Kas

Latest version: v4.7

Safety actively analyzes 702183 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 1 of 8

4.7

- kas: preserve history across shell plugin invocations
- kas: adjust/improve dirty repo detection
- kas: only sort keys in dump plugin output if explicitly requested
- kas: ensure consistent config ordering in dump output
- kas: enforce maximum header version when merging configs
- kas: only include config in attestation if not tracked
- kas: fix repo type identifier for mercurial in attestations
- kas: improve annotation of kas-generated repo commits
- kas: improve schema validation error messages
- kas: show both commit ids in error message on tag commit mismatch
- kas-container: do not create KAS_WORK_DIR
- kas-container: add support for git worktrees
- kas-container: add support for Ubuntu 24.04 hosts
- kas-container: account for lock plugin in container entrypoint
- kas-container: make AWS_WEB_IDENTITY_TOKEN_FILE errors more precise
- docs: document rules for provided directories
- docs: describe steps needed to add a new plugin
- docs: auto add enum values of schema node

4.6

- kas: move lock file handling to new lock plugin
- kas: add support for running inside vscode devcontainer
- kas: keep repos in their current state when using -k
- kas: permit kas config snippets in git submodules of main repo
- kas: do not apply patches to unclean repos
- kas: GitLab CI: allow ssh config adjustments in more cases
- kas: add override to remove default tag or branch
- kas: order layers by repo and layer name in bblayers.conf
- kas: deprecate non full-length digests for git repos
- kas: mercurial: create valid branch names on patching
- kas: attestation: make repo digest sha256-aware
- kas: make version property in json schema more strict
- kas: fix repo processing in the presence of identical names
- kas: fix resource leaks on command execution error
- kas: fix/improve event loop and termination handling
- kas: Drop -d option
- kas-container: Drop already deprecated -d and -v options
- kas-container: gracefully handle rate-limits of snapshot.d.o
- docs: document kas-container command
- docs: enhance json schema with descriptions
- docs: kas-container: document how to select image
- docs: add note about snack test dependency

4.5

- kas: avoid bitbake parsing due to non-deterministic layer patches
- kas: correctly handle upstream ff merges on fetch
- kas: keep git committer identity if provided in .gitconfig
- kas: add support for container registry authentication
- kas: Improve GitLab CI rewrite rules for git
- kas-container: Use official snapshot.debian.org
- kas-container: Fix positional argument processing with for-all-repos
- kas-container: allow recent Ubuntu builds via isar
- kas-container: re-add deterministic metadata
- docs: document difference between file and env credentials
- sign pip packages on release

4.4

- kas: Auto-import runner-provided .gitconfig also inside GitLab-CI
- kas: Auto-inject git credentials on gitlab ci
- kas: Add --keep-config-unchanged to preserve repos and configs on actions
- kas: Fix --skip'ing multiple steps
- kas: List --skip'able steps in --help
- kas: Add support for shallow clones
- kas: Add support to create provenance build attestations
- kas: Add config key to describe build artifacts (used by attestation)
- kas: Add option to dump-plugin to include VCS info of local repos
- kas-container: Handle missing extra argument in subcommands gracefully
- kas-container: improve container reproduction using git commit date
- docs: Several format improvements
- docs: Add simple examples

4.3.2

- kas: don't add comments to .netrc, fixing gitlab-ci
- kas: make file permissions on credentials more strict (not a security fix)
- kas: align hg semantics of repo dirty checking
- kas-container: fix warnings from shellcheck 0.9.0
- docs: do not build docs against installed version
- docs: update to match bitbake variable changes
- docs: unify spelling of kas
- docs: document scope of environment variables

4.3.1

- kas: Fix regression of 4.3 when using SSH_PRIVATE_KEY[_FILE]
- kas-container: Update to debian:bookworm-20240311-slim (implicitly)

Page 1 of 8

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.