release: v0.58.0 [main]

[aqua-bot]

🤖 I have created a release beep boop

0.58.0 (2024-12-02)

Features

• add workspaceRelationship (#7889) (d622ca2)
• add cvss v4 score and vector in scan response (#7968) (e0f2054)
• go: construct dependencies in the parser (#7973) (bcdc0bb)
• go: construct dependencies of go.mod main module in the parser (#7977) (5448ba2)
• k8s: add default commands for unknown platform (#7863) (b1c7f55)
• misconf: log causes of HCL file parsing errors (#7634) (e9a899a)
• oracle: add flavors support (#7858) (b9b383e)
• secret: Add built-in secrets rules for Private Packagist (#7826) (132d9df)
• suse: Align SUSE/OpenSUSE OS Identifiers (#7965) (45d3b40)
• Update registry fallbacks (#7679) (5ba9a83)

Bug Fixes

• alpine: add UID for removed packages (#7887) (07915da)
• aws: change CPU and Memory type of ContainerDefinition to a string (#7995) (aeeba70)
• cli: Handle empty ignore files more gracefully (#7962) (4cfb2a9)
• debian: infinite loop (#7928) (d982e6a)
• fs: add missing defered Cleanup() call to post analyzer fs (#7882) (ab32297)
• Improve version comparisons when build identifiers are present (#7873) (eda4d76)
• k8s: check all results for vulnerabilities (#7946) (797b36f)
• misconf: do not erase variable type for child modules (#7941) (de3b7ea)
• misconf: handle null properties in CloudFormation templates (#7813) (99b2db3)
• misconf: load full Terraform module (#7925) (fbc42a0)
• misconf: properly resolve local Terraform cache (#7983) (fe3a897)
• misconf: Update trivy-checks default repo to mirror.gcr.io (#7953) (9988147)
• misconf: wrap AWS EnvVar to iac types (#7407) (54130dc)
• redhat: don't return error if root/buildinfo/content_manifests/ contains files that are not contentSets files (#7912) (38775a5)
• report: handle [email protected] schema for misconfigs in sarif report (#7898) (19aea4b)
• sbom: Fixes for Programming Language Vulnerabilities and SBOM Package Maintainer Details (#7871) (461a68a)
• terraform: set null value as fallback for missing variables (#7669) (611558e)

---

This PR was generated with Release Please. See documentation.

[knqyf263]

@DmitriyLewen Do you think we can wrap up #7889? If not, I'll move it to v0.59.0. No rush.

[DmitriyLewen]

I need to add relationships between root and modules.
But it shouldn't be hard.

I'll try to make it before release.
if something goes wrong - I'll let you know and we'll move this task to v0.59.0

[knqyf263]

I need to add relationships between root and modules.

I believe it should be easy after #7985 unless I'm missing something.

[knqyf263]

I wanted to include document changes in v0.58.0, but I couldn't make it. I'll do that before v0.58.1.

[simar7]

I wanted to include document changes in v0.58.0, but I couldn't make it. I'll do that before v0.58.1.

Which PRs are those?

[knqyf263]

I've opened it now.
#8022

[simar7]

@DmitriyLewen @nikpivkin @afdesk could you approve the PR?