v1.0.0

Changes

Features

• feat!: per-API-group SBOMs with serialNumber tracking (#5)

Contributors

@blacksd

v0.3.0

Changes

• feat: add git+github source type for extracting CRDs from repositories

Contributors

@blacksd

Full Changelog: v0.2.0...v0.3.0

v0.2.0

Changes

Features

• feat: add {version} placeholder interpolation for URL-type sources (#3)

Contributors

@blacksd

v0.1.1

Changes

• Update module github.com/spf13/cobra to v1.10.2 (#2)
• Update GitHub Actions (major) (#1)

Contributors

@renovate[bot] and renovate[bot]

v0.1.0

Changes

Features

• Extract openAPIV3Schema from CRDs in Helm charts (HTTP and OCI) and raw URL manifests
• Pure Go implementation with no external runtime dependencies
• Parallel source fetching with configurable concurrency (--parallel)
• Recursive chart scanning with Go template directive stripping
• Include/exclude filtering by Kind, group/Kind, or group/* patterns
• Cross-source conflict detection and automatic deduplication
• SHA-256 change detection for minimal git diffs
• Per-schema provenance metadata and CycloneDX 1.5 SBOM generation
• Source config validation (validate subcommand)
• Fetch-only mode for inspecting upstream content (--fetch-only)
• Cobra CLI with extract, validate, and version subcommands

Maintenance

• CI: PR testing with E2E against cert-manager, release-drafter, goreleaser
• GitHub Actions pinned to SHA digests
• Renovate config for automated dependency updates

Contributors

@blacksd