Project: Clair (Provisioning / Security & Compliance)
File: CHANGELOG.md

<a name="unreleased"></a> <a name="v4.7.0-rc.1"></a> : Remove libindex Airgap option : update to new config module : bump github.com/prometheus/client_golang : bump golang.org/x/net from 0.10.0 to 0.11.0 : bump github.com/klauspost/compress from 1.16.5 to 1.16.6 : bump peter-evans/create-pull-request from 5.0.1 to 5.0.2 : bump github.com/streadway/amqp from 1.0.0 to 1.1.0 : bump github.com/urfave/cli/v2 from 2.25.5 to 2.25.7 : bump github.com/urfave/cli/v2 from 2.25.3 to 2.25.5 : bump github.com/google/go-containerregistry : bump go.opentelemetry.io/otel/exporters/jaeger : bump github.com/urfave/cli/v2 from 2.3.0 to 2.25.3 : bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace : bump github.com/quay/claircore from 1.5.2 to 1.5.3 : bump golang.org/x/sync from 0.1.0 to 0.2.0 : bump golang.org/x/net from 0.9.0 to 0.10.0 : bump github.com/rs/zerolog from 1.29.0 to 1.29.1 : bump go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace : bump go.opentelemetry.io/otel/exporters/jaeger : bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace : bump github.com/ugorji/go/codec from 1.2.9 to 1.2.11 : bump github.com/klauspost/compress from 1.16.4 to 1.16.5 : bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp : bump go.opentelemetry.io/otel/trace from 1.11.0 to 1.15.1 : bump github.com/jackc/pgx/v4 from 4.18.0 to 4.18.1 : bump gopkg.in/square/go-jose.v2 from 2.5.1 to 2.6.0 : bump peter-evans/create-pull-request from 5.0.0 to 5.0.1 : bump peter-evans/create-pull-request from 4.2.4 to 5.0.0 : bump actions/stale from 7 to 8 : bump peter-evans/create-pull-request from 4.2.3 to 4.2.4 : bump actions/setup-go from 3 to 4 : bump golang.org/x/net from 0.5.0 to 0.7.0 : bump docker/build-push-action from 3 to 4 : bump Claircore to v1.5.8 : bump Claircore to v1.5.7 : bump Claircore to v1.5.6 : bump Claircore to v1.5.5 : bump Claircore to v1.5.4 : Add the osv updater to the local-dev config : Update opentelemetry to v1.16.0 : bump Claircore to v1.5.2 : bump Claircore to v1.5.1 : produce nightly for ppc64le : Only ask dependabot to care about direct dependencies : updated nightly for s390x support : added s390x support : move emulator tests to a nightly run : add gomod ecosystems to dependabot : Remove 1.19 : Bump Claircore to v1.4.22 : Update go version in go.mod : Bump Claircore to v1.4.21 : Bump Claircore to v1.4.20 : Add back GIT_HASH as needed for image name : Update go-image version in docker-compose manifest : Use our dedicated metric for the go version : Update go version in Dockerfile : Bump claircore to v1.4.18 : use common workflow in main module CI : use common workflow in config module CI : fix nightly connection strings : rename yamllint config : fix nightly-ci error : use rabbitmq as STOMP broker in nightly CI : use rabbitmq as STOMP broker in tests : update nightly job to work : update go versions : use new `cmd.LoadConfig` : use new `cmd.LoadConfig` : implement modular configs : better version information : add newtype for Durations : add some omitempty tags : update module to remove x/sys dependency : Better versioning when building the service image : Add a dashboard panel to surface running versions : use rabbitmq instead of activemq : remove init process : update old `go get` command : fix host flag order - : remove reference to "filters" ### Go.Mod : update json (de)serializer : debug log calls to apiError : fix request_id logging : fix ParseIP usage ### Notifier : Avoid double reference : override default behavior for "host" header : rework tests : plumb Context into Dialer : remove apparent ActiveMQ-ism : switch to module release for stomp client ### Updater : Extend default updater time to 6 hours <a name="v4.6.1"></a> : Remove libindex Airgap option : v4.6.1 changelog bump : Bump Claircore to v1.4.21 : update json (de)serializer : fix request_id logging : fix ParseIP usage ### Notifier : Avoid double reference <a

: use httputil to construct requests : add automatic memory limit discovery : bump actions/stale from 6 to 7 : bump peter-evans/create-pull-request from 4.1.4 to 4.2.3 : bump gsactions/commit-message-checker from 1 to 2 : v4.6.0 changelog bump : Bump claircore to v1.4.17 : Bump Claircore to v1.4.16 : Bump Claircore to v1.4.15 : Bump Claircore to v1.4.14 : Update to Go 1.18 for local-dev : added ppc64le support : Bump Claircore to v1.4.13 : Bump claircore to v1.4.12 : use extracted git archive : update usage of `set-output` : update cache action : add tests for odd architectures : omit Dockerfile build args : enable go1.19 : inject version into built `clairctl` binaries ### Clairctl : use a better user-agent : update with new signer : Add the passed host to the signer : use signer : update for httputil changes : use git-archive for version information : fix typo in link : use new signer scheme in test : add a `request_id` to logs ### Httputil : rework request signing and request restriction : add signer option : add explicit signer argument <a name="v4.5.1"></a> : Bump claircore to v1.4.12 <a name="v4.5.0"></a> : bump peter-evans/create-pull-request from 4.1.3 to 4.1.4 : Remove windows 386 as a binary target for releases : v4.5.0 changelog bump : Bump Claircore to v1.4.11 : Bump Claircore to v1.4.10 : Bump Claircore to v1.4.9 : bump Claircore to v1.4.8 : Add delete command : don't use internal client : unify version information <a name="v4.5.0-rc.0"></a> : remove Quay keyserver support : bump actions/stale from 5 to 6 : bump peter-evans/create-pull-request from 4.1.2 to 4.1.3 : bump peter-evans/create-pull-request from 4.1.1 to 4.1.2 : bump peter-evans/create-pull-request from 4.0.4 to 4.1.1 : bump peter-evans/create-pull-request from 4.0.3 to 4.0.4 : bump peter-evans/create-pull-request from 4.0.2 to 4.0.3 : bump docker/setup-qemu-action from 1 to 2 : bump docker/login-action from 1 to 2 : bump docker/setup-buildx-action from 1 to 2 : bump docker/build-push-action from 2 to 3 : bump actions/download-artifact from 2 to 3 : bump actions/setup-go from 2 to 3 : bump actions/upload-artifact from 2 to 3 : bump peter-evans/create-pull-request from 4.0.1 to 4.0.2 : bump actions/stale from 4 to 5 : bump peter-evans/create-pull-request from 3.14.0 to 4.0.1 : bump actions/cache from 2 to 3 : replace API key request form URL : Bump claircore to v1.4.4 : v4.5.0-rc.0 changelog bump : Bump claircore to v1.4.7 : Add back Publish Binaries to upload clairctl versions : bump Claircore to v1.4.6 : bump Claircore to v1.4.5 : bump claircore v1.4.2 -> v1.4.3 : Bump claircore v1.4.1 -> 1.4.2 : bump claircore to v1.3.2 : fix prerelease conditional : fix config tidy check : update workflows and machinery for go1.18 : better argument error messages ### Clairctl : fix error reporting for streaming responses : Don't use flag default combo : add "omitempty" tags everywhere : implement TextMarshaler for LogLevel : add top-level docs : remove rpmscanner files on startup : First wipe anything that might be left before starting clair indexers : fix DB connection charts : Only count index report creation latency for successful requests : Add DB connections to Grafana dashboard : Add dedicated serviceAccount : Wipe all the temporary files in the process of being fetched : Wipe all the contents of /tmp on container start : Use the readyz endpoint in startup probes Fixes ### Docker-Compose : remove -mod=vendor flag : strip binaries to reduce size : fix build with newer ubi8/ubi-minimal image : update for

