Go modules · #2621

github.com/boostsecurityio/poutine

v1.1.6boostsecurityio/poutine ↗

Last release 1 months ago
09 Jul 2026
Release timing varies
gaps range from 8 days to 4 months
Some releases are documented
notes for 10 of 40 stable releases
Nothing withdrawn
no release was ever pulled
2 years old
93 releases · first in 2024

Release timeline

93 releases since 2024

20252026

Releases

v1.1.7-0.20260709184029-bd4c1f86fe8c9 Jul 2026pre-release
Nothing published for this version
v1.1.622 May 2026
Release notes
What's Changed
- skip persisting with version check when running in ci by @SUSTAPLE117 in #439
Full Changelog: v1.1.5...v1.1.6
Open source →
Additional notes
v1.1.6 Latest

Latest

Compare

Choose a tag to compare

Open source →
v1.1.522 May 2026
Release notes
What's Changed
- Fix Default Branch Detection For Analysis by @SUSTAPLE117 in #437
- add version check call to poutine by @SUSTAPLE117 in #438
Full Changelog: v1.1.4...v1.1.5
Open source →
Additional notes
v1.1.5

Compare

Choose a tag to compare

Open source →
v1.1.417 Apr 2026
Release notes
What's Changed
- Reworked Refs Resolution by @SUSTAPLE117 in #423
- feat(config): discover .github/poutine.yml as a config path by @graelo in #424
New Contributors
- @graelo made their first contribution in #424
Full Changelog: v1.1.3...v1.1.4
Open source →
Additional notes
v1.1.4

Compare

Choose a tag to compare

Open source →
v1.1.4-0.20260415210901-f5f1cd166bf215 Apr 2026pre-release
Nothing published for this version
v1.1.38 Apr 2026
Release notes
Changelog for poutine v1.1.3 🎉

This release focuses on core engine improvements, stability fixes, and modernization of the toolchain. The biggest shift is the move away from exec-based Git operations toward a fully in-memory model using go-git, along with improved resiliency and observability during analysis.

Major Improvements 🌟🌟
- ⚡ In-Memory Git with go-git v6: Replaced exec-based Git operations with go-git using in-memory storage. This significantly improves performance, portability, and reduces reliance on system binaries, by @SUSTAPLE117.
  (#400)
- 🛡️ Resilient Repository Batch Fetching: Improved robustness of repository batch fetching, reducing failures during large-scale analysis operations, by @SUSTAPLE117.
  (#399)
- 📊 Analysis Progress Monitoring Improvements: Enhanced visibility into analysis progress, making long-running operations easier to track and debug, by @SUSTAPLE117.
  (#419)
Improvements 🔧
- 🧪 Snapshot Testing Added: Introduced snapshot testing to improve regression detection and testing confidence, by @SUSTAPLE117.
  (#401)
- ⚙️ Go 1.26 Upgrade + Dependency Refresh: Upgraded to Go 1.26 and refreshed dependencies for improved performance and compatibility, by @SUSTAPLE117.
  (#412)
- 🔐 Improved Rule Handling for GitHub Actions: Configured skip actions to be ignored for the github_action_from_unverified_creator_used rule, improving rule accuracy, by @mbarbero.
  (#398)
- 📦 Goreleaser Configuration Updates: Updated release configuration and tooling for improved build and distribution workflows, by @SUSTAPLE117.
  (#417), (#418)
Bug Fixes 🐛
- 🐳 Docker Image Parsing Fixes: Fixed issues with Docker image parsing and purl generation, by @SUSTAPLE117.
  (#413)
- 📄 YAML Parsing Fixes: Resolved YAML parsing errors affecting analysis reliability, by @SUSTAPLE117.
  (#414)
- 🔑 GitHub Fine-Grained PAT Compatibility: Fixed organization repository listing failures when using fine-grained tokens without Issues:Read, by @fproulx-boostsecurity.
  (#415)
- 🧾 SARIF Taxonomy GUID Fix: Corrected SARIF taxonomy GUID issues to ensure proper report compatibility, by @SUSTAPLE117.
  (#416)
Dependency Updates ⬆️

