fix: missing version from release SSDLC report (#107)

Author: andrpac

build/ci/release.yml

@@ -149,6 +149,8 @@ functions:
       params:
         working_dir: src/github.com/mongodb/atlas-cli-plugin-kubernetes
         binary: build/package/generate-ssdlc-report.sh
+        include_expansions_in_env:
+          - version
   "package":
     - command: github.generate_token
       params:

build/package/generate-ssdlc-report.sh

@@ -17,7 +17,7 @@
 set -Eeou pipefail
 
 : "${AUTHOR:=$(git config user.name)}"
-: "${VERSION:=$(git tag --list 'atlas-cli-plugin-kubernetes/v*' --sort=-taggerdate | head -1 | cut -d 'v' -f 2)}"
+: "${VERSION:=$(git tag --list 'v*' --sort=-taggerdate | head -1 | cut -d 'v' -f 2)}"
 : "${DATE:=$(date -u '+%Y-%m-%d')}"
 
 export AUTHOR VERSION DATE

docs/releases/ssdlc-compliance.template.md

@@ -12,6 +12,9 @@ SSDLC Compliance Report: Atlas CLI Plugin Kubernetes v${VERSION}
 - **Process Documentation**
   - [How MongoDB Protects Against Supply Chain Vulnerabilities](https://www.mongodb.com/blog/post/how-mongodb-protects-against-supply-chain-vulnerabilities)
 
+- **Tool used to track third party vulnerabilities**
+  - [Kondukto](https://arcticglow.kondukto.io/)
+
 - **Dependency Information**
   - The Software Bill of Materials (SBOM) is:
     - a) part of this release as `sbom.json` and `augmented-sbom.json` with vulnerabilities found from Kondukto