/oras-go/v2 to v2.5.0 (#169)

Refactor

• fastwalk in repoanalyzer, restructure cidverseutils
• move output code into utils
• use functions instead of static definitions

v0.3.0

CI

• add cid github actions workflow (#164)

Features

• add diff endpoint to api
• handle nci errors, move vcs code into a standalone library
• improve cel rule evaluation, update github.com/google/cel-go to v0.17.1 (#132)
• move rule eval into a shared library

Internal

• log rule evaluation errors
• update cacert paths
• update go to v1.21.0
• deps: update module github.com/go-resty/resty/v2 to v2.11.0 (#159)
• deps: update module github.com/google/cel-go to v0.18.2 (#154)
• deps: update module github.com/google/uuid to v1.6.0 (#161)
• deps: update module github.com/jarcoal/httpmock to v1.3.1 (#134)
• deps: update module github.com/jinzhu/configor to v1.2.2 (#156)
• deps: update module github.com/labstack/echo/v4 to v4.11.4 (#158)
• deps: update module github.com/opencontainers/image-spec to v1.1.0-rc6 (#160)
• deps: update module github.com/protonmail/gopenpgp/v2 to v2.7.4 (#151)
• deps: update module github.com/rs/zerolog to v1.32.0 (#163)
• deps: update module github.com/samber/lo to v1.39.0 (#155)
• deps: update module github.com/spf13/cobra to v1.8.0 (#152)
• deps: update module oras.land/oras-go/v2 to v2.4.0 (#162)
• deps: update repoanalyzer for kotlin support

v0.2.0

Bug Fixes

• artifact id in state was not unique
• command placeholders should not have a $ prefix
• keep catalog entries without source decl
• resolves a bug in version.bump / add tests
• shared mutex for log writer / pass-thru stdout from action container
• stdout and stderr for failed commands / unix path files in module

Features

• add action category, generate action index
• add artifact id
• add audit events to state
• add certs property to config
• add containsKey method to cel rules
• add dependencies to provenance
• add extract_file option to artifact upload
• add hasPrefix function to cel expr
• add hash to catalog file, prepare to store catalog in oci registry
• add in-toto-golang / provenance pkg to support slsa.dev
• add more details to catalog list
• add nonProxyHosts to default jvm opts
• add provenance endpoint to api (incomplete)
• auto-set proxy in _JAVA_OPTIONS
• automatically generate provenance on artifact upload
• calculate sha256 hash for all uploaded artifacts
• change audit format / include the container image uri
• change env access structure / add doc generate command
• download artifacts via id / logging
• filter base64 decoded values from output
• find host ca-bundle and merge extra ca certs by default
• forward http proxy env vars to all containers
• generate intoto slsa provenance
• log module slug on action start / end
• move port and env helper funcs into shared library
• pass action env to action container
• set provenance invocationId
• store state across multiple files
• support NCI_REPOSITORY_HOST_TYPE / NCI_REPOSITORY_HOST_SERVER
• support aliases and entrypoint overwrite
• support ca-extra.crt to pass ca's into containers
• support cel queries in artifact list
• support env overwrite in cid x
• support filter on artifact api
• support for custom ca-bundle / ca bundle pass-thru
• support for getMapValue in rules
• support ports arg in cid x
• support remote catalog's
• support repo / version in workflow run / list cmd
• support version constraint in command-execute api
• temp dir for actions, proxy stdin when using x subcommand
• update to slsa v1.0
• use RunAPICommand for cid x
• use [masked] to hide secrets, make proxy-writer thread-safe

Internal

• change renovate target branch to main
• only pass proxy env if a proxy has been set
• remove lint stage from ci
• rename main repository from central to cid
• use .config/cid as config dir
• use cidverse renovate preset
• use shared ci workflow
• version the normalizeci spec

Refactor

• move version pkg to cidverseutils
• rename registry to catalog

v0.1.0

chore: fix commitanalyzer tests

latest

chore: fix commitanalyzer tests