v1.3.0

• Update syft to v0.100.0
• Support in-toto envelope layer in attestations
• Improve display of policy results in case of a boolean policy

v1.2.2

What's Changed

• Fix link rendering growing the column by @cdupuis
• No cache and docs by @cdupuis
• Add correlation headers by @cdupuis
• Allow to pass in additional SBOM catalogers by @cdupuis
• Add No Data link for SonarQube policy by @felipecruz91
• Policy fixes by @cdupuis

v1.2.0

What's Changed

• Display configurable policy names by @felipecruz91
• Add support for writing SDPX and CycloneDx to file by @cdupuis
• Support ACR in docker scout repo commands by @velll
• Docs cli reference refresh by @dvdksn

v1.0.9

Remove EA note

Signed-off-by: Yves Brissaud <yves.brissaud@docker.com>

v1.0.8

v1.0.8

v0.23.4

Fix issue when organization is not set but is needed.

Now the GHA will not panic and will print a message when organization is required. For instance when comparing image to the one of an environment or when recording an image to an environment.

- uses: docker/scout-action@v0.23.2
  with:
    command: compare
    image: ${{ step.meta.outputs.tags }}
    to-env: staging
    organization: my-docker-org

- uses: docker/scout-action@v0.23.2
  with:
    command: environment
    image: ${{ step.meta.outputs.tags }}
    environment: staging
    organization: my-docker-org

rel: #14

v0.23.2

Environment

Record an image to an environment:

- uses: docker/scout-action@v0.23.2
  with:
    command: environment
    image: ${{ step.meta.outputs.tags }}
    environment: staging

Compare to environment

Compare an image to the newest one for a specific environment:

- uses: docker/scout-action@v0.23.2
  with:
    command: compare
    image: ${{ step.meta.outputs.tags }}
    to-env: staging

Namespace of Docker Organization

Indicate the namespace of your Docker organization to match the right data from https://scout.docker.com. For instance when you compare an image not on https://hub.docker.com

- uses: docker/scout-action@v0.23.2
  with:
    command: compare
    image: my-registy-1.example.com/repository:tag
    to-latest: true
    organization: my-docker-org

v0.23.1

please use v0.23.2 or newer that fixes some issues regarding organization flag below.

Previous release notes

Environment

Record an image to an environment:

- uses: docker/scout-action@v0.23.1
  with:
    command: environment
    image: ${{ step.meta.outputs.tags }}
    environment: staging

Compare to environment

Compare an image to the newest one for a specific environment:

- uses: docker/scout-action@v0.23.1
  with:
    command: compare
    image: ${{ step.meta.outputs.tags }}
    to-env: staging

Namespace of Docker Organization

Indicate the namespace of your Docker organization to match the right data from https://scout.docker.com. For instance when you compare an image not on https://hub.docker.com

- uses: docker/scout-action@v0.23.1
  with:
    command: compare
    image: my-registy-1.example.com/repository:tag
    to-latest: true
    organization: my-docker-org

v0.22.2

What's Changed

• Don't fail docker scout push when base image is unavailable by @cdupuis

v0.21.1

What's Changed

• Allow docker scout push for local images by @cdupuis