GitHub Actions
- Updated github/codeql-action from 3.30.5 to 4.31.2. (#370)
- Updated ossf/scorecard-action from 2.4.2 to 2.4.3. (#371)
- Updated step-security/harden-runner from 2.13.0 to 2.13.1. (#375)
- Updated actions/upload-artifact from 4.6.2 to 5.0.0. (#376)
- Updated actions/setup-go from 5.5.0 to 6.4.0. (#403)
- Updated goreleaser/goreleaser-action from 6.4.0 to 7.0.0. (#411)
- Updated actions/deploy-pages from 4.0.5 to 5.0.0. (#410)
- Updated actions/checkout from 5.0.0 to 6.0.2. (#408)
- Updated sigstore/cosign-installer across versions 3.9.2 → 4.0.0 → 4.1.1. (#377), (#405)
Go Modules
- Updated gitlab.com/gitlab-org/api/client-go from 0.151.0 to 0.157.1. (#369)
- Updated github.com/open-policy-agent/opa from 1.9.0 to 1.10.0. (#372)
- Updated github.com/mark3labs/mcp-go from 0.41.1 to 0.42.0. (#373)
- Updated golang.org/x/oauth2 from 0.31.0 to 0.32.0. (#374)
- Updated golang.org/x/crypto from 0.42.0 to 0.45.0. (#380)
Full Changelog 📜

For a detailed view of all changes, see the full changelog.
Open source →
Additional notes
v1.1.3

Compare

Choose a tag to compare

Open source →
v1.1.26 Apr 2026
Release notes
What's Changed
- build(deps): bump gitlab.com/gitlab-org/api/client-go from 0.151.0 to 0.157.1 by @dependabot[bot] in #369
- build(deps): bump github/codeql-action from 3.30.5 to 4.31.2 by @dependabot[bot] in #370
- build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by @dependabot[bot] in #371
- build(deps): bump github.com/open-policy-agent/opa from 1.9.0 to 1.10.0 by @dependabot[bot] in #372
- build(deps): bump github.com/mark3labs/mcp-go from 0.41.1 to 0.42.0 by @dependabot[bot] in #373
- build(deps): bump step-security/harden-runner from 2.13.0 to 2.13.1 by @dependabot[bot] in #375
- build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by @dependabot[bot] in #376
- build(deps): bump sigstore/cosign-installer from 3.9.2 to 4.0.0 by @dependabot[bot] in #377
- build(deps): bump golang.org/x/oauth2 from 0.31.0 to 0.32.0 by @dependabot[bot] in #374
- build(deps): bump golang.org/x/crypto from 0.42.0 to 0.45.0 in the go_modules group across 1 directory by @dependabot[bot] in #380
- Add Resiliency to Repo Batch Fetch by @SUSTAPLE117 in #399
- Configured 'skip' actions for rule 'github_action_from_unverified_creator_used' are ignored by @mbarbero in #398
- Add Snapshot Testing by @SUSTAPLE117 in #401
- build(deps): bump actions/setup-go from 5.5.0 to 6.4.0 by @dependabot[bot] in #403
- build(deps): bump sigstore/cosign-installer from 4.1.0 to 4.1.1 by @dependabot[bot] in #405
- build(deps): bump goreleaser/goreleaser-action from 6.4.0 to 7.0.0 by @dependabot[bot] in #411
- build(deps): bump actions/deploy-pages from 4.0.5 to 5.0.0 by @dependabot[bot] in #410
- feat: replace exec-based git with go-git v6 in-memory storage by @SUSTAPLE117 in #400
- Go 1.26 + Deps Upgrade by @SUSTAPLE117 in #412
- fix docker image parsing and purls by @SUSTAPLE117 in #413
- Fix Yaml Parse Errors by @SUSTAPLE117 in #414
- build(deps): bump actions/checkout from 5.0.0 to 6.0.2 by @dependabot[bot] in #408
- fix(github): org repo listing fails with fine-grained PATs lacking Issues:Read by @fproulx-boostsecurity in #415
- Fix SARIF Taxonomy GUID by @SUSTAPLE117 in #416
- Updated Goreleaser Config by @SUSTAPLE117 in #417
- updated goreleaser version by @SUSTAPLE117 in #418
Full Changelog: v1.0.8...v1.1.2
Open source →
Additional notes
v1.1.2

