What's Changed

• enable code execution feature by default by @maxfisher-g in https://github.com/ossf/package-analysis/pull/958
• Add environment variable baits by @elainechien in https://github.com/ossf/package-analysis/pull/948
• cmd/analyze: use exit status 1 and 2 for errors, improve error messages for invalid cli arguments by @maxfisher-g in https://github.com/ossf/package-analysis/pull/967
• python dynamic analysis: support async and generator function execution by @maxfisher-g in https://github.com/ossf/package-analysis/pull/968
• update babel parser to match babel traverse version by @maxfisher-g in https://github.com/ossf/package-analysis/pull/969
• strace parsing: fix regex issue when unlink syscall does not have path by @maxfisher-g in https://github.com/ossf/package-analysis/pull/970
• add python3-dev package to dynamic analysis dockerfile by @maxfisher-g in https://github.com/ossf/package-analysis/pull/974
• cmd/analyze: add resolved package version to logging context by @maxfisher-g in https://github.com/ossf/package-analysis/pull/975
• Add archive checksum by @h0x0er in https://github.com/ossf/package-analysis/pull/978
• Fix compose path by @lukehinds in https://github.com/ossf/package-analysis/pull/983
• move DynamicAnalysisRecord struct to public API by @maxfisher-g in https://github.com/ossf/package-analysis/pull/986
• sandboxes/README.md: fix some sentences by @maxfisher-g in https://github.com/ossf/package-analysis/pull/992
• pkg/api/analysisrun refactoring by @maxfisher-g in https://github.com/ossf/package-analysis/pull/995
• static analysis: collect basic information about archive file by @maxfisher-g in https://github.com/ossf/package-analysis/pull/993
• Move images using load/save instead of docker daemon. by @calebbrown in https://github.com/ossf/package-analysis/pull/998
• Switch to osv-scanner-action repo, pin action version by @another-rex in https://github.com/ossf/package-analysis/pull/1006
• Shard dynamic analysis data loading across ecosystems and simplify implementation. by @calebbrown in https://github.com/ossf/package-analysis/pull/1007
• Add option to force cloud logging for BigQuery loading in cloudbuild. by @calebbrown in https://github.com/ossf/package-analysis/pull/1008
• Set the entrypoint explicitly to /bin/bash in the BQ Loader cloudbuild.yaml by @calebbrown in https://github.com/ossf/package-analysis/pull/1009
• Fix a bug where the RESULT_BUCKET env var wasn't used correctly. by @calebbrown in https://github.com/ossf/package-analysis/pull/1010
• Add headless flag to BQ command to improve output. by @calebbrown in https://github.com/ossf/package-analysis/pull/1011
• Add option to BigQuery SQL to remove expiration from "like" table. by @calebbrown in https://github.com/ossf/package-analysis/pull/1012
• Add support to build sample python package with docker by @elainechien in https://github.com/ossf/package-analysis/pull/1002
• Disable the currently failing crates.io test until it is fixed. by @calebbrown in https://github.com/ossf/package-analysis/pull/1016
• Point the new dynamic analysis loader at the real table. by @calebbrown in https://github.com/ossf/package-analysis/pull/1017
• Add user-agents to http requests sent by Package Analysis by @calebbrown in https://github.com/ossf/package-analysis/pull/1018

New Contributors

• @h0x0er made their first contribution in https://github.com/ossf/package-analysis/pull/978
• @lukehinds made their first contribution in https://github.com/ossf/package-analysis/pull/983

Full Changelog: https://github.com/ossf/package-analysis/compare/rel-35...rel-36