| Add Claude skill for backport automation Signed-off-by: nscuro <nscuro@protonmail.com> | 25 days ago |
| Merge pull request #7229 from DependencyTrack/dependabot/github_actions/oasdiff/oasdiff-action/breaking-0.1.14 Bump oasdiff/oasdiff-action/breaking from 0.1.13 to 0.1.14 | 5 days ago |
| Configure code formatting rules * Enables Java code formatting using palantir-java-format. It aligns closest with the format we already have. * Enables POM formatting using SortPOM. * Adds `.editorconfig` and `.gitattributes` for editor-independent indentation, line break, and whitespace preferences. * Adds IntelliJ code style configuration that aligns with the import ordering enforced by Spotless. * Adds formatting of Proto files with buf, and enforces formatting in CI. Signed-off-by: nscuro <nscuro@protonmail.com> | 17 days ago |
| Make Dockerfile more layer cache friendly Copies 3rd party and 1st party dependencies in separate steps, such that the large 3rd party copy can be reused across image versions that only touch 1st party code, which is the vast majority of builds. 3rd party libs account for ~90MB so this should also reduce storage requirements in container registries quite a bit. Tested and verified that this benefit still holds true when using a single `COPY` statement. Signed-off-by: nscuro <nscuro@protonmail.com> | 13 days ago |
| Log failures during LDAP authentication as warning Logging them under debug level makes them practically invisible to operators until they explicitly raise the level. Since these are technical issues related to the LDAP setup, they should surface without requiring manual action. Signed-off-by: nscuro <nscuro@protonmail.com> | 5 days ago |
| Bump org.openapitools:openapi-generator-maven-plugin Bumps org.openapitools:openapi-generator-maven-plugin from 7.24.0 to 7.25.0. --- updated-dependencies: - dependency-name: org.openapitools:openapi-generator-maven-plugin dependency-version: 7.25.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> | 11 days ago |
| Relocate analyzer_identity notification field Relocates the `analyzer_identity` field in the notification proto schema from the shared `Vulnerability` message to `NewVulnerabilitySubject`. Reason being that the field is not relevant to all messages that convey vulnerability information, and related fields like `analysis_trigger` are also not on the `Vulnerability` message. Signed-off-by: nscuro <nscuro@protonmail.com> | 2 days ago |
| [maven-release-plugin] prepare for next development iteration | 16 days ago |
| Allow operators to load external JDBC drivers Adds a new `libs-external` directory in the container image, notably NOT writable by the application user, where operators can mount 3rd party libraries into, such as the AWS JDBC driver. Refactors data source creation to no longer hardcode a driver implementation. The appropriate driver is now picked based on the JDBC URL alone, which enables usage of `jdbc:aws-wrapper:postgresql:` etc. Also removes the direct dependency to Google's `postgres-socket-factory`. Operators relying on it will need to acquire a fat far (https://github.com/googlecloudplatform/cloud-sql-jdbc-socket-factory#building-the-drivers) and mount it into the container just like AWS users. For us, removal of this dependency means ~10MB and ~20 JARs less to worry about. Signed-off-by: nscuro <nscuro@protonmail.com> | 13 days ago |
| [maven-release-plugin] prepare for next development iteration | 16 days ago |
| Disable SELinux label for traefik service (#6937) Rootless Podman with SELinux enforcing blocks containers from dialing the Podman socket once it's mounted in. This stops traefik from discovering the frontend and apiserver services, so the app never becomes reachable. security_opt: label=disable drops SELinux confinement for traefik only, per Podman's own guidance for this case. Signed-off-by: Volodymyr Kucheriaviy <248452481+volodymyr-jdev@users.noreply.github.com> | 1 month ago |
| [maven-release-plugin] prepare for next development iteration | 16 days ago |
|
| 15 days ago |