Compare

Choose a tag to compare

Open source →
v1.1.06 Apr 2026
Nothing published for this version
v1.0.9-0.20260405004919-ca62d12c383d5 Apr 2026pre-release
Nothing published for this version
v1.0.9-0.20260404092727-445ac1066f5a4 Apr 2026pre-release
Nothing published for this version
v1.0.9-0.20260402181337-3b89252feffb2 Apr 2026pre-release
Nothing published for this version
v1.0.9-0.20260326160300-9023469c749526 Mar 2026pre-release
Nothing published for this version
v1.0.89 Mar 2026
Release notes
What's Changed
- Use case-insensitive matching for Git error "Not a valid object name" by @mdferdousalam in #389
- Add --fail-on-violation flag to exit non-zero when violations are detected by @mbarbero in #392
- Fix SARIF formatter silently dropping findings from build dependencies by @mbarbero in #393
New Contributors
- @mdferdousalam made their first contribution in #389
- @mbarbero made their first contribution in #392
Full Changelog: v1.0.7...v1.0.8
Open source →
Additional notes
v1.0.8

Compare

Choose a tag to compare

Open source →
v1.0.72 Feb 2026
Release notes
What's Changed
- Add more structured metadata fields for programmatic access of LOTP targets by @fproulx-boostsecurity in #386
Full Changelog: v1.0.6...v1.0.7
Open source →
Additional notes
v1.0.7

Compare

Choose a tag to compare

Open source →
v1.0.7-0.20260130185543-64833302a77c30 Jan 2026pre-release
Nothing published for this version
v1.0.613 Jan 2026
Release notes
What's Changed
- Add structured metadata fields to findings for programmatic access by @fproulx-boostsecurity in #385
Full Changelog: v1.0.5...v1.0.6
Open source →
Additional notes
v1.0.6

Compare

Choose a tag to compare

Open source →
v1.0.59 Jan 2026
Release notes
What's Changed
- Add GHSA-pwf7-47c3-mfhx to OSV advisories database by @kawsarahmedbhuiyan in #381
- Add ubuntu-slim as built-in GitHub Actions runner by @Copilot in #383
- Fix SARIF validation errors for GitHub CodeQL upload by @Copilot in #384
New Contributors
- @kawsarahmedbhuiyan made their first contribution in #381
Full Changelog: v1.0.4...v1.0.5
Open source →
Additional notes
v1.0.5

Compare

Choose a tag to compare

Open source →
v1.0.428 Oct 2025
Release notes
What's Changed
- Add Boost Sarif Metadata by @SUSTAPLE117 in #367
Full Changelog: v1.0.3...v1.0.4
Open source →
Additional notes
v1.0.4

