All Versions
28
Latest Version
Avg Release Cycle
48 days
Latest Release
-
Changelog History
Page 2
Changelog History
Page 2
-
v1.36.0 Changes
๐ New Features
- Ability to find duplicate files for xray (
--detect-duplicates
,--show-duplicates
). - Ability to find all utf8 encoded files for xray using the
--detect-utf8
flag (optionally dumping them to console, directory or tar file). - Ability to find the files with special permissions (
--show-special-perms
). - Ability to find all installed shells for xray.
- Container entry information for xray with file detection.
- Inherited image instructions (aka ONBUILD instructions) for xray.
- More image level stats for xray.
๐ Improvements
- ๐ Multiple tags for the build command.
- ๐
--http-probe-off
flag for the build command to provide a shortcut to disable HTTP probing. - โ
Flexible target image handling to use non-default tags if the
latest
tag doesn't exist and no explicit tag is provided.
- Ability to find duplicate files for xray (
-
v1.35.2 Changes
๐ New Features
- ๐จ
change-match-layers-only
xray flag to print only the layers that contain the matches.
๐ Improvements
- 0๏ธโฃ xray enhancement: printing to console by default for pattern or data matches.
๐ Bug Fixes
- ๐ Various xray command bug fixes.
- ๐จ
-
v1.35.1 Changes
๐ Improvements
- Ability to combine
probe
andexec
continue-after
modes
๐ Bug Fixes
- ๐ Various xray command bug fixes
- Ability to combine
-
v1.35.0 Changes
๐ New Features
- 0๏ธโฃ Console color output (on by default; disable with
no-color
) - Loading http probe request data from separate files
- Ability to execute external probe commands (
--http-probe-exec
and--http-probe-exec-file
flags) - โ
Ability to preserve original files in the target container discarding its test runtime data (
--preserve-path
and--preserve-path-file
) - ๐ Ability to pull container images if they don't exist locally yet (
--pull
and--show-plogs
) - File hashing for xray (
--hash-data
) - โ Additional flags to control the xray command executions (
--top-changes-max
,--reuse-saved-image
) - Ability to match by file path, file data and file hash for xray (
--change-path value
,--change-data value
,--change-data-hash value
)
๐ Improvements
- ๐ Lots of additional container build flags (
--tag-fat
,--cbo-add-host
,--cbo-build-arg
,--cbo-label
,--cbo-target
,--cbo-network
,--cbo-cache-from
). - โ Additional container runtime flags (
--cro-runtime
) sigint
should kill the running container (#186)
๐ Bug Fixes
- ๐ Various xray image layer inspection bug fixes
- 0๏ธโฃ Console color output (on by default; disable with
-
v1.34.0 Changes
๐ New Features
- ๐ New
xray
flags to control what layer change data to include in the generated reports (layer-changes-max
,all-changes-max
,add-changes-max
,modify-changes-max
,delete-changes-max
)
๐ Improvements
host
network flag handling enhancements.- Returning non-zero exit codes on failures
- โ Additional image checks to catch missing ENTRYPOINT/CMD instructions
๐ Bug Fixes
- ๐ Fixed container image listing bug that broke the
--target
value suggestions in the interactive prompt mode.
- ๐ New
-
v1.33.0 Changes
December 12, 2020๐ New Features
- Ability to interact with the temporary containers using the
--exec
and--exec-file
flags
๐ Improvements
- ๐ณ
npm
support enhancements (makes it possible to usenpm start
in Dockerfiles, which isn't recommended though)
๐ Bug Fixes
- ๐ Various bug fixes.
- Ability to interact with the temporary containers using the
-
v1.32.0 Changes
August 24, 2020๐ New Features
- Mapping container ports to specific host ports analyzing image at runtime (
--publish-port
and--publish-exposed-ports
flags)
๐ Improvements
- โก๏ธ
seccomp
security profile generation capability updates - ๐ User namespace handling improvements (thanks to
@solarnz
)
Binaries
๐ Build them from source or download from a CDN location:
- ๐ Mac
- ๐ Linux
- ๐ง Linux ARM
- ๐ง Linux ARM64
- Mapping container ports to specific host ports analyzing image at runtime (
-
v1.31.0 Changes
August 14, 2020๐ New Features
- Experimental HTTP probe command generation based on the API descriptions from the Swagger and OpenAPI specs (
--http-probe-apispec
and--http-probe-apispec-file
flags) - ๐ Image metadata editing capabilities to add, remove and update the LABEL, VOLUME, EXPOSE, ENV and WORKDIR instructions (
--new-workdir
,--new-expose
,--new-label
,--new-volume
,--remove-volume
,--remove-env
,--remove-label
,--remove-expose
and--image-overrides
combined with--expose
,--workdir
,--env
,--volume
,--label
,--env
)
๐ Improvements
- Layer change details available in the
xray
command reports when the--changes
flag is set. - System and engine information in the command reports to improve debugging
- Ability to enable crawling for the HTTP probes specified using the
--http-probe-cmd
flag - ๐ Improved HTTP probe crawler documentation
- Experimental HTTP probe command generation based on the API descriptions from the Swagger and OpenAPI specs (
-
v1.30.0 Changes
July 27, 2020๐ New Features
- ๐
lint
command (initial Dockerfile linting capabilities with a basic set of checks) - ๐ HTTP probe crawler (automatically probes additional endpoints referenced in the processed targets; see the
--http-probe-crawl
and related flags)
๐ Improvements
- โ ARM64 support (need more people to test!)
--http-probe-exit-on-failure
flag to exit execution when all HTTP probe calls fail--include-bin-file
and--include-exe-file
flags to make it easier to specify multiple binaries and executables loading them from filesxray
command report enhancements
Binaries
๐ Build them from source or download from a CDN location:
- ๐ Mac
- ๐ Linux
- ๐ง Linux ARM
- ๐ง Linux ARM64
- ๐
-
v1.29.0 Changes
March 18, 2020๐ New Features
- ๐ Interactive CLI prompt. For more info about the interactive prompt see
go-prompt
.
๐ Improvements
xray
command output improvements- โ Additional image data saved with the
xray
command reports (--add-image-manifest
and--add-image-config
flags)
Binaries
๐ Build them from source or download from a CDN location:
- ๐ Interactive CLI prompt. For more info about the interactive prompt see