Skip to content

Commit

Permalink
feat: prepare release blog post for 0.1.0-alpha.10
Browse files Browse the repository at this point in the history
  • Loading branch information
ctron committed Jul 11, 2024
1 parent a6c93d1 commit f126e55
Showing 1 changed file with 40 additions and 0 deletions.
40 changes: 40 additions & 0 deletions blog/2024-07-04-release-0-1-0-alpha-10.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,40 @@
---
title: "Trustify: Release 0.1.0-alpha.10"
authors: ctron
tags: [ trustify, release ]
---

Today we released Trustify `0.1.0-alpha.10`. It's another alpha release as part of our weekly release cadence.
Read on to learn what's new.

<!--truncate-->

## New and noteworthy

* There are more labels that get applied during the upload process. It also is possible to automatically add labels
using the importer configuration.
* The system will now also record the SHA384 and SHA512 digests of uploaded documents.
* The package API endpoint and corresponding UI have been renamed to "PURL".

The reason for that is pretty simple, the discussion was not. Right now, these "packages" actually had been "PURLs",
and not much more. That led to confusion about what arguments to pass in, and what information to expect back.

For the future, we still want to collect information about packages, outside the context of an SBOM. However today,
that model didn't work well.
* In addition to titles, also descriptions will be returned now for advisories. As many advisories don't have a title,
this allows the UI to render a title, based on those descriptions instead.
* Allow setting labels during the upload of a document.
* There are some incompatible changes to the database migration. While our goal is to provide migrations as good as
possible, this change was simply too big. So, as we are still in an alpha cycle, the decision was made to simply
update the schema in a breaking way.
* The UI can show the relationship between package and vulnerabilities for each entity

## What's next?

Of course, we would recommend you try out the new version! In "[Trying out Trustify, on a local machine](2024-06-27-trying-out-trustify.md)", we introduced a quick and easy way to get there within minutes.

And of course:

* Check out the [release 0.1.0-alpha.10](https://github.com/trustification/trustify/releases/tag/v0.1.0-alpha.10).
* Reach out to [us on Matrix](https://matrix.to/#/#trustification:matrix.org), and let us know what you think.

0 comments on commit f126e55

Please sign in to comment.