- cache slack channel to avoid multiple calls to slack API
- #69: add retries and backoff to slack calls
- fix lgtm ai model
- bump osv-scanner to 2.x
- remove custom type for codes
- make 128 no packages found not return an error
- support issues on GitHub
- incorrect arg to UpdateIssue
- more suggestions from lgtm for c.Called
- improve tests
- add
GroupOrOwnertoProjectstruct - #52: download gh repo instead of using git clone
- make lgtm publish reviews
- fix test for download
- use lgtm-ai code reviewer action
- change interface of Clone
- add small suggestion by lgtm
- add security suggestion by lgtm
- #52: download repository archive instead of using git clone for GitLab
- fix lgtm reviewer workflow
- add suggestion by lgtm
- increase osv timeout to accomodate bigger projects
- add lgtm code reviewer
- ignore fetched projects with ignore list
- add dependabot
- deps: move to new gitlab dep
- deps: update dependencies
- ignore project list
- close gitlab issue with iid
- scan directory should use slug
- #48: summary report severity count
- #9: add github project scanning support
- change github client creation to value
- #9: move gitlab logic to specific repository package
- match project config with cli config
- project config compatibility
- fix ci variable indentation
- gitlab templates
- fix labeler workflow
- use slices.SortFunc instead of sort.Slice (#39)
- #31: Mark outdated acknowledged vulnerabilities in the issue report (#40)
- #36: post to multiple slack channels (#38)
- sheriff.toml config should be optional (#37)
- #32: improve configuration API
- #32: configure by file with internal package
- move toml function to config package and improve comments
- #32: move patrol and project config parsing to config package
- #32: move project config to separate package
- cleanup some old links (#33)
- fail-fast in case of missing scanners (#25)
- keep project-level config backwards-compatible
- change goreleaser changelog and attempt a non-shallow clone (#29)
- use goreleaser to generate binaries (#24)
- push to dockerhub
- #17: rework cli interface
- fix github app token use in bump action
- use github app token
- change cli message on warn to "patrol" and not "scan" (#18)
- make
sheriffthe entrypoint of the docker image (#14)
- create LICENSE (#11)
- Add README (#10)
- update issue templates (#7)
- add CODEOWNERS
- add releases and more tests
- app version 0.17.1
- add golangci-lint
- warning errors to bubble up as cli exit code
- beautify GitLab report with reason and some disaclaimers
- acknowledge vulnerabilities
- report to individual slack channels
- scan groups and or projects
- config file and refactor
- adding structured logging to zerolog calls
- use context with timeout for shell commands
- fetch group projects with pagination
- testing flag to enable public channels
- improve cli with better flags and specific command
- tests for the git service
- tests for the main scan method
- coverage ignore functionality
- add slack service tests
- add gitlab service tests
- Add fix available to the vulnerability and the report
- Severity categories and some tests
- gitlab report slight from custom report
- slack message format slight improvement
- add custom report format
- support paginating slack channels
- support scanning subgroups
- add ci
- initial implementation
- initial commit
- show only date in GL report header
- report slack project channel flag boolean
- oops, removing unnecessary file
- separate logging from messaging to the user
- removing pointer to a slice
- slack message limitations
- docker image with more functionality for gitlab
- making some stuff private
- vulnerability issue title
- fix version bump in main.go again
- version bump in main.go
- had dyslexia some with available fix, is now fixed PR this
- group vulnerabilities by categories defined directly from osvss
- incorrect warning message was missing one param
- sort vulnerabilities by CVSS score within a group casting to floats
- report is a double reference in osv.Scan
- do not close inexistant issue
- fix docker
- remove gitlab project pointers
- remove unnecessary pointer to report in slice
- simplify group fetching
- make vulnScanners format their own report
- change name of some packages, and merge report packages
- remove unneded
newServiceprivate trick - test osv scan and refactor shell stuff
- gitlab and slack service and better error handling
- use goroutines and channels to run scan in parallel
- use goroutines for creating GitLab issues
- add version bumping with commitizen
- add workflows
- fix docker again
- add code coverage in gitlab-ci
- improve docker by not installing osv-scanner
- improve ci job definition
- add godoc comments to all exported functions
- add flag to enable project slack reports
- add warning when no projects to report
- add logs for sheriff configuration
- log warnings when project-config has unrecognized keys
- sheriff is patrolling
- sheriff is in town
- improve docker image
- minor improvements to ci job and sorting
- post multiple project reports
- improve logging
- add test for gitlab issue url
- test publish to slack
- add tests for console publisher
- move to testify assertions