Introducing Zora OSS v0.9.0 and Zora Dashboard Enhancements
We are thrilled to announce the release of Zora OSS v0.9.0 and new updates to Zora Dashboard. This version brings significant improvements and new features, making Zora even more robust and user-friendly. Here’s a quick overview of what’s new.
Zora Dashboard Enhancements
Zora Dashboard has been significantly enhanced to provide a more intuitive and efficient user experience. One of the major updates is the ability to view grouped package details directly in the dashboard, making it easier to navigate and manage vulnerabilities. This new feature allows users to see which packages within an image are affected by a specific vulnerability, providing a clearer and more organized view.
Here is a showcasing the grouped packages:
These details are available through the vulnerabilities, both on the cluster screen and the workspace-wide vulnerabilities screen.
Zora OSS v0.9.0
Package grouping is also introduced in Zora OSS v0.9.0 within the VulnerabilityReport
. This feature is part of the v1alpha2
version of the CRD and enables users to see which packages within an image are affected by a specific vulnerability. This enhancement provides a clearer and more organized view of vulnerabilities, helping users quickly identify and address issues.
Here’s an example of the new VulnerabilityReport
structure (with some fields omitted):
This structured approach groups affected packages under their respective vulnerabilities, providing a comprehensive overview at a glance and significantly reducing the size of the reports. To see the YAML structure of a vulnerability report, you can use the following command: kubectl get vulnerabilityreports vulnerabilityreport-v1alpha2-sample -n zora-system -o yaml.
Note that the v1alpha1
version of the VulnerabilityReport
is still compatible through the webhook conversion mechanism.
Additional Improvements in Zora OSS v0.9.0
Alongside the major update of grouping packages, Zora OSS v0.9.0 also includes several other enhancements and fixes:
Prevent false-positives misconfigurations by delaying Popeye start;
Fix volumes mount when Trivy persistence is disabled (#276 and #278);
Conclusion
We are excited about the new features and improvements in Zora v0.9.0 and believe they will significantly enhance your experience. We encourage you to update to the latest version and explore the new functionalities.
Join our Office Hours and Slack for any questions, suggestions, or feedback.
Happy scanning! 🛡️