Skip to content

Releases: DataDog/datadog-sbom-generator

Release list

v1.17.4

v1.17.4 Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 08 Jul 08:51
v1.17.4
This tag was signed with the committer’s verified signature.
anderruiz Ander Ruiz Ayesta
SSH Key Fingerprint: LR33sx1f80knyZNN8SiR2bErKvj63AL7Bxnr4pN4hBY
Verified
Learn about vigilant mode.
9e43bc2
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Changelog

  • 9e43bc2 [SCI] add build file tree support for npm/yarn/pnpm/bun workspaces (#187)
  • d836eb6 [SCI] Add Ruby build file tree support via Gemfile path directives (#186)
  • ea49d6c [SCI] add GetArtifact to ComposerLockExtractor for build file analysis (#185)
Loading

v1.17.3

v1.17.3 Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 03 Jul 10:11
v1.17.3
This tag was signed with the committer’s verified signature.
piloulacdog Pierre-Louis Lacorte
SSH Key Fingerprint: BuzIyoB6+TF9nCQI9YqPbMqpH7bD7NdbuE84UuC+p7s
Verified
Learn about vigilant mode.
0ecd08d
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Changelog

  • 0ecd08d fix: protect against unsupported resolution element for pnpm (#184)
  • f7a84ce perf(python): replace per-line regexp in isLineContinuation with a string scan (#180)
  • fe29c80 [SCI] Add Go build file tree support via replace directives (#179)
  • 9aa4694 feat(dotnet): add ProjectReference tracing for .csproj build file trees (#178)
Assets 10
Loading

v1.17.2

v1.17.2

Choose a tag to compare

View all tags
@github-actions github-actions released this 22 Jun 15:30
v1.17.2
This tag was signed with the committer’s verified signature.
anderruiz Ander Ruiz Ayesta
SSH Key Fingerprint: LR33sx1f80knyZNN8SiR2bErKvj63AL7Bxnr4pN4hBY
Verified
Learn about vigilant mode.
64e93bf
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Changelog

  • 64e93bf feat: [SCI] add BazelBuildExtractor for inter-module dependency analysis in Bazel monorepos (#177)
  • 9dbdd9d feat(maven): capture groupId namespace location in extractor output (#176)
  • c5d0f09 feat(java): resolve Gradle artifact names from settings.gradle (#174)
Loading

v1.17.1

v1.17.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 02 Jul 13:19
v1.17.1
This tag was signed with the committer’s verified signature.
anderruiz Ander Ruiz Ayesta
SSH Key Fingerprint: LR33sx1f80knyZNN8SiR2bErKvj63AL7Bxnr4pN4hBY
Verified
Learn about vigilant mode.
79103b7
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Changelog

  • 79103b7 refactor: replace log.Printf calls with Reporter interface (#175)
  • 3ad4512 feat(sbomgen): add Gradle build file tree support (#164)
Loading

v1.17.0

v1.17.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 15 Jun 11:57
v1.17.0
This tag was signed with the committer’s verified signature.
anderruiz Ander Ruiz Ayesta
SSH Key Fingerprint: LR33sx1f80knyZNN8SiR2bErKvj63AL7Bxnr4pN4hBY
Verified
Learn about vigilant mode.
dbfb2c7
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Changelog

  • dbfb2c7 feat(sbomgen): add HopCount to BuildFileRelations.Dependencies (#163)
  • ccede4e Python build file tree support for Code Intelligence (#160)
Loading

v1.16.0

v1.16.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 02 Jul 13:19
v1.16.0
This tag was signed with the committer’s verified signature.
anderruiz Ander Ruiz Ayesta
SSH Key Fingerprint: LR33sx1f80knyZNN8SiR2bErKvj63AL7Bxnr4pN4hBY
Verified
Learn about vigilant mode.
e684d6c
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Changelog

  • e684d6c [PoC] Add GetBuildFileTrees API to extract manifest build files and their relations from SBOMs (#157)
  • aab0cf4 rename lockfile dir (#156)
  • 3854205 feat(sbomgen): expose library API for programmatic SBOM generation (SCI Usage) (#155)
  • 69758a3 add code-security.datadog.yaml to exclude test fixture paths from SCA scans (#154)
  • fe7f81e feat(lockfile): add lockfile positions for transitive dependencies across all parsers (#127)
Loading

v1.15.0

v1.15.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 22 May 14:12
v1.15.0
This tag was signed with the committer’s verified signature.
anderruiz Ander Ruiz Ayesta
SSH Key Fingerprint: LR33sx1f80knyZNN8SiR2bErKvj63AL7Bxnr4pN4hBY
Verified
Learn about vigilant mode.
6de7f5e
This commit was signed with the committer’s verified signature.
anderruiz Ander Ruiz Ayesta
SSH Key Fingerprint: LR33sx1f80knyZNN8SiR2bErKvj63AL7Bxnr4pN4hBY
Verified
Learn about vigilant mode.

