sysdig-secure-2.2.7

• Updates sysdig-cli-scanner to latest available version (1.3.3) to fix a small bug affecting evaluation of accepted-risks
• Fix a small bug that was causing the build to fail even when it was not supposed to do so
• Adjust string representations of some policy rules

sysdig-secure-2.2.6

1. Updates sysdig-cli-scanner to version 1.3.1 in order to support the Risks-Acceptance flow
2. Bump version of a few dependencies

Note: in order to both lookup and manage your accepted risks, you need to use the dedicated sections on the Sysdig Platform

sysdig-secure-2.2.5

Adds support for the new Sysdig scanning engine (#44)

Note: scanning through legacy engine is still supported but will be deprecated soon

sysdig-secure-2.1.16

Fix #57: add back volume mounting when docker host is a tcp-like url

sysdig-secure-2.1.15

Fix #55 : allow custom paths for docker.sock

sysdig-secure-2.1.14

Add explicit dependency to apache.commons.lang3 for docker-java-core (#52
#52). Fixes issues with missing class in some environments.

sysdig-secure-2.1.13

• fix: customize connection timeout and allow ping
• Filter for severity and fixable on vulnerabilities table
• Ability to download vulnerabilities table in csv format.
• Show policy name on policy table
• Display warning error when json files needed for generate tables are not present.

sysdig-secure-2.1.12

Fixes:

• Fix Dockerfile existence check. The file must be checked on the agent, not on the master.

sysdig-secure-2.1.11

Fixes:

• Honor the environment variables injected with InjectEnv plugin for Freestyle jobs.

sysdig-secure-2.1.10

New features:

• Include publish and fix date for vulnerabilities in security report, when available and provided by the backend.
• New option runAsUser to execute the inline scanner as the specific UID.
• New option inlineScanExtraParams to add additional parameters to the inline scanner.

Fixes:

• Honor the environment variables set at the step level (withEnv) or at the stage level (environment) for pipelines.