v1.0.0

What's Changed

• feat: release stable v1.0.0 by @thisislawatts in #201

The GitHub Action should be considered ready for use in production pipelines. To formally signal this status we are releasing a v1.0.0

Full Changelog: v0...v1.0.0

v0.5.0

What's Changed

• feat: add ability for customer to specify custom docker image by @nathan-roys in #122
• Revert "feat: add ability for customer to specify custom docker image" by @nathan-roys in #123
• feat: add actions for maven jdk 17 and 20 by @bmvermeer in #124
• feat: add actions for maven jdk 17 and 20 by @bmvermeer in #125
• chore: secrets scanning by @dragos-cojocari in #127
• chore: remove unused Dockerfile by @dragos-cojocari in #128
• Add contributing.md and code of conduct by @torgo in #126
• chore: asset classification by @dragos-cojocari in #130
• fix: add safe directory to git, change creds for generation by @bastiandoetsch in #131
• chore: update codeowners with new team identifer (@snyk/cli) by @thisislawatts in #136
• feat: re-org labels and security gates by @bikochan in #137
• feat: add actions for maven jdk 21 and 22 by @bmvermeer in #138
• fix: add fallback set up command using the env variable by @bastiandoetsch in #140
• Revert "fix: add fallback set up command using the env variable" by @bastiandoetsch in #141
• fix: add test & env variable for setup by @bastiandoetsch in #142
• fix: In setup action check if sudo is available by @PeterSchafer in #143
• feat(scalaSBT): add new Scala SBT action [CLI-382] by @j-luong in #144
• feat: add alpine support by @PeterSchafer in #145
• feat: change downloadurl and add fallback on setup action by @sandor-trombitas in #146
• revert "feat: change downloadurl and add fallback on setup action by @j-luong in #147
• feat: change downloadurl and add fallback on setup action by @j-luong in #148
• chore: add better logging to setup action script by @j-luong in #153
• Update README.md by @azamat-aminov in #152
• Mitigate script injection attack in snyk/actions/setup by @fabasoad in #157
• Bump gitleaks pre-commit hook from 8.17.0 to 8.27.2 by @fabasoad in #158
• chore: adding PR housekeeping by @dotkas in #161
• Housekeeping: Fixing broken synchronization script by @dotkas in #162
• fix: synchronizing Github actions templates by @team-cli-bot in #164
• Housekeeping: Updating Ruby script, fixing more typos by @dotkas in #165
• fix: synchronizing Github actions templates by @team-cli-bot in #167
• feat: adding Gradle JDK 21 by @dotkas in #168
• feat: adding Python 3.11 by @dotkas in #169
• chore: update codeowners [CLI-1037] by @prodsec-github-automation in #173
• chore: adding warnings to generated files by @dotkas in #178
• fix: synchronizing Github actions templates by @team-cli-bot in #180
• feat: adding elixir to actions by @dotkas in #170
• fix: automatically deprecate actions from deprecated snyk images by @dotkas in #182
• fix: synchronize actions with the snyk-images repository by @team-cli-bot in #187
• chore: adding deprecation warning to READMEs as well by @dotkas in #188
• fix: synchronizing Github actions templates by @team-cli-bot in #189
• fix: adding generated action tests by @dotkas in #181
• fix: adding new actions, deprecating some gradle by @dotkas in #190
• fix: synchronize actions with the snyk-images repository by @team-cli-bot in #193
• docs: add contributing and support sections by @thisislawatts in #194
• fix: synchronizing Github actions templates by @team-cli-bot in #195
• chore: add security.md [PRODSEC-5886] by @cvaidas in #197
• fix: update upload-sarif documentation by @dotkas in #196
• chore(ci): generate GitHub releases based on commits by @thisislawatts in #198
• chore(ci): intentionally empty commit to trigger release by @thisislawatts in #199

New Contributors

• @nathan-roys made their first contribution in #122
• @bmvermeer made their first contribution in #124
• @dragos-cojocari made their first contribution in #127
• @torgo made their first contribution in #126
• @thisislawatts made their first contribution in #136
• @bikochan made their first contribution in #137
• @PeterSchafer made their first contribution in #143
• @j-luong made their first contribution in #144
• @sandor-trombitas made their first contribution in #146
• @azamat-aminov made their first contribution in #152
• @fabasoad made their first contribution in #157
• @dotkas made their first contribution in #161
• @team-cli-bot made their first contribution in #164
• @prodsec-github-automation made their first contribution in #173
• @cvaidas made their first contribution in #197