| Relocate analyzer_identity notification field Relocates the `analyzer_identity` field in the notification proto schema from the shared `Vulnerability` message to `NewVulnerabilitySubject`. Reason being that the field is not relevant to all messages that convey vulnerability information, and related fields like `analysis_trigger` are also not on the `Vulnerability` message. Signed-off-by: nscuro <nscuro@protonmail.com> | 2 days ago |
| [maven-release-plugin] prepare for next development iteration | 16 days ago |
| Remove ServiceRegistry from plugin API Replaces the generic `ServiceRegistry` with a fully typed `ExtensionContext` handed to `ExtensionFactory#init`. Makes it clearer to extensions what host services are available, and easier for tooling such as ArchUnit to enforce architecture constraints (e.g. no exposure of internal types). Technically a breaking change, but the API is not yet published, and we're the only consumers. Signed-off-by: nscuro <nscuro@protonmail.com> | 4 days ago |
| Refactor component metrics computation to avoid pathological query plans Signed-off-by: nscuro <nscuro@protonmail.com> | 9 days ago |
| Relocate analyzer_identity notification field Relocates the `analyzer_identity` field in the notification proto schema from the shared `Vulnerability` message to `NewVulnerabilitySubject`. Reason being that the field is not relevant to all messages that convey vulnerability information, and related fields like `analysis_trigger` are also not on the `Vulnerability` message. Signed-off-by: nscuro <nscuro@protonmail.com> | 2 days ago |
| Remove ServiceRegistry from plugin API Replaces the generic `ServiceRegistry` with a fully typed `ExtensionContext` handed to `ExtensionFactory#init`. Makes it clearer to extensions what host services are available, and easier for tooling such as ArchUnit to enforce architecture constraints (e.g. no exposure of internal types). Technically a breaking change, but the API is not yet published, and we're the only consumers. Signed-off-by: nscuro <nscuro@protonmail.com> | 4 days ago |
| Remove ServiceRegistry from plugin API Replaces the generic `ServiceRegistry` with a fully typed `ExtensionContext` handed to `ExtensionFactory#init`. Makes it clearer to extensions what host services are available, and easier for tooling such as ArchUnit to enforce architecture constraints (e.g. no exposure of internal types). Technically a breaking change, but the API is not yet published, and we're the only consumers. Signed-off-by: nscuro <nscuro@protonmail.com> | 4 days ago |
| [maven-release-plugin] prepare for next development iteration | 16 days ago |
| [maven-release-plugin] prepare for next development iteration | 16 days ago |
| Fix N+1 queries in dependency graph endpoint Constructs the response for `/api/v1/component/{projectUuid}/dependencyGraph/{componentUuid}` using a single recursive CTE and batched lookups instead of separate lookups per visited component. Migrates the endpoint away from JDO, entirely to JDBI. Removes the custom `jsonbContains` JDO method as it is no longer used. Signed-off-by: nscuro <nscuro@protonmail.com> | 2 days ago |
| Remove ServiceRegistry from plugin API Replaces the generic `ServiceRegistry` with a fully typed `ExtensionContext` handed to `ExtensionFactory#init`. Makes it clearer to extensions what host services are available, and easier for tooling such as ArchUnit to enforce architecture constraints (e.g. no exposure of internal types). Technically a breaking change, but the API is not yet published, and we're the only consumers. Signed-off-by: nscuro <nscuro@protonmail.com> | 4 days ago |
| Remove ServiceRegistry from plugin API Replaces the generic `ServiceRegistry` with a fully typed `ExtensionContext` handed to `ExtensionFactory#init`. Makes it clearer to extensions what host services are available, and easier for tooling such as ArchUnit to enforce architecture constraints (e.g. no exposure of internal types). Technically a breaking change, but the API is not yet published, and we're the only consumers. Signed-off-by: nscuro <nscuro@protonmail.com> | 4 days ago |
