All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.
- Uncouple db migration from app deployment (#61)
- Validate issuer/URL by scheme and host instead of string prefix (#62)
- Database CLI (#45)
- Re-design model and replace projects.yaml with postgres database (#40, #58)
- Add verbose logging (#32)
- Separate authentication and API endpoint logic (#41)
- Strengthen GitHub authentication (#51)
- Change
/upload/sbomresponse (#47) - Misc CI improvements (#48, #50)
- Use correct DependendencyTrack HTTP request method (#30)
- Escape unverified JWT
issclaim in log output (#60)
- Include /livez endpoint
- Support
isLatestDependencyTrack post parameter
- Changed application port in Dockerfile
- Initial release of PIA (Project Identity Authority)
- OIDC-based authentication broker for SBOM uploads to DependencyTrack
- FastAPI-based REST API
- Support for GitHub Actions OIDC tokens
- Support for Jenkins OIDC tokens
- Project configuration via
projects.yaml