add trimpath : note tested `docker-compose` version : add config reference cross-checking : add notes on metrics : add link checker : update claircore version : patch update dependencies : update claircore version : update minimum go version : update discovery endpoint : use less-verbose instrumentation construction : update notification endpoints - : fix test log panic : Refactor Matcher to align with indexer : handle no notifier in "combo" mode : Return 4XX status code when Index() returns tarfs.ErrBadFormat : allow custom health function : log when request is rate-limited : Update matcher client to match server definition : Spread clairhttpindexerv1requestduration buckets : rework indexer buckets : update initialization : clone headers on request <a name="v4.4.4"></a> : v4.4.4 changelog bump : Bump claircore v1.4.1 -> 1.4.2 <a name="v4.4.3"></a> : v4.4.3 changelog bump : update claircore version ### Webhook : clone headers on request <a name="v4.4.2"></a> : v4.4.2 changelog bump : update claircore version <a name="v4.4.1"></a> : v4.4.1 changelog bump : bump claircore to v1.3.2 ### Httptransport : handle no notifier in "combo" mode <a name="v4.4.0"></a> : v4.4.0 changelog bump <a name="v4.4.0-rc.7"></a> : v4.4.0-rc.7 changelog bump : use runner context object <a name="v4.4.0-rc.6"></a> : bump actions/checkout from 2 to 3 : v4.4.0-rc.6 changelog bump : fix extract step : remove unused AffectedManifest handler <a name="v4.4.0-rc.5"></a> : v4.4.0-rc.5 changelog bump : update nightly version description : fix tar prefix <a name="v4.4.0-rc.4"></a> : v4.4.0-rc.4 changelog bump : checkout repo where needed <a name="v4.4.0-rc.3"></a> : bump peter-evans/create-pull-request from 3.12.1 to 3.14.0 : v4.4.0-rc.3 changelog bump : Update zlog dep : Update grafana dashboards : matcher add status code label to matcher latency metric <a name="v4.4.0-rc.2"></a> : v4.4.0-rc.2 changelog bump : fix "chglog" typo <a name="v4.4.0-rc.1"></a> : v4.4.0-rc.1 changelog bump : rewrite go version check : remove `env` usage <a name="v4.4.0-rc.0"></a> : update zlog and corresponding otel packages : move config package to new module : fall back to root cgroup : add automatic runtime configuration : bump peter-evans/create-pull-request from 3.12.0 to 3.12.1 : bump peter-evans/create-pull-request from 3.11.0 to 3.12.0 : bump peter-evans/create-pull-request from 3.10.1 to 3.11.0 : bump peter-evans/create-pull-request from 3.5.1 to 3.10.1 : v4.4.0-rc.0 changelog bump : bump claircore to v1.3.1 : update claircore version : update claircore version : update changelog to cope with submodule tags : update claircore version : update claircore version : update actions to use native conditional : add CI job for config module : fix output/outputs typo : fix nightly setup : factor out go module and build caching : add conditional step hack : prevent push on unchanged code : use common documentation action : use common expiration action : add caches to release workflow : move config into a discrete step : add some composite actions : use local go for mod check : add dependabot for GitHub Actions : allow TLS for API server : update for config package changes : uniform import/export compression : add additional report flags : add retries to manifest fetching : internal client improvements : add DeleteManifests method : add deprecation notice to `maxconnpool` : MarshalText on value receiver : auto-size concurrent request capacity : add tls for http API : update sample config for crda-matcher : add documentation to all exported types : consolidate and document default values : move to use Mode and LogLevel types : implement and use validator interface : add linter : add test for struct tags : swap notifier config structs : use json for unmarshal test : move notifier structs into this package : remove

in API : struct ordering and simplifications : remove unused FilterSets method : do base64 encoding smarter : Better visualization of API latency. : Update grafana dashboard to relect new metrics names : revert headless service : grafana dashboard updates : make indexer service headless : adding missing template variables : need to have single braces for strings : add initContainer to wipe VPC on startup : add set podManagementPolicy to Parallel : use a real target for generating configMap : different directories for template and configmap : add indentation : add grafana configMap : update config secret : update zlog : add ActiveMQ container : add paused skopeo container : use profiles and anchors : update `maxconnpool` : link to upstream go package documentation : add crda remote matcher details : update claircore : update go-containerregistry : Adding GC DB charts to dashboard : Update dashboard with Notifier metrics : fix error message : use new IndexerV1 handler : add IndexerV1 type : add concurrency limiter : add instrumentation helper : add error helper : fix content negotiation - : error message correction : gofmt simplification : simpler codegen for openapi JSON : move signed client creation : add DeleteManifests method : update to new interfaces : config changes to restore grafana functionality : quay: update for other config changes : prometheus: update endpoints : pgadmin: update for multiple databases : grafana: update endpoint : traefik: use file configuration : clair: update default dev config : update targets and docs : add cascade constraints : update to new interfaces : move Service interface here : change DeleteNotification to CollectNotifications : use external concurrency in Delivery, Poller, Processor : documentation and simplification pass : update OpenAPI spec with delete operations : update tests : add Init function : refactor notification methods : refactor receipt methods : refactor status getters : refactor status setters : unify connection string handling : update for changes in the config package : add debug server : fix a code smell <a name="v4.3.6"></a> : v4.3.6 changelog bump : update claircore : clone headers out of Config struct <a name="v4.3.5"></a> : v4.3.5 changelog bump : Revert "chore: v3.4.5 changelog bump" : v3.4.5 changelog bump : update claircore version <a name="v4.3.4"></a> : v4.3.4 changelog bump : update changelog to cope with submodule tags <a name="v4.3.3"></a> : v4.3.3 changelog bump : update claircore version <a name="v4.3.2"></a> : v4.3.2 changelog bump : update go-containerregistry <a name="v4.3.1"></a> : v4.3.1 changelog bump : update claircore version <a name="v4.3.0"></a> : v4.3.0 changelog bump : update secrets path : remove dumb-init, tar <a name="v4.3.0-rc.0"></a> : v4.3.0-rc.0 changelog bump : update claircore version : automation around v2 issues : update claircore version : update go version : create expiring, dated image : update go version : re-vendor after modifying the module : use push flag with build : add "nightly" workflow : add script to edit module for nightly : update to new API : add CacheAge field : stop unneeded vendoring : update saas file : fix typo : add Cache-Control header to VulnerabilityReport response : documentation updates : fix auth test logging : default garbage collection on : move to ctxlock : introduce the new NotifyContext <a name="v4.2.3"></a> : v4.2.3 changelog bump : bump claircore version <a name="v4.2.2"></a> : v4.2.2 changelog bump : bump claircore version <a name="v4.2.1"></a> : v4.2.1 changelog bump : bump claircore version <a name="v4.2.0"></a> : v4.2.0 changelog bump : bump claircore to v0.5.2 : rate limit index report requests : capture rate-limited requests <a name="v4.2.0-rc.2"></a> : update claircore : Fix microdnf install inconsistencies <a