| Configure code formatting rules * Enables Java code formatting using palantir-java-format. It aligns closest with the format we already have. * Enables POM formatting using SortPOM. * Adds `.editorconfig` and `.gitattributes` for editor-independent indentation, line break, and whitespace preferences. * Adds IntelliJ code style configuration that aligns with the import ordering enforced by Spotless. * Adds formatting of Proto files with buf, and enforces formatting in CI. Signed-off-by: nscuro <nscuro@protonmail.com> | 17 days ago |
| Blame-ignore code formatting changes Signed-off-by: nscuro <nscuro@protonmail.com> | 17 days ago |
| Configure code formatting rules * Enables Java code formatting using palantir-java-format. It aligns closest with the format we already have. * Enables POM formatting using SortPOM. * Adds `.editorconfig` and `.gitattributes` for editor-independent indentation, line break, and whitespace preferences. * Adds IntelliJ code style configuration that aligns with the import ordering enforced by Spotless. * Adds formatting of Proto files with buf, and enforces formatting in CI. Signed-off-by: nscuro <nscuro@protonmail.com> | 17 days ago |
| Configure code formatting rules * Enables Java code formatting using palantir-java-format. It aligns closest with the format we already have. * Enables POM formatting using SortPOM. * Adds `.editorconfig` and `.gitattributes` for editor-independent indentation, line break, and whitespace preferences. * Adds IntelliJ code style configuration that aligns with the import ordering enforced by Spotless. * Adds formatting of Proto files with buf, and enforces formatting in CI. Signed-off-by: nscuro <nscuro@protonmail.com> | 17 days ago |
| Add Squawk for migration linting * Adds a `lint-migrations` Make target for linting new or changed migrations with Squawk. * Integrates the new Make target in a new "Lint Migrations" GitHub Actions job. * Extends development docs with instructions for migration linting, and running selected Flyway migrations without transaction. The goal is to prevent us from accidentally shipping database migrations that cause excessive locking for users operating large DT deployments. Squawk will run with its default rule set for now, we'll definitely need to tweak this over time. Signed-off-by: nscuro <nscuro@protonmail.com> | 2 months ago |
|
| 15 days ago |
| Add AGENTS.md Maintains basic agent instructions in AGENTS.md. Because Claude doesn't recognize this file by default, uses an CLAUDE.md symlink. The instructions explicitly instruct agents to NOT create GitHub issues or PRs. This is an attempt to prevent slop contributions. Signed-off-by: nscuro <nscuro@protonmail.com> | 6 months ago |
| initial commit | 7 years ago |
|
| 15 days ago |
|
| 15 days ago |
| Create LICENSE.txt | 8 years ago |
| Make Dockerfile more layer cache friendly Copies 3rd party and 1st party dependencies in separate steps, such that the large 3rd party copy can be reused across image versions that only touch 1st party code, which is the vast majority of builds. 3rd party libs account for ~90MB so this should also reduce storage requirements in container registries quite a bit. Tested and verified that this benefit still holds true when using a single `COPY` statement. Signed-off-by: nscuro <nscuro@protonmail.com> | 13 days ago |
| docs: point README CI badges at main branch Signed-off-by: CJstate <142857225+CJstate@users.noreply.github.com> | 19 days ago |
| Add Claude skill for backport automation Signed-off-by: nscuro <nscuro@protonmail.com> | 25 days ago |
| Updated email address | 4 years ago |
| Add v5 migration notes Signed-off-by: nscuro <nscuro@protonmail.com> | 3 months ago |
| Configure code formatting rules * Enables Java code formatting using palantir-java-format. It aligns closest with the format we already have. * Enables POM formatting using SortPOM. * Adds `.editorconfig` and `.gitattributes` for editor-independent indentation, line break, and whitespace preferences. * Adds IntelliJ code style configuration that aligns with the import ordering enforced by Spotless. * Adds formatting of Proto files with buf, and enforces formatting in CI. Signed-off-by: nscuro <nscuro@protonmail.com> | 17 days ago |
| Merge pull request #7282 from DependencyTrack/dependabot/maven/lib.jetty.version-12.1.13 Bump lib.jetty.version from 12.1.12 to 12.1.13 | 1 day ago |
