Hipcheck 3.15.0 is out! Includes prebuilt binaries for Arm64 Linux, improved affiliation analysis, better errors for bad policy files, better detection of SPDX SBOMs, and improved query registration in the Rust SDK!

The next Hipcheck release will include pre-built binaries for arm64 Linux, plus an arm64 Docker container!

feat: support arm64 Linux for bin and Docker releases by alilleybrinker · Pull Request #1276 · mitre/hipcheck

This adds support for arm64 Linux releases in both our pre-built binaries and for container images published to Docker Hub. It uses the Arm-provided "partner images," and adds them to bot...

github.com

It's true, we document how to debug Hipcheck! Hipcheck exists to empower software devs to make informed OSS dependency choices, and we want to empower our users when something goes wrong too.

Andrew Lilley Brinker@alilleybrinker.com · 6mo ago

We did this for @hipcheck.mitre.org and even as a Hipcheck dev it's a useful reference for me

Hipcheck 3.13.0 is here! 🎉 ✅ Clearer reporting when we recommend "investigate" because of an "investigate-if-fail" policy. ✅ A new "hc explain target-triple" subcommand. ✅ Work toward supporting "multi-target" runs of Hipcheck based on files like go.mod, package-lock.json, or Cargo.lock

Announcing the Hipcheck Python Plugin SDK! With this SDK, you can now easily create Hipcheck plugins in Python. This SDK is at full feature parity with the existing Rust SDK. Give it a try, and let us know what you think! hipcheck.mitre.org/blog/python-...

Hipcheck 3.12.0 is out! 🎉 ✅ SemVer constraints for plugins ✅ New flag for "hc ready" ✅ New command to manage plugin cache ✅ Initial support for containerized plugins ✅ Improvements to plugin logging 🧪 An experimental Python plugin SDK! ⚠️ New minimum glibc version hipcheck.mitre.org/blog/hipchec...

Hipcheck 3.11.0 is out! 🎉 Featuring usability improvements like integrating plugins into the "hc ready" command, to be sure you're ready to run, better error reporting from plugins, improved JSON format final analysis reports, and more! hipcheck.mitre.org/blog/hipchec...

Hipcheck offers levels of configurability to smoothly ramp up users from no-config out of the box to any level of flexibility you need! Come learn about configuring default policies, setting custom policies, and creating your own analysis plugins! hipcheck.mitre.org/blog/hipchec...

Hipcheck 3.10.0 is out! 🎉 This release features: ✅ Improvements to the query protocol between Hipcheck and its plugins ✅ A new "env" macro for policy files ✅ The start of English-language policy explanations, and more! hipcheck.mitre.org/blog/hipchec...

Hipcheck 3.9.1 is out, with fixes to our Containerfile, better support for specifying custom paths in policy files, and a refactor to improve target resolution! hipcheck.mitre.org/blog/hipchec...

Hipcheck 3.8.0 is out! 🎉 This release includes stable support for third-party plugins, plus improvements to the Rust plugin SDK. hipcheck.mitre.org/blog/hipchec...

Hello world! Hipcheck is an open source project to empower maintainers to assess their dependencies. Take 100s of dependencies down to a few that look concerning, based on your chosen plugins and configuration! We don't force any policy; all defaults can be changed! mitre.github.io/hipcheck/