: remove jzelinskie from codeowners : update CODEOWNERS : update responserecorder : bump claircore version : add support for s3 registries using V4 Fixes ### Config : omit Authorization header for empty claims Fixes ### Docker : reflect quay Dockerfile updates : remove key management API : use new enrichers : use the response recorder : remove package : add grafana to docker-compose : remove whitelist env var for quay conf : disable updaters creates empty updater sets Fixes ### Migrations : add future key table removal : remove KeyStore interface : fix paths ### Postgres : update to new test database harness : update test harness : remove KeyStore implementation and tests : remove KeyManager and KeyStore : disable transport compression in matcher : remove keymanager usage <a name="v4.1.6"></a> : v4.1.6 changelog bump : bump claircore version <a name="v4.1.5"></a> : v4.1.5 changelog bump : bump claircore version <a name="v4.1.4"></a> : v4.1.4 changelog bump : bump claircore version <a name="v4.1.3"></a> : v4.1.3 changelog bump : bump claircore <a name="v4.1.2"></a> : v4.1.2 changelog bump : bump claircore version : use the response recorder ### Services : disable transport compression in matcher <a name="v4.1.1"></a> : v4.1.1 changelog bump : bump claircore version : add support for s3 registries using V4 Fixes ### Config : omit Authorization header for empty claims <a name="v4.1.0"></a> : use RateLimiter where it seems appropriate : v4.1.0 changelog bump : bump claircore version : use golang major version tag for dev env : use quay.io/projectquay/golang image : update to use new libvuln API : move to updates.Manager interface : move to zlog : create package and RateLimiter : update call to Libindex contstructor : enable readiness endpoint <a name="v4.1.0-alpha.3"></a> : v4.1.0-alpha.3 changelog bump : update claircore revision : changelog fixups : validate based on combo mode or not : fix LatestUpdateOperations method : check msg contents in integration tests : remove direct zerolog use : fix small unit test race : add testing command : fix small race <a name="v4.1.0-alpha.2"></a> : v4.1.0-alpha.2 changelog bump : use stdlib time.Time encoding Closes ### Docs : minor updates : update configuration file reference <a name="v4.1.0-alpha.1"></a> : switch to using codec package : v4.1.0-alpha.1 changelog bump : v4.1.0-alpha.1 changelog bump : bump cc to v0.4.0 : update claircore version for database fix : bump cc v0.3.0 : fix yaml file indentation issue : sort changelog by semver : bump in go.16, bump out go1.14 : enable CI on stable branches : fix openshift ci/cd script : update golang container for go-mod in app-sre : add notifier to app interface : use quay.io image in CI and Dockerfile : fix initialization error logging : reorganize initialization : add Shutdown struct : bump to v0.2.0 : Add subpath to clairctl : remove request body buffering : fix panic on request failure ### Codec : add package for codec pooling : add matchers settings : allow gc to be disabled : rework into specific validators : add support matrix : update cli reference : fix psk related config references : install clairctl correctly : use correct clairctl subcommands Closes ### Documentation : modified testing.md for clarity ### Httptransport : add mime type to indexer and matcher handler : return Accepted when not ready : fix panic in metrics registration : use correct handler for state endpoint : check for err before deferring resp.Body.Close() : remove New function : add standalone initialization functions : bump to opentelemetry

: database metrics for notifier : implement prometheus http : remove unintented change in config.yaml : move to zlog throughout : add Initialized method : construct notification objects directly : do AffectedManifests calls in chunks : remove defcon1 severity : plumb update retention in <a name="v4.0.6"></a> : v4.0.6 changelog bump : bump claircore to v0.1.26 : changelog fixups : add support for s3 registries using V4 Fixes <a name="v4.0.5"></a> : v4.0.5 changelog bump : bump cc stable to v0.1.25 <a name="v4.0.4"></a> : v4.0.4 changelog bump : bump cc to stable v0.1.24 : sort changelog by semver : wire up DisableUpdaters option <a name="v4.0.3"></a> : v4.0.3 changelog bump : bump cc stable to v0.1.23 <a name="v4.0.2"></a> : 4.0.2 changelog bump : fix panic on request failure - <a name="v4.0.1"></a> : v4.0.1 changelog bump : bump cc to v0.1.22 stable <a name="v4.0.0"></a> : v4.0.0 changelog bump Dockerfile: Get build image from Quay instead of DockerHub cicd: use golang image from quay.io <a name="v4.0.0-rc.24"></a> : v4.0.0-rc.24 changelog bump : bump cc to v0.1.20 <a name="v4.0.0-rc.23"></a> : v4.0.0-rc.23 changelog bump : bump cc to v0.1.19 : use golang image from quay.io <a name="v4.0.0-rc.22"></a> : v4.0.0-rc.22 changelog bump : claircore v0.1.18 bump : update links in howto/api <a name="v4.0.0-rc.21"></a> : v4.0.0-rc.21 changelog bump : bump cc to v0.0.17 : bump create pull request action : fix and codify import arguments : update import and export online help : unifiy config, client handling : expose notification summary toggle : add 'omitempty' to 'updaters' config struct for correct marshalling : Fix slices in direct notifier : Get build image from Quay instead of DockerHub : add clairctl's new powers to the reference : Add information about AMQP delivery compatibility : fix pgadmin name : add summary tests : optionally disable per-manifest summary : log failed delivery reason <a name="v4.0.0-rc.20"></a> : v4.0.0-rc.20 changelog bump : bump claircore to v0.1.15 <a name="v4.0.0-rc.19"></a> : v4.0.0-rc.19 changelog bump : add custom config marshaling : new claircore version <a name="v4.0.0-rc.18"></a> : v4.0.0-rc.18 changelog bump : do less work <a name="v4.0.0-rc.17"></a> : claircore bump v0.1.13 : remove deprecated set-env commands : update documentation action : fix container build : add environment variables for clairctl : add Makefile target to build docs website : add pgadmin4 container : fix poller loop <a name="v4.0.0-rc.16"></a> : v4.0.0-rc.16 changelog bump : exclude darwin/arm64 : more debugging : more debugging : make sure the workspace exists : make empty changelog on manual trigger : rig up a workflow_dispatch to help debugging <a name="v4.0.0-rc.15"></a> : v4.0.0-rc.15 changelog bump : maybe there's some newline issues <a name="v4.0.0-rc.14"></a> : v4.0.0-rc.14 changelog bump : invalid goos+goarch pair <a name="v4.0.0-rc.13"></a> : v4.0.0-rc.13 changelog bump : fix goos/goarch <a name="v4.0.0-rc.12"></a> : v4.0.0-rc.12 changelog bump : parallelize release process, keep test failures : update some interactive help : update dependencies : make quay container ignore validations : ensure Content-Type header present in webhook notification : copy url struct Merge pull request from alecmerdler/webhook-notifier-headers <a name="v4.0.0-rc.11"></a> : v4.0.0-rc.11 changelog bump : allow HTTP client to specify claims : ensure yaml/json struct tag for auth 'Issuer' field are the same : pass configured client into notifier Merge pull request from alecmerdler/fix-issuer-struct-tag <a name="v4.0.0-rc.10"></a> : v4.0.0-rc.10 changelog bump : api reference check : bump api reference : update claircore version : remove redundant method check : yamllint and spellcheck : change OperationIDs for notification endpoints <a name="v4.0.0-rc.9"></a> : build container with local checkout <a name="v4.0.0-rc.8"></a> : v4.0.0-rc.8 changelog bump : fix container building <a name="v4.0.0-rc.7"></a> : v4.0.0-rc.7 changelog bump : move container building out of container <a name="v4.0.0-rc.6"></a> :

