What's Changed

• [ADDED] Documentation on how to use it with 1Password CLI.
• [CHANGED] "--creds-path" does not default to "~/.credentials". (BREAKING)
• [FIXED] Number of errors/warnings shown correctly for single checks.

Full Changelog: https://github.com/ComplianceAsCode/auditree-framework/compare/v1.24.0...v2.0.0

• [ADDED] Add basic pre-commit hooks.
• [ADDED] Documentation about using parameterized.
• [CHANGED] Unify github demo code in one single place.
• [CHANGED] Removed yapf in favour of black as code formatter.
• [CHANGED] Use python 3.8 in GitHub Actions as newer flake8 does not support less than that.
• [CHANGED] Dot not update pre-commit hooks during "make develop".
• [FIXED] Update pre-commit dependencies.
• [FIXED] Support for agent signing of binary content.
• [FIXED] Demo fetcher/check for World Clock API replaced with GitHub API example.
• [FIXED] flake8 now scans demo code too.

• [ADDED] Locker shallow clone depth configuration.
• [ADDED] Multiple remote lockers for fetching evidence.
• [FIXED] Correctly acquire the locker lock when iterating repository commits.
• [FIXED] Raise the EvidenceNotFoundError exception for missing evidence.

• [FIXED] Set Python version to 3.7 in publish/deploy GH action to match other actions.

• [ADDED] Agent mode for storing cryptographically signed evidence.
• [ADDED] Configurable branch name for evidence repository.
• [ADDED] Configurable force push to remote for evidence repository.
• [ADDED] Fetcher helper for running local commands.
• [FIXED] Attempt to import missing fetchers from the include JSON configuration.

1.21.1

• [FIXED] Addressed PagerDuty notifier hanging and not firing pages.

• [ADDED] Repository pull request metadata retrieval added to Github service utility.

• [ADDED] Returned support for DerivedEvidence.
• [ADDED] Returned support for TmpEvidence.

• [FIXED] Evidence cache loading bug resolved.

• [ADDED] Pre-commit hook for running bandit as part of CI/CD was added.
• [CHANGED] Replaced the deprecated imp library with importlib.
• [CHANGED] Replaced the deprecated ibm_security_advisor_findings_api_sdk library with ibm_cloud_security_advisor.
• [FIXED] Added clarifying PagerDuty notifier documentation content.
• [FIXED] Addressed bandit (minor) security issue findings.