Compare

Choose a tag to compare

Open source →
v1.0.328 Oct 2025
Nothing published for this version
v1.0.3-0.20251027201053-e2f9bd6b784827 Oct 2025pre-release
Nothing published for this version
v1.0.227 Oct 2025
Nothing published for this version
v1.0.2-0.20251027180105-8f3b2fdb730027 Oct 2025pre-release
Nothing published for this version
v1.0.2-0.20251009193345-c861b1b13e309 Oct 2025pre-release
Nothing published for this version
v1.0.2-0.20251009145258-e604ca19e5479 Oct 2025pre-release
Nothing published for this version
v1.0.2-0.20251008205509-078da2736f148 Oct 2025pre-release
Nothing published for this version
v1.0.16 Oct 2025
Nothing published for this version
v0.18.1-0.20251003191153-fd2979addaf43 Oct 2025pre-release
Nothing published for this version
v0.18.1-0.20251002163417-c0c56d0707a02 Oct 2025pre-release
Nothing published for this version
v0.18.1-0.20250602135000-68f289d615c12 Jun 2025pre-release
Nothing published for this version
v0.18.02 Jun 2025
Nothing published for this version
v0.17.1-0.20250507201717-13090e16f3317 May 2025pre-release
Nothing published for this version
v0.17.1-0.20250425182712-cee72a96707d25 Apr 2025pre-release
Nothing published for this version
v0.17.018 Apr 2025
Nothing published for this version
v0.16.113 Feb 2025
Nothing published for this version
v0.16.1-0.20241211144846-a3abbda9195c11 Dec 2024pre-release
Nothing published for this version
v0.16.1-0.20241204223449-fa1914ec93884 Dec 2024pre-release
Nothing published for this version
v0.16.022 Nov 2024
Nothing published for this version
v0.15.3-0.20241122160445-4d52b8ec756622 Nov 2024pre-release
Nothing published for this version
v0.15.3-0.20241121143908-eaa5c38b227a21 Nov 2024pre-release
Nothing published for this version
v0.15.3-0.20241121110436-7ec98202de5721 Nov 2024pre-release
Nothing published for this version
v0.15.3-0.20241120195026-871a8db649fd20 Nov 2024pre-release
Nothing published for this version
v0.15.224 Oct 2024
Nothing published for this version
v0.15.2-0.20241024200935-160d529d7e6524 Oct 2024pre-release
Nothing published for this version
v0.15.2-0.20240920135559-efcfd9729ac520 Sept 2024pre-release
Nothing published for this version
v0.15.2-0.20240918213800-1b0f7386bb4418 Sept 2024pre-release
Nothing published for this version
v0.15.2-0.20240918212722-ad96eeebedaa18 Sept 2024pre-release
Nothing published for this version
v0.15.2-0.20240918150436-a6dcf6c3ed1c18 Sept 2024pre-release
Nothing published for this version
v0.15.2-0.20240917172519-28fc7a33566a17 Sept 2024pre-release
Nothing published for this version
v0.15.2-0.20240916155829-d8229b99f85516 Sept 2024pre-release
Nothing published for this version
v0.15.2-0.20240909153952-f37cc59b93aa9 Sept 2024pre-release
Nothing published for this version
v0.15.19 Sept 2024
Nothing published for this version
v0.15.1-0.20240828221414-eb0379d0a19728 Aug 2024pre-release
Nothing published for this version
v0.15.1-0.20240827190342-233dc8aaad7c27 Aug 2024pre-release
Nothing published for this version
v0.15.1-0.20240826154444-42eb8de6dfa626 Aug 2024pre-release
Nothing published for this version
v0.15.1-0.20240821205829-cbbc2b2326d621 Aug 2024pre-release
Nothing published for this version
v0.15.1-0.20240815154950-6ff057c2218115 Aug 2024pre-release
Nothing published for this version
v0.15.1-0.20240812174851-9ef84c1a981b12 Aug 2024pre-release
Nothing published for this version
v0.15.1-0.20240810134303-fdc220eea3c410 Aug 2024pre-release
Nothing published for this version
v0.15.1-0.20240809211501-e259b09e5f959 Aug 2024pre-release
Nothing published for this version
v0.15.02 Aug 2024
Nothing published for this version

github.com/boostsecurityio/poutine

Release timeline

Releases

What's Changed

Choose a tag to compare

What's Changed

Choose a tag to compare

What's Changed

New Contributors

Choose a tag to compare

Changelog for poutine v1.1.3 🎉

Major Improvements 🌟🌟

Improvements 🔧

Bug Fixes 🐛

Dependency Updates ⬆️

GitHub Actions

Go Modules

Full Changelog 📜

Choose a tag to compare

What's Changed

Choose a tag to compare

What's Changed

New Contributors

Choose a tag to compare

What's Changed

Choose a tag to compare

What's Changed

Choose a tag to compare

What's Changed

New Contributors

Choose a tag to compare

What's Changed

Choose a tag to compare

Changelog for `poutine` v1.1.3 🎉