Get trail attestations via the Kosli CLI
A new `get attestation` command was added to the CLI in v2.11.15. This gives you an easy way, using the attestation name, to retrieve information about attestations on either a trail or an artifact. See the docs for more details.
K8S reporter helm chart improvements
Scan namespaces based on regex patterns
A new config parameter reporterConfig.namespacesRegex
was added in the K8S reporter helm chart v1.7.0 to allow you to scan multiple namespaces in the cluster if they match a certain regex pattern. You can also provide multiple regex patterns separated by a comma.
Deploy the helm chart in security-constrained clusters
If you happen to have a security-constrained K8S cluster with rules enforced via e.g. Gatekeeper, you can face challenges running the reporter helm chart as it did not specify any security context parameters for the cronjob.
As of v1.8.0, the chart by default sets the following security context for the cronjob:
allowPrivilegeEscalation: false
runAsNonRoot: true
runAsUser: 1000