changelog bump : use multiline string for clairctl build command <a name="v4.0.0-rc.5"></a> : v4.0.0-rc.5 changelog bump : fix clairctl builds <a name="v4.0.0-rc.4"></a> : v4.0.0-rc.4 changelog bump : bump claircore to v0.1.9 : remove unused files : constrain changelog : commit check regexp fix : change log generation and releases : update for v4 : made discovery endpoint more Accepting : doc and commit check fixes : remove first update constraint <a name="v4.0.0-rc.3"></a> : psk fixup : claircore bump to v0.1.8 : fix nil check : use service prefix for simplified path routing : rework mdbook : use duration stringer : add similar logging to v3 <a name="v4.0.0-rc.2"></a> : bump cc and golang container <a name="v4.0.0-rc.1"></a> : use better guesses for "aud" claim : add keyserver algorithm allowlist : test multiple PSK signing algorithms : init default updaters : add import and export commands : update matcher configurables : reorganize updater configuration : ubi8 based dockerfile ### Go.Mod : update claircore version : add integration tests : wire through new configuration options : implement quay local development : test mode implementation : log better : correctly close channels after amqp delivery <a name="v4.0.0-alpha.7"></a> : add support for per-scanner configuration : make -mod=vendor opportunisitic () - : update to alpine:3.11 for newest rpm : update yaml to v3 : document exposed API <a name="v4.0.0-alpha.6"></a> : bump claircore version for severity fix <a name="v4.0.0-alpha.5"></a> : implement base64 -> ) <a name="v4.0.0-alpha.4"></a> : rework auth config : serve OpenAPI definition <a name="v4.0.0-alpha.3"></a> : bump claircore version : remove log.Lmsgprefix : report command : add differ and refactor client : set a canonical default port : run as unprivledged user by default : start writing v4-specific docs : wire in update endpoints : report write errors via trailer : add go testing matrix : fix gh-pages argument : more workflow automation : fix asset name Merge pull request from alecmerdler/openapi-fixes <a name="v4.0.0-alpha.2"></a> : update roadmap Fixes - : gofmt -s : remove bzr dependency : regenerate bill of materials : rename example config : added bill-of-materials : move all references in README to HEAD : use `path/filepath` instead of `path` : Create a ROADMAP : refresh godeps : refresh godeps : remove tests from docker file : add postgres 9.4 to travis : add metadata support along with NVD CVSS : refresh godeps : fix several tests : remove health checker : add missing copyright headers : refactor & do initial work towards PostgreSQL implementation : Fix `authentification` typo : add stale and issue template enforcement : change api port to api addr, rename RunV2 to Run. Fixes - : drop v1 api, changed v2 api for Clair v3. : add opentelemetry hooks : refactor fetcher & git pull on update : truncate namespace to "vMAJOR.MINOR" : compile alpine into clair binary : add support for v3.4 YAML schema : Rename detector type to DType : Add detectors for RPC : remove handleShutdown func : remove dependency on graceful : renamed V2 API to V3 API for

: fix remote addr shows reverse proxy addr problem : v2 api with gRPC and gRPC-gateway Fixes - : fix 404 error logging : WriteHeader on health endpoint Fixes - : fix anchor link in docs : fix pagination token that's returned to match what has been passed : log instead of panic when a response could not be marshaled : add call duration in logs : adjust postLayer error codes : add missing link field in vulnerability in getLayer : close gzip writer to flush it : fix postLayer response headers : add bad requests to insert layer : support gzip responses : reorder constants and add comments : make postLayer returns a Layer : implement fernet encryption of pagination tokens : fix putVulnerability (fill missing Namespace.Name and Name fields) : fix negative timestamps in notifications : fix 404->500 and NPE issues : add FeatureFromDatabaseModel : add "Content-Type" and "Server" headers : finish initial work on v1 API : implement delete notification : handle last page for notifications : implement get notification : fix log message when stopping the API server : implement put vulnerability : implement delete vulnerability : refactor endpoints and implement get vulnerability : fix graceful stop : implement post vulnerability : implement get namespaces route : implement delete layer route : use pointers in models to get proper `omitempty` semantics : use only one layer envelope : add JSON tags to API models : implement getLayer : fix /v1 router and some status codes : add request / response types and rename some fields : add initial work on the new API : simplify getLayer route and JSON output : return 400 if we can't extract a layer : Extracted client cert & HTTP JSON Render to utils. : Specify what packages cause the layer to have vulnerabilities. : updated version_format documentation. Fixes ### Api/Database : add the layer name that add each feature in getLayer : Add the ability to delete layers : add prometheus metrics to API routes : fix JSON struct tag misnomer : indexed layers for notifications : create namespace type Fixes ### Api/V3 : Add feature type to API feature : remove dependency on google empty message : prototool format : document and regenerate protos : regen protobufs : generate protobufs in docker : s/Authorization/Headers () - : introduce optional authorization : adjust error codes in postLayer : add Louis : init : use Etag header to communicate indexer state change : add "mode" argument : change version information : better introspection server defaults : logging and introspection setup : add configuration for introspection : use "Updaters" config option : fix header casing : remove os.Exit call on clean shutdown : add authorization checking : update claircore to 0.0.14 : remove goautoneg : reset writers when pulled from pool : remove vendor directory : rewrite imports : create module : Fix namespace update logic : Add more logging on ancestry cache hit : Use builder pattern for constructing ancestry : Implement worker detector support : move worker to top level package : mv notifier to top level : mv updater clair and mv severity to db : remove `types` package : catch both SIGINT and SIGTERM for graceful shutdown : updated mock tests, extensions, basic logic : start on clair cli tool : make pagination key error clearer : document constants : fix pprof : add updaters and tracing options : enable suse updater : removed worker config : not properly loaded error () - fixes - : fallover correctly to default config : fix default fallback : add top-level YAML namespace 'clair' Fixes - : better document example : replace old k8s manifests with helm : move grafana and compose here : delete unsupported tools : Revert "Merge pull request from jzelinskie/analyze-layers-v2" - : add missing := - Fixes - : only extract layers from history : Catch signals to delete tmp folder in local-analyze-images : Fix dead link from analyze-local-images' README : Use `return` instead of