Full Changelog: 0.4.0...v0.5.0

Release V0.4.0

What's Changed

• Fixed typo on iac readme.md by @benlaplanche in #29
• updated the templates with UTMs! by @tomgonzo in #33
• Include attribution by @mattcreager in #41
• Add python-3.8 variant by @JackuB in #45
• Update README.md - fix a typo by @jsynowiec in #49
• Document SARIF options for Snyk test by @JackuB in #48
• Add a Python 3.6 variant action by @garethr in #56
• Adding a Python 3.7 action by @garethr in #57
• docs: use monitor command for the monitor step by @lirantal in #59
• feat: add gradle-jdk14 action by @gitphill in #61
• feat: add Gradle-jdk16 by @muscar in #62
• Update README.md to refer to IAC action vs Docker Action by @subsy in #69
• Update README.md by @zbraiterman in #71
• Fix typo by @subsy in #70
• Updated the Snyk IaC Readme to show a directory scan by @benlaplanche in #55
• chore: update codeowners in #81
• chore: cleanup project directory after download and move by @attriaayush in #83
• adds examples for Snyk Org and multiple files for IaC by @ksatirli in #82
• Issue #85 - Prevent unintentional file deletion by @WillBartee in #86
• Update README.md by @EC-Snyk in #95
• feat: add color to github actions output by @kevin-s31 in #94
• Add Gradle JDK 17 support by @jpJuni0r in #100
• Upgrade CodeQL Action from v1 to v2 by @karimhabush in #96
• Fixes dead links in READMEs by @Aleksander-Karlsson in #103
• Updating the Python Snyk Action README(s) with dependency installation information by @akanchhaS in #104
• Updating the python change in README template by @akanchhaS in #105
• chore: download from static.snyk.io by @bastiandoetsch in #108
• httpS by @YuuyaSatsuki in #39
• chore: have CI badge link to build by @jackwotherspoon in #101
• Add example to make gradle-jdk17 action compatible with actions/set-up-java by @ibaiul in #109
• fix: refined iac test action readme [CFG-1631] by @ofekatr in #112
• add python 3.9, 3.10 by @Inveracity in #111
• chore: fix workflow by @bastiandoetsch in #114
• Update CODEOWNERS by @asaf92 in #117
• Replace deprecated set-output with GITHUB_OUTPUT by @pergardebrink in #110
• chore: use curl and compression for cli download by @bastiandoetsch in #120

New Contributors

• @tomgonzo made their first contribution in #33
• @mattcreager made their first contribution in #41
• @JackuB made their first contribution in #45
• @jsynowiec made their first contribution in #49
• @gitphill made their first contribution in #61
• @muscar made their first contribution in #62
• @subsy made their first contribution in #69
• @zbraiterman made their first contribution in #71
• @attriaayush made their first contribution in #83
• @ksatirli made their first contribution in #82
• @WillBartee made their first contribution in #86
• @EC-Snyk made their first contribution in #95
• @kevin-s31 made their first contribution in #94
• @jpJuni0r made their first contribution in #100
• @karimhabush made their first contribution in #96
• @Aleksander-Karlsson made their first contribution in #103
• @akanchhaS made their first contribution in #104
• @bastiandoetsch made their first contribution in #108
• @YuuyaSatsuki made their first contribution in #39
• @jackwotherspoon made their first contribution in #101
• @ibaiul made their first contribution in #109
• @ofekatr made their first contribution in #112
• @Inveracity made their first contribution in #111
• @asaf92 made their first contribution in #117
• @pergardebrink made their first contribution in #110

Full Changelog: 0.3.0...0.4.0

Support GitHub Code Scanning

This release supports GitHub Code Scanning for the Docker Action as well as the newly released Infrastructure as Code Action. Scan your Terraform code, Kubernetes manifests or container images and upload the discovered issues to the GitHub Security tab.

Latest updated Snyk Actions

This release of the Snyk Actions adds several new Actions and improves the documentation.

• Added new Action to install Snyk into an existing workflow
• Added the Snyk Infrastructure as Code Action
• Per-version actions for Maven and Gradle
• Improved documentation

Initial marketplace release of GitHub Actions for Snyk

Generated new GitHub Actions templates

skip-checks: true

Initial release of GitHub Actions for Snyk

Generated new GitHub Actions templates

skip-checks: true