- trivy, sbom not install packages from project if use poetry, pipenv by take advantage of lockfile

## [7.0.2](https://gitlab.com/to-be-continuous/python/compare/7.0.1...7.0.2) (2024-05-20)

### Bug Fixes

* issue [#73](https://gitlab.com/to-be-continuous/python/issues/73) github_get_latest_version ([ce26d5ab](https://gitlab.com/to-be-continuous/python/commit/ce26d5abba8950f30bad1d992a2481bf252359b7))
* README for trivy now enabled by default ([f5d5f2e9](https://gitlab.com/to-be-continuous/python/commit/f5d5f2e9c186b6aeb0c55ef45a65b85615b9ad7b))

## [7.0.1](https://gitlab.com/to-be-continuous/python/compare/7.0.0...7.0.1) (2024-05-17)

### Bug Fixes

* remove useless apt commands ([469ebece](https://gitlab.com/to-be-continuous/python/commit/469ebece1e05b4748c3bd4e2ff793b058ea57bbf))

# [7.0.0](https://gitlab.com/to-be-continuous/python/compare/6.11.1...7.0.0) (2024-05-17)

### Code Refactoring

* **Trivy:** py-trivy job is enabled by default ([d9e86795](https://gitlab.com/to-be-continuous/python/commit/d9e867952d5a2040037c5cb03456380b976219af))

### Features

* add support for slim and alpine Python images + change default base image ([22003d19](https://gitlab.com/to-be-continuous/python/commit/22003d195670f3d923f31014636485bc783068bb))

### BREAKING CHANGES

* **Trivy:** py-trivy job is enabled by default
'trivy-enabled' input is no longer supported - use 'trivy-disabled' instead
* the default base image has been changed to python:debian-slim

BREAKING CHANGE: py-trivy job is enabled by default
'trivy-enabled' input is no longer supported - use 'trivy-disabled' instead

BREAKING CHANGE: the default base image has been changed to python:debian-slim

The template now supports installing packages on Alpine and Debian-based images.
The function also skips install if packages are already installed.

## [6.11.1](https://gitlab.com/to-be-continuous/python/compare/6.11.0...6.11.1) (2024-05-05)

### Bug Fixes

* **workflow:** disable MR pipeline from prod & integ branches ([8703dea9](https://gitlab.com/to-be-continuous/python/commit/8703dea915ca48038588adcc2a0672269dd24bb4))

Today creating a backmerge MR from prod or integ branch to any other branch triggers a pipeline
even though no change has been pushed.
Ultimately those pipelines might (re)trigger integration or production environment deployment and/or packages publication.
That might have unexpected consequences.
This change simply disables MR pipeline from prod & integ branches, enforcing branch pipelines only (i.e. when a true commit is pushed).

# [6.11.0](https://gitlab.com/to-be-continuous/python/compare/6.10.0...6.11.0) (2024-04-28)

### Bug Fixes

* **cache:** always keep cache ([8cf171ed](https://gitlab.com/to-be-continuous/python/commit/8cf171edde7577b4179530192169730eff122ff2))

### Features

* add mypy job ([cc22e8c0](https://gitlab.com/to-be-continuous/python/commit/cc22e8c0eda56d2df00e22b8034da40fd2cfc937))

# [6.10.0](https://gitlab.com/to-be-continuous/python/compare/6.9.0...6.10.0) (2024-04-14)

### Features

* **ruff:** generate JSON report when SonarQube is detected ([81e711d2](https://gitlab.com/to-be-continuous/python/commit/81e711d2cd6e23014c0eaef2ec098fe69b711885))

# [6.9.0](https://gitlab.com/to-be-continuous/python/compare/6.8.1...6.9.0) (2024-04-13)

### Features

* add  Ruff linter job ([ef364ef6](https://gitlab.com/to-be-continuous/python/commit/ef364ef65dad8034b7c7af60bb25195cf20ba466))
* some log improvement ([aef5a056](https://gitlab.com/to-be-continuous/python/commit/aef5a056d09b22e2c6ce2fa8038632c912e11637))

Co-authored-by: Pierre Smeyers <pierre.smeyers@gmail.com>

## [6.8.1](https://gitlab.com/to-be-continuous/python/compare/6.8.0...6.8.1) (2024-04-03)

### Bug Fixes

* **vault:** use vault-secrets-provider's "latest" image tag ([4342c014](https://gitlab.com/to-be-continuous/python/commit/4342c01475a4e227c4c4e06af4be0c016b2da2a2))

# [6.8.0](https://gitlab.com/to-be-continuous/python/compare/6.7.0...6.8.0) (2024-04-02)

### Features

* add GCP auth variant ([0188ac9d](https://gitlab.com/to-be-continuous/python/commit/0188ac9d4aa8e952060ebc3e485a7c298cc5d4b0))

# [6.7.0](https://gitlab.com/to-be-continuous/python/compare/6.6.5...6.7.0) (2024-2-21)

### Features

* add black job ([054b0403](https://gitlab.com/to-be-continuous/python/commit/054b0403499164be5f046ff694e6f8ef94a487ca))
* add isort job ([e8e068ba](https://gitlab.com/to-be-continuous/python/commit/e8e068ba46130a99ba0c99005d2690b8640a75aa))

Signed-off-by: Lars Bilke <lars.bilke@ufz.de>

Signed-off-by: Lars Bilke <lars.bilke@ufz.de>

## [6.6.5](https://gitlab.com/to-be-continuous/python/compare/6.6.4...6.6.5) (2024-2-15)

### Bug Fixes

* more reliable retrieve url for Syft ([5d83eaad](https://gitlab.com/to-be-continuous/python/commit/5d83eaad9bfc08b10c41656f457c37fbec1ebb5b)), closes [#65](https://gitlab.com/to-be-continuous/python/issues/65)

closes #65

Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Co-authored-by: Clément Bois <clement.bois@orange.com>

## [6.6.4](https://gitlab.com/to-be-continuous/python/compare/6.6.3...6.6.4) (2024-2-2)

### Bug Fixes

* sanitize variable substitution pattern ([c1cf8c38](https://gitlab.com/to-be-continuous/python/commit/c1cf8c387f37dfdc29958d9168f13736707f135f))

replace '${foo+repl}' pattern with '${foo:+repl}' (latest supports $foo being defined but empty)

## [6.6.3](https://gitlab.com/to-be-continuous/python/compare/6.6.2...6.6.3) (2024-1-26)

### Bug Fixes

* resolve "python-index-cataloger does not exist" ([69531a8e](https://gitlab.com/to-be-continuous/python/commit/69531a8e11fd941683177afcbc2b2ebe6f552085))

## [6.6.2](https://gitlab.com/to-be-continuous/python/compare/6.6.1...6.6.2) (2024-1-22)

### Bug Fixes

* avoid rate limiting for latest syft url query ([21ce7649](https://gitlab.com/to-be-continuous/python/commit/21ce76493510502c1e654ca50cfc8913f2928712))