in analyze-local-images Fixes - : Add a ability to force colored output in analyze-local-images : Add vendors to analyze-local-images : Pretty up analyze-local-images : Add colors / Modify spacing in the analyze-local-images's output : Show feature line only if there's a vuln in analyze-local-images : Add minimum severity support to analyze-local-images : adapt analyze-local-images for new API : load image history from 'manifest.json' first due to docker 1.10 changes. Fixes - : check-openvz-mirror-with-clair fix license : add copyright in check-openvz-mirror-with-clair : add copyright in analyze-local-images : Improve analyze-local-images docs and launch command. Fixes - : Wait for extraction to finish before continuing. : Don't pass -z to tar in analyze-local-images : Add a tool to analyze local Docker images : use exit(1) when there are vulnerabilities : fix the ingress template : return nil when detector is empty : add mapping for Ubuntu Eoan (19.10) : Handle FindAncestryAndRollback datastore.Begin() error Fixes - : Rename affected type to feature type (for Amazon Linux updater) : Split models.go into different files each contains one model : Move db logic to dbutil : add test for lock expiration : make locks SOI & add Extend method : Add StorageError type : Update feature model Remove source name/version fields Add Type field to indicate if it's binary package or source package : Rename affected Type to feature type : Add feature_type database model : remove FindLock from mock : remove FindLock() : add FindLock dbutil : add (Acquire|Release)Lock dbutils : add mapping for Ubuntu Cosmic (18.10) : Add FindKeyValue function wrapper : Add affected feature type : Replace Parent Feature with source metadata : Add parent feature pointer to Feature struct : rename utility functions with commit/rollback : move dbutil and testutil to database from pkg : Update database model and interface for detectors : Use LayerWithContent as Layer : changed Notification interface name : postgres implementation with tests. : Add some missing copyright headers : Mock Datastore interface : Allow specifying datastore driver by config Fixes - : Fix invalid error message : Find the FeatureVersion we try to insert before doing any lock : use constants to store queries : disable hash/merge joins in FindLayer : modify join table in FindLayer to reduce cost by 3.5x : fix notification test (wrong signature) : add docs about the interface : ignore insertLayer collisions to make it truly idempotent : ignore min versions during new vulnerability insertions : fix Ping() method in PostgreSQL's implementation : make notification tests more robust (old/new, update/delete vulnerabilities) : add created_at field for layers and vulnerabilities : fix notification design and add vulnerability history : add Insert/DeleteVulnerabilityFix : improve PostgreSQL test inits and cleanups : cache feature version upon lookup : add ability to list namespaces : fix feature version cache : write more of the notification system : don't prune locks when we renew one : create notification during vulnerability insertion : add vulnerability deletion support : fix keyvalue/notification tests : let handleErrors deal with the not found case : test and fix layer updates : fix cache collision (feature & feature versions) : remove an useless query in FindLayer : ensure that concurrent vulnerability/feature versions insertions work fine : add missing transaction commits and close opened statement before inserting feature

: update vulnerabilities only when necessary : allow removing fixed packages in vulnerabilities : add initial vulnerability support : add lock support : log and mask SQL errors : do insert/find layers (with their features and vulnerabilities) : Don't ignore empty results in toValue(s)() : Update cayley and use Triple instead of Quad : put missing predicates in consts and un-expose some of them Fixes - : Improve InsertVulnerabilities. : Update Cayley to fix slow deletions : Fix to a locking issue with PostgreSQL : Ensure that quads in a tx are applied in the desired order. : Use an estimator in Cayley's Size() w/ PostgreSQL : reduce pruneLocks/Unlock transaction. : reduce InsertPackages transaction : add layer deletion support : MetadataMap decodes from string : move token lib : copy whole namespace : Remove useless log message : updated for Clair V3, decoupled interfaces and models : fix SQL error reporting : convert to pure SQL : Add docker-compose.yml : add apk feature detector : consistent naming and godoc : add alpine-release detector : support pointers in tests : bump Go to 1.13 : add git dependency : update deps and move to Go 1.6 : syntax updates and s/xz/xz-utils : use environment variables : update for clair v4 : use alpine linux 3.5 (bis) : use alpine linux 3.5 : remove useless volume : fix typo in running-clair : add troubleshooting about kernel packages : turn README into full articles : add links to contrib tools : fix broken link : Correct docker-compose command : split http and json code blocks : improve GET/POST /v1/layers documentation : fix the docker cli of running clair in README.md : update config example : provide information to run Clair in README : Add missing field in API Example : fix a typo in the model Fixes ### Documentation : fix links to presentations Closes - Closes - Closes ### Documentation : add new 3rd party tool : Add proxy support : remove broken drone CI : init : add localhost postgres : add CleanAll() utility functions : remove duplicate vectorValuesToLetters definition : pass through CVSSv3 impact and exploitability score : remove unneeded use of init() : fixup incorrect copyright year : Parse CVSSv3 data from JSON NVD feed : Add JSON NVD parsing tests : Parse NVD JSON feed instead of XML : Use SHA256 instead of SHA1 for fingerprinting : Lister and Detector returns detector info with detected content : feature detector -> featurefmt : misc doc comment fixes : namespace detector -> featurens : data detector -> imagefmt : lock all drivers : Refactor featurefmt testing code : Extract origin package information from database : handle malformed packages : Extract source package metadata : handle malformed packages : Extract source package from rpm database : add empty filesmap tests for all : add missing lock : use HTTPS : ensure flag is largest elsa : fix ELSA version comparison : fix logging namespace : add missing version format : replace arrays with slices : Extract PotentialNamespace : Extract source packages and binary packages The featurefmt now extracts both binary packages and source packages from the package manager infos. : use namespace's versionfmt to specify listers : Ensure RHEL is correctly identified Fixes - : fix detecting duplicated namespaces problem : added multiple namespace testing for namespace detector : add notes for untracked namespaces : auto detect namespaces : lock updater - return correct bool value : add mailing list! : add issue template stable release notice : add issue template : move CONTRIBUTING to github dir : Fix git pull on non-git repository directory

