v0.19.0

Changelog

💔Breaking Change💔

sbom crd format has been changed following to latest cycloneDX format. execute the following before upgrade:

    kubectl delete crd sbomreports.aquasecurity.github.io
    kubectl delete crd clustersbomreports.aquasecurity.github.io

Changelog

✨ Notable Changes ✨

• f6b4e47: feat: Also publish chart to OCI registry (#1889) (@mkilchhofer)
• cce0c22: feat: Enable passing values for operator through custom ConfigMap and/or Secrets (#1849) (@flash-me)
• b05764c: feat: add extra labels for operator and server controllers in Helm chart (#1867) (@fhielpos)
• 488e4e3: feat: added configurable appProtocol to metrics service (#1871) (@seekermarcel)
• 3fb8e61: feat: opa exception support (#1845) (@chen-keinan)
• 3209448: feat: scan job secret ttl support (#1875) (@chen-keinan)
• 50b60fd: feat: ssl-cert dir support on init containers and built-in server (#1903) (@chen-keinan)
• b25e532: feat: trivy policies bundle support (#1897) (@chen-keinan)

🐛 Notable Fixes 🐛

• 048d77e: fix: access to private regional gcr (#1869) (@dnskr)
• 8cda161: fix: false positive cis kubeletMakeIptablesUtilChainsArgumentSet (#1858) (@chen-keinan)

👮 Security updates👮

• 83703a1: sec: fix CVE-2024-26147 (#1877) (@chen-keinan)

📝 Documentation 📝

• ba33abd: docs: Fix some links to other sections and websites (#1846) (@maltemorgenstern)
• 338ed27: docs: add documentation on how to install trivy-operator in a ns with default deny-all netpols (#1608) (@francRang)
• 867f42b: docs: remove unused badges (#1891) (@chen-keinan)

🔧 Miscellaneous 🔧

• 43f8555: chore: bump trivy-0.49.1 lib (#1859) (@chen-keinan)

👷 Other work 👷

• 9800cd2: build(deps): bump github.com/aws/aws-sdk-go from 1.50.10 to 1.50.21 (#1865) (@dependabot[bot])
• d899284: build(deps): bump github.com/aws/aws-sdk-go from 1.50.21 to 1.50.25 (#1884) (@dependabot[bot])
• 31413c4: build(deps): bump github.com/aws/aws-sdk-go from 1.50.25 to 1.50.30 (#1894) (@dependabot[bot])
• 5600921: build(deps): bump github.com/aws/aws-sdk-go from 1.50.30 to 1.50.35 (#1904) (@dependabot[bot])
• 6f4c351: build(deps): bump github.com/onsi/ginkgo/v2 from 2.15.0 to 2.16.0 (#1905) (@dependabot[bot])
• 6d08572: build(deps): bump github.com/prometheus/client_golang (#1893) (@dependabot[bot])
• 5070b31: build(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0 (#1892) (@dependabot[bot])
• be21684: build(deps): bump golang.org/x/net from 0.20.0 to 0.21.0 (#1854) (@dependabot[bot])
• bf14a9d: build(deps): bump golang.org/x/net from 0.21.0 to 0.22.0 (#1906) (@dependabot[bot])
• e502b1f: build(deps): bump golangci/golangci-lint-action from 3.7.0 to 4.0.0 (#1852) (@dependabot[bot])
• ed2cac1: build(deps): bump helm/kind-action from 1.8.0 to 1.9.0 (#1851) (@dependabot[bot])
• 260612f: build(deps): bump jdcargile/ms-teams-notification from 1.3 to 1.4 (#1882) (@dependabot[bot])
• 508fb94: build(deps): bump k8s.io/apiextensions-apiserver from 0.29.1 to 0.29.2 (#1883) (@dependabot[bot])
• a5867ce: build(deps): bump k8s.io/apimachinery from 0.29.1 to 0.29.2 (#1864) (@dependabot[bot])
• 3e5d006: build(deps): bump k8s.io/cli-runtime from 0.29.1 to 0.29.2 (#1860) (@dependabot[bot])
• f957580: build(deps): bump sigs.k8s.io/controller-runtime from 0.17.0 to 0.17.2 (#1861) (@dependabot[bot])