v0.71.1
Fixed 4
- Validate artifact filename in OCI
- Forward ospkg detector options through ospkg.NewScanner
- Load VEX documents from within the repository directory
- Surface the original analysis error instead of context cancellation
Changelog
- 164b383121351c2d49c5d354c2245719d972752b release: v0.71.1 [release/v0.71] (#10818)
- a72d9a4d997c25fbb6534e231b4e206c9b202b31 fix(oci): validate artifact filename
- 3dd98471dfbbc4a95edd5cd866468d3a8c87fd17 fix: forward ospkg detector options through ospkg.NewScanner [backport: release/v0.71] (#10825)
- a62cbe40a240d3a3f568401b8a5f86e14114e371 fix(vex): load VEX documents from within the repository directory [backport: release/v0.71] (#10821)
- 43d1d2628725e913db110b89419f0bebd36f58a8 fix: surface the original analysis error instead of context cancellation [backport: release/v0.71] (#10812)
- ac7696c7b50d633183ce2ff44898d4b5c6eae565 ci: expect GitHub App bot as backport PR author [backport: release/v0.71] (#10815)