### Glide : add errgroup and regenerate vendor : refresh dependencies : update to latest claircore : Remove implicit git submodules : also add option for nodeSelector : add option for tolerations : change postgresql connection string format in configmap template Fixes - : Fixed a typo in maintainers field. : allow for ingress path configuration in values.yml : Use Secret for config file. Fix some minor issues Fixes ### Imagefmt : Move layer blob download logic to blob.go : add basic latency summary : QoL changes to headers : HTTP correctness changes : rename index endpoint : add Accept-Encoding aware middleware : add State method : add quay enterprise as well : replace arrays with slices : default config to /etc/clair/config.yml : Use configuration file instead of flags and simplify app extension. : add ubuntu mapping Fixes ### Matcher : add basic latency summary : return OK instead of Created : add debug output : list vulnerabilities by namespace : Verify that the given webhook endpoint is an absolute URL : Add proxy parameter to webhook notifier : add README : add a timeout on the http client : fix notifier error handling and improve web hook error message : Rename HTTP to Webhook Notifier : fix a bug that prevented graceful shutdown in certain cases : retry upon failure : Allow custom notifiers to be registered. : add ServerName configuration for TLS : Refactor and add client certificate authentification support. Fixes ### Notifier/Database : refactor notification system and add initial Prometheus support : draft new notification system : fix the name of a field : lint and update Layer : avoid colliding with other detectors : fixed invalidating vulnerability cache query. : Remove unused test code : Move notification to its module : Split vulnerability.go to files in vulnerability module : Split ancestry.go to files in ancestry module : Add test for migrations : Split layer.go to files in layer module : Move namespace to its module : Move keyvalue to keyvalue module : Move lock to lock module : Move detector to pgsql/detector module : Split feature.go to table based files in feature module : Move batch queries to corresponding modules : Move extra logic in pgsql.go to util folder : Split testutil.go into multiple files : Fix failed tests : Fix pgsql test : Prevent inserting invalid entry to database : Remove unnecessary logs : Fix postgres queries for feature_type : Add proper tests for database migration : Add feature_type to initial schema : fix unchecked error : Implement database queries for detector relationship : Move queries to corresponding files : Add detector to database schema : update the query format : Expand layer, namespace column widths : only select distinct layers : searchNotificationLayerIntroducingVulnerability order by layer ID : Disable hashjoins to get introducing layers for notifications : Reduce cost of GetNotification by 2.5 : Use booleans instead of varchar to return creation status : Do not insert entry in VulnerabilityFixedInFeature if existing Fixes - : Replace liamstask/goose by remind101/migrate Fixes - : use subquery to plan GetNotification query () - : remove unnecessary join used in GetNotification () ### Pgsql/Migrations : fix dpkg default versionfmt : add index on VulnerabilityNotification.deletedat : add ldfv compound index : Add fsutil to contian file system utility functions : cerrors -> commonerr : utils/tar.go -> pkg/tarutil : init : use cockroachdb cipher suite : init : add token type : init : init from

: init : fix grafana's updater notes graph : correct notifier latency metric in grafana : add quantile to grafana : update grafana : add initial Prometheus support : add useful indexes : add debug message for duplicate layers : fix ordering : fixed issues address : fix IRC copypasta : clean up after README refactor : improve readability : s/Namespace/Feature Namespace : update to reflect ext directory : rm images from repo : add git dependency : add alpine data sources : s/1.2.2/1.2.4 : include data licenses for data sources () - : add reference to Klar tool : add master branch warning : Fix Kubernetes instructions : add instructions for kubernetes : Reduce logo size : Add logo : Update Docker Compose instructions : Add FeatureDetector and NamespaceDetector : fix godoc badge copypasta : add documentation with links : nitpick : fix link : add go report card : move diagram to architecture section : add diagram & custom data sources : minor grammar/spelling tweaks : add container badge : refresh with current priorities : add various talks & slides : replace latest by v1.2.2 and add reference to container repositories : split "Related Links" into projects/slides () - Fixes - : add dependencies to getting started : add terminology and generic customization : make API description consistence : s/notification/notifications : clarify "marked as read" notifications : continue to nitpick : add travis-ci badge : override match for RHEL hosts : move updaters and notifier into ext : Fix typo in headline : convert all filename specs to regexps : allow file names to be specified by regexp fixes ### Travis : fail if not gofmt -s : fail unformatted protos : add matrix for postgres : update to use Go 1.7, glide : allow golang 'tip' failures () - : test against Go 1.6 : disable install step : add missing rpm dependency : initial travis.yml : Drop support for postgres 9.4 postgres 9.4 doesn't support ON CONFLICT, which is required in our implementation. : talk about SUSE support : networking.k8s.io/v1beta1 : extract deduplicate function : remove original RunUpdate() : reimplement fetch() with errgroup : refactor to use errgroup : Add vulnsrc affected feature type : sleep before continuing the lock loop Fixes - : Log fetch completion : copy whole namespace when deduping vulns : Set vulns' Severity from NVD metadata fetcher if unknown : minimize vulns' lock duration in the NVD metadata fetcher : enable fetching of RHEL 5 vulnerabilities () - Fixes - : delete Ubuntu's repository upon bzr errors Fixes - : remove useless error : use a better link for Ubuntu vulnerabilities and rename some constants : add a clean function to fetchers : ignore "ubuntu-core" in the Ubuntu fetcher : ensure that ubuntu's notes are unique : namespace and split Ubuntu/RHEL vulnerabilities : update RHEL fetcher and add not-affected capability : update Ubuntu fetcher and add not-affected capability : ignore Debian's "temp" vulnerabilities : port updater and its fetchers : move each fetcher to its own package : fix typos : Add support for Ubuntu Vivid Core and ignore Vivid PhoneOverlay : Fix Ubuntu's partial update bug. : Refactor and merge fetcher responses Fixes - - : Always use `bzr revno` to get Ubuntu db's revision number. Fixes ### Updater : fix stuck updater process : minor cleanups : do not create notifications during the initial update : add alpine secdb fetcher : adapt several tests : 1.10-alpine : remove string.go : rm exec.go : rm