Changelog

  • 6de7f5e feat(lockfile): set LocationRole=lockfile in all extractors that set BlockLocation
  • abb10ec fix(javascript): fix matcher dev-dep skipping when BlockLocation set from lockfile
  • 332bb45 test: regenerate integration snapshots after rebase onto main (#141)
  • 422f8d1 test(swift): update Package.resolved tests with BlockLocation assertions
  • 443c857 feat(swift): add BlockLocation to Package.resolved extractor
  • 93f333e test: update snapshots and fix lint warnings in BlockLocation tests
  • 729fa47 test(lockfile): update yarn-lock tests with BlockLocation assertions
  • bcf0f2f feat(lockfile): add BlockLocation to yarn-lock extractor
  • ae7573b test(lockfile): update pnpm-lock tests with BlockLocation assertions
  • 1e96bc1 feat(lockfile): add BlockLocation to pnpm-lock extractor
  • b8297eb test(lockfile): update pubspec-lock tests with BlockLocation assertions
  • 69a3de0 feat(lockfile): add BlockLocation to pubspec-lock extractor
  • 482fe15 test(lockfile): update gradle-verification-metadata tests with BlockLocation assertions
  • 8ef27f6 feat(lockfile): add BlockLocation to gradle-verification-metadata extractor
  • a3baff7 test(lockfile): update conan-lock tests with BlockLocation assertions
  • f338914 Add BlockLocation to conan-lock extractor for both V1 and V2 formats
  • 9149d28 test(lockfile): update nuget-lock tests with BlockLocation assertions
  • 7296b0b feat(lockfile): add BlockLocation to nuget-lock extractor
  • 2f1a51e test(lockfile): update renv-lock tests with BlockLocation assertions
  • e55e469 feat(lockfile): add BlockLocation to renv-lock extractor
  • f89f655 test(lockfile): update pipenv-lock tests with BlockLocation assertions
  • 9b7ccdc feat(lockfile): add BlockLocation to pipenv-lock extractor
  • 39aa610 Add BlockLocation test and update composer-lock test expectations
  • 862fbf5 Set BlockLocation for all packages in composer-lock extractor
  • 9aa6654 Add BlockLocation test and update uv-lock test expectations
  • e0075a7 Set BlockLocation for all packages in uv-lock extractor
  • 75598d4 Add BlockLocation test and update pdm-lock test expectations
  • 5c1f641 Set BlockLocation for all packages in pdm-lock extractor
  • 1e3b05a Add BlockLocation test and update poetry-lock test expectations
  • 65a1cfb Set BlockLocation for all packages in poetry-lock extractor
  • 4d5cee6 Add BlockLocation test and update cargo-lock test expectations
  • 6334a96 Set BlockLocation for all packages in cargo-lock extractor
  • 8154edf Add BlockLocation test and update gemfile-lock test expectations
  • 788fd2e Set BlockLocation for all packages in gemfile-lock extractor
  • 853e085 Add BlockLocation test and update mix-lock test expectations
  • de87ba8 Set BlockLocation for all packages in mix-lock extractor
  • 145c985 Add BlockLocation assertion test for gradle-lock extractor
  • 71bfb28 Set BlockLocation for all packages in gradle-lock extractor
Loading

v1.14.0

v1.14.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 19 May 14:32
v1.14.0
This tag was signed with the committer’s verified signature.
rjcoulter22 Ryan Coulter
SSH Key Fingerprint: hsRx669k5WvHplorTutdUqdJs1TMRhBwJKLzLXIcOmo
Verified
Learn about vigilant mode.
f974cc1
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Changelog

  • f974cc1 [K9VULN-14776] Manifest-only cleanup (#153)
  • d0a5e34 [K9VULN-14776] Emit manifest metadata for range resolution (#151)
Loading

v1.13.1

v1.13.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 15 May 17:50
v1.13.1
This tag was signed with the committer’s verified signature.
rjcoulter22 Ryan Coulter
SSH Key Fingerprint: hsRx669k5WvHplorTutdUqdJs1TMRhBwJKLzLXIcOmo
Verified
Learn about vigilant mode.
3ce0b13
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Changelog

  • 3ce0b13 Revert "feat(lockfile): add BlockLocation + LocationRole=lockfile to npm-lock…" (#152)
  • 000c461 Add package.json extractor for lockfile-less JS projects (#126)
  • 5f634ac Executing automated changes (#131)
Loading

v1.13.0

v1.13.0 Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 14 May 12:57
v1.13.0
This tag was signed with the committer’s verified signature.
anderruiz Ander Ruiz Ayesta
SSH Key Fingerprint: LR33sx1f80knyZNN8SiR2bErKvj63AL7Bxnr4pN4hBY
Verified
Learn about vigilant mode.
bfdde38
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Changelog

  • bfdde38 Add MANIFEST.MF fallback parser for JARs without pom.properties (#150)
  • 04ee611 [K9VULN-14431] Add Bun lockfile parser (#144)
  • 153b51a test(lockfile): add invariant — LocationRole must be set when BlockLocation is valid (#149)
Loading