Grafeas v0.2.0 release

[Aysylu Greenberg]

Hello Grafeas and Kritis Community,

I'm excited to announce the Grafeas v0.2.0 release! You can get it through the corresponding Docker image, us.gcr.io/grafeas/grafeas-server:v0.2.0, and Helm chart. The highlights are:

• Support for SBOM, using SPDX spec.
• Enhanced support for Occurrences, with the following additions (via v1beta1 API):
  • DSSE Envelope,
  • archival timestamp.
• Enhanced support for Vulnerability Notes and Occurrences, with the following additions (via v1beta1 API):
  • per-source CVE reporting,
  • CWEs tracking,
  • CVSS v2 and v3 scores,
  • improved package types support,
  • vendor information,
  • inclusive version ranges.
• Added support for ARM builds.
• Improved validation and permissions checks.
• Improved development support on Windows.

Big thanks to Eric Zimanyi, Hemil Kadakia, Camilo Aguilar, Ovidiu Ghinet, Sean Dukehart, Wiktor Kozlik, Geri Ochoa, Michael Parker, Shmuel Herzberg, Neetha Sebastian, Dina Graves Portman, Yinpeng Li, Alex Cope, Pietro Ferretti, Catherine Jones, Nicholas Cho, Yousef Alowayed, Tito Mbagwu, Yonghe Zhao, Nolan Emirot, Ethan Anderson, and Josh Soref for your contributions to Grafeas.

Hope everyone has a happy and healthy New Year!

Cheers,

Aysylu