: Fix OVAL's log statements : remove unused pkg : update documented error codes : pagination now deterministic : add readme : return object on PUT/POST : 200 on PUT : Analyze layer content in parallel : Move services to top of the file : associate feature and namespace with detector : gofmt -s : spelling corrections : Update gopkg.in/yaml.v2 package : Add golang-set dependency : regenerate after removing graceful : updated vendor dir for grpc v2 api : regenerate vendor directory with glide : rm everything to prep for regeneration : convert to using constant over literal : init rpm versionfmt : remove leading digit requirement : handle a tilde correctly : update NVD URLs Fixes ### Vulnsrc : Refactor vulnerability sources to use utility functions : handle "none" CVE impact : s/pull/clone : avoid shadowing vars : unify schema and parse v3.5 : use new git-based ubuntu tracker : one vulnerability per CVE - ### Vulnsrc_rhel : cve impact : add test : minor changes : minor changes : rhsa_ID by default : one vulnerability by CVE Fixes ### Webhook : add JSON envelope : Fix tests for feature_type : fixed duplicated ns and ns not inherited bug : Rewrite unknown namespace warning : ns detectors now support VersionFormat : clarify maxFileSize purpose Fixes - : bump engine version : Mock datastore in worker's tests : remove duplicated tests : verify download status code : DetectData should return an error if the supported detector failed : remove double error : raise worker version number : change worker errors to bad request errors : remove namespace whitelist : move each data detector to their own packages and remove image format whitelist : fix dpkg detector and adapt tests : detect the status code when downloading a layer and expect 2XX. : Add a missing CleanURL : Move upgrade detection logic out of database to worker : proper tag name : bad tar flag Merge pull request from openSUSE/feature/opensuse v1: pagination now deterministic Merge pull request from alecmerdler/PROJQUAY-494 Merge pull request from ldelossa/louis/interface-refactor Merge pull request from ldelossa/louis/config-and-make Merge pull request from ldelossa/louis/middleware-packaging Merge pull request from ldelossa/louis/cc-bump-v0.0.17 Merge pull request from ldelossa/louis/severity-mapping Merge pull request from ldelossa/louis/environment-api Merge pull request from ldelossa/louis/state-json Merge pull request from ldelossa/louis/remove-healthhandler Merge pull request from mtougeron/update-ingress-apiversion Merge pull request from coreos/code-owners-update Merge pull request from

Merge pull request from thekbb/fix-broken-link-i-missed Merge pull request from thekbb/fix-links Merge pull request from jzelinskie/bump-v2-master Merge pull request from Allda/log-fix Merge pull request from Allda/updater_fix Merge pull request from noahklein/nvd-status-error Merge pull request from peacocb/peacocb-828-dos-on-ancestry-post Merge pull request from MVrachev/patch-1 Merge pull request from vsamidurai/master Merge pull request from imlonghao/bullseye Merge pull request from ldelossa/remove-detectors Merge pull request from Allda/openshift_cert Merge pull request from coreos/add-louis Merge pull request from jzelinskie/drone Merge pull request from ldelossa/remove-ancestry-copy Merge pull request from ldelossa/local-dev-readme-update Merge pull request from ldelossa/local-dev-clair-db Merge pull request from ldelossa/helm-local-dev Merge pull request from jzelinskie/CODEOWNERS Merge pull request from jzelinskie/mailing-list Merge pull request from flumm/disco Merge pull request from ericysim/amazon Merge pull request from Allda/lock_timeout Merge pull request from bluelabsio/path-templating Merge pull request from joelee2012/master Merge pull request from cnorthwood/tarutil-glob Merge pull request from KeyboardNerd/parallel_download Merge pull request from Allda/potentialNamespaceAncestry Merge pull request from KeyboardNerd/cache Merge pull request from jzelinskie/fix-sweet32 Merge pull request from Allda/feature_ns Merge pull request from KeyboardNerd/ref Merge pull request from KeyboardNerd/fix Merge pull request from KeyboardNerd/master Merge pull request from KeyboardNerd/license_test Merge pull request from jzelinskie/lock-tx Merge pull request from KeyboardNerd/update_ns Merge pull request from saromanov/fix-unchecked-error Merge pull request from KeyboardNerd/builder Merge pull request from KeyboardNerd/sourcepackage/featuretype Merge pull request from jzelinskie/updater-cleanup Merge pull request from dustinspecker/patch-1 Merge pull request from traum-ferienwohnungen/master Merge pull request from Allda/slices Merge pull request from jzelinskie/suse-config Merge pull request from jzelinskie/fix-presentations Merge pull request from kubeshield/master Merge pull request from openSUSE/reintroduce-suse-opensuse Merge pull request from Allda/rhel_severity Merge pull request from travelaudience/helm-tolerations Merge pull request from glb/elsa_CVEID Merge pull request from Katee/add-ubuntu-cosmic Merge pull request from brosander/helm-dep Merge pull request from HaraldNordgren/go_versions Merge pull request from KeyboardNerd/spkg/cvrf Merge pull request from KeyboardNerd/bug/git Merge pull request from Katee/include-cvssv3 Merge pull request from KeyboardNerd/spkg/model Merge pull request from KeyboardNerd/sourcePackage Merge pull request from Katee/update-sha1-to-sha256 Merge pull request from KeyboardNerd/featureTree Merge pull request from coreos/roadmap-1 Merge pull request from KeyboardNerd/feature/detector Merge pull request from haydenhughes/master Merge pull request from jzelinskie/probot Merge pull request from jzelinskie/gitutil Merge pull request from MackJM/wip/masternvdhttputil Merge pull request from yebinama/rhel_CVEID Merge pull request from KeyboardNerd/sidac/rm_layer Merge pull request from jzelinskie/grpc-refactor Merge pull request from KeyboardNerd/sidac/simplify Merge pull request from jzelinskie/pkg-pagination Merge pull request from jzelinskie/drop-graceful Merge pull request from KeyboardNerd/sidchen/feature Merge pull request from MackJM/wip/master_httputil Merge pull request from jzelinskie/gofmt Merge pull request from jzelinskie/nvd-urls Merge pull request from KeyboardNerd/sidchen/status Merge pull request from reasonerjt/fix-alpine-url Merge pull request from naibaf0/fix/helmtemplate/configmap/postgresql Merge pull request from robertomlsoares/update-helm-chart Merge pull request from brosander/helm-alpine-postgres Merge pull request from ErikThoreson/nvdupdates Merge pull request from hongli-my/fix-nvd-path Merge pull request from arno01/multi-stage Merge pull request from jzelinskie/document-proto Merge pull request from jzelinskie/ubuntu-git Merge pull request from qeqar/master Merge pull request from usr42/upgradeto1.10-alpine Merge pull request from jzelinskie/dockerize-protogen Merge pull request from tomer-1/patch-1 Merge pull request from KeyboardNerd/readme_typo Merge pull request from joerayme/bug/436 Merge pull request from KeyboardNerd/helm_typo Merge pull request from vdboor/master Merge pull request from yebinama/paclair Merge pull request from traum-ferienwohnungen/master Merge pull request from leandrocr/patch-1 Merge pull request from KeyboardNerd/master Merge pull request from ericchiang/coc Merge pull request from odg0318/master Merge pull request from bkochendorfer/contributing-link Merge pull request from yfoelling/patch-1 Merge pull request from ajgreenb/db-connection-backoff Merge pull request from caulagi/patch-1 Merge pull request from yebinama/proxy Merge pull request from coreos/stable-release-issue-template Merge pull request from yebinama/nvd_vectors Merge pull request from bseb/master Merge pull request from zamarrowski/master Merge pull request from dctrud/clair-singularity Merge pull request from grebois/master Merge pull request from jzelinskie/github Merge pull request from brunomcustodio/fix-ingress Merge pull request from arthurlm44/patch-1 Merge pull request from jzelinskie/linux-vulns Merge pull request from jzelinskie/move-token Merge pull request from InTheCloudDan/helm-tls-option Merge pull request from zmarouf/master Merge pull request from jzelinskie/helm Merge pull request from KeyboardNerd/ancestry_ Merge pull request from jzelinskie/woops Merge pull request from jzelinskie/docs-refresh Merge pull request from KeyboardNerd/ancestry_ Merge pull request from arminc/add-integration-clari-scanner Merge pull request from mssola/portus-integration Merge pull request from KeyboardNerd/grpc Merge pull request from jzelinskie/sleep-updater Merge pull request from KeyboardNerd/multiplens Merge pull request from KeyboardNerd/xforward Merge pull request from tianon/debian-buster Merge pull request from transcedentalia/master Merge pull request from KeyboardNerd/multiplens Merge pull request from swestcott/kubernetes-config-fix Merge pull request from KeyboardNerd/multiplens Merge pull request from caipre/patch-1 Merge pull request from knqyf263/handle_tilde Merge pull request from jzelinskie/https-sec-db Merge pull request from KeyboardNerd/fernet Merge pull request from jzelinskie/revendor Merge pull request from jzelinskie/rm-analyze-local-images Merge pull request from KeyboardNerd/logrus Merge pull request from KeyboardNerd/bill-of-materials Merge pull request from josuesdiaz/fixanalyzelocal Merge pull request from jzelinskie/oracle-update-fix Merge pull request from tianon/new-ubuntu-releases Merge pull request from caipre/add-logging Merge pull request from jzelinskie/featurens Merge pull request from jzelinskie/fix-ali Merge pull request from jzelinskie/analyze-layers-v2 Merge pull request from jzelinskie/fixoracle Merge pull request from

