Bug fixes
- Fixed
kosli attest artifactsending empty repository information when no repo data is available.
New features
kosli evaluate trailandkosli evaluate trails— evaluate one or more trails against a Rego policy and get a structured pass/fail decision. Use--attestationsto filter which attestations are checked, and--output jsonfor machine-readable results. Exit code reflects the policy decision, making it ideal for CI/CD gates. See the evaluate trail and evaluate trails reference for details.- Multi-environment K8s reporting —
kosli snapshot k8snow accepts a--config-fileflag to report multiple Kosli environments in a single command. Define environment-to-namespace mappings in a YAML file instead of running the command once per environment. See the snapshot k8s reference. - Helm chart v2.0.0 — the k8s-reporter Helm chart now uses a
reporterConfig.environmentslist, enabling multi-environment reporting from a single chart installation. This is a breaking change from v1.x — see the chart README for migration steps.
Bug fixes
- Fixed handling of Python boolean (
true/false) and null values in custom attestation type schemas.
New features
kosli_logical_environmentresource — create and manage logical environments that aggregate multiple physical environments into a single view.kosli_logical_environmentdata source — query details of existing logical environments.- Drift detection for logical environments — Kosli now detects when the
included_environmentsof a logical environment change outside of Terraform. - User agent header — the provider now sends a versioned user agent on every API request, improving diagnostics.
Bug fixes
- Fixed a missing
flowfield in pull request attestation resources. - Fixed
terraform planshowing(known after apply)for thetypeattribute of logical environments instead of"logical".
New features
kosli_environmentresource — create and manage physical Kosli environments (K8S, ECS, S3, docker, server, lambda) as Terraform resources.kosli_environmentdata source — query details of existing physical environments.
Changes
schemaandjq_rulesare now optional fields onkosli_attestation_type, allowing you to create attestation types without a validation schema.