Merge pull request from davidxia/patch-1 Merge pull request from jzelinskie/malformedpkg Merge pull request from jzelinskie/cleanup Merge pull request from matslina/patch-1 Merge pull request from jzelinskie/readme-reboot Merge pull request from kevinburke/fix-404 Merge pull request from kevinburke/change-readme-text Merge pull request from jzelinskie/composeup Merge pull request from supereagle/update-image-spec-url Merge pull request from pizzarabe/Readme_Alpine35 Merge pull request from coreos/philips-patch-1 Merge pull request from pgburt/paulb-prod-users-integrations Merge pull request from jzelinskie/fixns Merge pull request from supereagle/update-dockerfile Merge pull request from supereagle/insecure-tls Merge pull request from jgsqware/master Merge pull request from jzelinskie/bad-ns-copy Merge pull request from Quentin-M/alpine_dfile Merge pull request from Quentin-M/log_ns Merge pull request from Quentin-M/alpine_dfile Merge pull request from jzelinskie/fix-alpine Merge pull request from jzelinskie/ext Merge pull request from jzelinskie/fixmigration6 Merge pull request from jzelinskie/fixpagination Merge pull request from jzelinskie/layeridorder Merge pull request from jzelinskie/rmimage Merge pull request from jzelinskie/readme-git Merge pull request from jzelinskie/versions Merge pull request from miketheman/patch-1 Merge pull request from alexei-led/master Merge pull request from jzelinskie/fixmigrationorder Merge pull request from Djelibeybi/oraclelinux-support Merge pull request from jzelinskie/200mb Merge pull request from jzelinskie/revert-suse Merge pull request from jzelinskie/enginebump Merge pull request from jzelinskie/alpine Merge pull request from jzelinskie/layer-sort-id Merge pull request from coreos/addidxdeleted_at Merge pull request from coreos/dishashjoinsintroducing Merge pull request from jzelinskie/travispg Merge pull request from coreos/searchintro_optimize Merge pull request from jzelinskie/layerdiffindex Merge pull request from jzelinskie/index Merge pull request from JensPiegsa/patch-1 Merge pull request from Quentin-M/nvd_severity Merge pull request from Quentin-M/imp_docs Merge pull request from Quentin-M/rheluniquefixedin Merge pull request from Quentin-M/replace_goose Merge pull request from jzelinskie/travis Merge pull request from mattmoor/yakkety Merge pull request from openSUSE/feature/opensuse Merge pull request from robszumski/doc-link Merge pull request from jzelinskie/doc-move Merge pull request from vbatts/redhatrelease_detector Merge pull request from optiopay/doc-klar-ref Merge pull request from Quentin-M/readme_v122 Merge pull request from Quentin-M/godeps_implsubmod Merge pull request from Quentin-M/deleteubunturepository Merge pull request from jgsqware/integrate-glide Merge pull request from databus23/patch-1 Merge pull request from Quentin-M/db_registration Merge pull request from jzelinskie/authlayer Merge pull request from Quentin-M/contribcleanupsignals Merge pull request from jzelinskie/travis Merge pull request from jzelinskie/healthfix Merge pull request from coreos/webhook_proxy Merge pull request from coreos/fix_k8s Merge pull request from harsha-y/master Merge pull request from coreos/cleanup_contrib Merge pull request from coreos/contribfixdeadlink Merge pull request from BWITS/master Merge pull request from jzelinskie/config-fixes Merge pull request from jzelinskie/dockerfile-update Merge pull request from philips/add-k8s-contrib Merge pull request from Quentin-M/reduce_logo Merge pull request from Quentin-M/logo Merge pull request from coreos/crtrb_forcecolor Merge pull request from coreos/ctrb_minseverity Merge pull request from jzelinskie/fix-config Merge pull request from Quentin-M/ctrb_minseverity Merge pull request from jzelinskie/namespaces Merge pull request from jzelinskie/rootyamlkey Merge pull request from keloyang/allowHost Merge pull request from unageanu/support-docker-compose Merge pull request from liangchenye/getvulns Merge pull request from Quentin-M/fix_pprof Merge pull request from jzelinskie/README-deps Merge pull request from Quentin-M/fvfindbefore_lock Merge pull request from coreos/readme-feature-namespace Merge pull request from coolljt0725/fix_readme Merge pull request from liangchenye/v1doc Merge pull request from coreos/simplify Merge pull request from coreos/sp Merge pull request from Quentin-M/sql Merge pull request from sjourdan/fixvulntypo Merge pull request from maxking/doc Merge pull request from mnuessler/causedByPackage Merge pull request from liangchenye/read-manifest Merge pull request from Quentin-M/master Merge pull request from jzelinskie/fixdockerfile Merge pull request from liangchenye/master Merge pull request from davidxia/patch1 Merge pull request from Quentin-M/custom_notifiers Merge pull request from coreos/ubdater Merge pull request from coreos/fixsqltovalue Merge pull request from coreos/sn Merge pull request from coolljt0725/updateanalyzelocalimagedoc Merge pull request from coolljt0725/fix_stop Merge pull request from Quentin-M/configfile Merge pull request from Quentin-M/triple Merge pull request from mrqwer88/checkopenvzmirrorwithclair Merge pull request from Quentin-M/notifier_tls Merge pull request from Quentin-M/predcst Merge pull request from coreos/travisfix Merge pull request from Quentin-M/insertvulns Merge pull request from coreos/gc Merge pull request from coreos/travis Merge pull request from Quentin-M/updater_refactor Merge pull request from Quentin-M/causedby Merge pull request from stapelberg/patch-1