Baixar kubescape 4.0.13 per a Windows

Changelog
- 88f24cc Add C-0298: detect subjects that can attach ephemeral containers to pods (#3017)
- 6bc13df Add RBAC-police rules for issue #916: impersonate, token-mint, escalate, bind, node-proxy, PV create (#3093)
- 437bd63 Add URL context to repository scanner error messages (#3650)
- 321b6c0 Add opt-in audit for posture exceptions (#3095)
- 80bddbb Fix memory allocation spikes during opa evaluations (#2920)
- 07bab27 Keep CRD exceptions that a narrower cloud exception does not actually cover (#3351)
- c90ae81 [LFX 2026] chore(deps): bump opa-utils to v0.0.312 for alertOnly exception semantics (#3615)
- e6fa8bf chore(cel): bump the pinned CEL policy library to v0.14 and sync the bundle (#3556)
- cfc1db5 chore(deps): bump github.com/armosec/armoapi-go in /httphandler (#3161)
- 16b28e2 chore(deps): bump github.com/armosec/armoapi-go in /httphandler (#3526)
- 66df915 chore(deps): bump github.com/armosec/armoapi-go in /httphandler (#3686)
- 6f0b303 chore(deps): bump github.com/aws/aws-sdk-go-v2 from 1.43.7 to 1.45.1 (#3711)
- 7dbd0b6 chore(deps): bump github.com/aws/aws-sdk-go-v2/config (#3528)
- 1824b77 chore(deps): bump github.com/go-openapi/runtime in /httphandler (#3685)
- 351e4c0 chore(deps): bump github.com/jedib0t/go-pretty/v6 from 6.7.8 to 6.8.3 (#3530)
- 43588f5 chore(deps): bump github.com/kubescape/backend in /httphandler (#3684)
- e4868d9 chore(deps): bump github.com/kubescape/go-git-url from 0.0.31 to 0.0.33 (#3529)
- 97aa966 chore(deps): bump github.com/kubescape/go-logger from 0.0.28 to 0.0.34 (#3695)
- 42158fd chore(deps): bump github.com/kubescape/go-logger in /httphandler (#3522)
- 9646cfd chore(deps): bump github.com/kubescape/k8s-interface in /httphandler (#3166)
- 6b90911 chore(deps): bump github.com/kubescape/opa-utils in /httphandler (#3524)
- 41a952c chore(deps): bump github.com/kubescape/rbac-utils from 0.0.21-0.20230806101615-07e36f555520 to 0.0.21 (#3170)
- 6cf53be chore(deps): bump github.com/mark3labs/mcp-go from 0.29.0 to 0.57.0 (#3168)
- b5bd334 chore(deps): bump github.com/mark3labs/mcp-go from 0.57.0 to 0.58.0 (#3692)
- 03814d5 chore(deps): bump github.com/maruel/natural from 1.1.1 to 1.3.0 (#3696)
- 336432c chore(deps): bump github.com/mattn/go-isatty from 0.0.21 to 0.0.24 (#3710)
- 80bbc86 chore(deps): bump github.com/open-policy-agent/opa from 1.14.1 to 1.19.0 (#3167)
- 285affd chore(deps): bump github.com/owenrumney/go-sarif/v2 from 2.2.0 to 2.3.3 (#3523)
- 4f0229f chore(deps): bump github.com/zclconf/go-cty from 1.17.0 to 1.19.0 (#3531)
- b586004 chore(deps): bump go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux (#3169)
- 7dc067b chore(deps): bump go.opentelemetry.io/otel in /httphandler (#3163)
- 40ee29c chore(deps): bump go.opentelemetry.io/otel/sdk/metric (#3164)
- 44af76c chore(deps): bump google.golang.org/protobuf (#3690)
- aecc40c chore(deps): bump k8s.io/apimachinery in /httphandler (#3165)
- 76485e5 chore(deps): bump k8s.io/apimachinery in /httphandler (#3527)
- f7e4d10 chore(deps): bump k8s.io/apimachinery in /httphandler (#3687)
- 29682f6 chore(deps): bump opa-utils to v0.0.309 to pick up the NewScore singleton fix (#3416)
- 614497b chore(deps): bump sigs.k8s.io/kustomize/api from 0.20.1 to 0.21.1 (#3162)
- cc91fb2 chore(deps): fix Dependabot security vulnerabilities in Go dependencies (#3715)
- a26f55b chore(goreleaser): embed E2E hook as single script (#3299)
- 8581f00 chore(hostsensor): delete leftover empty json.go file (#3121)
- 0f17e1c chore(printer): clarify strings import dependency in policyreportprinter.go (#3550)
- 0c10758 ci(comments): gate pr_agent on trusted commenter author_association (#3449)
- bf9a1e4 ci: bound pr-scanner job runtime with timeout-minutes (#3431)
- a85802c ci: bump Codium-ai/pr-agent from 0.35.0 to 0.43.0 (#3535)
- b7f4f6f ci: bump actions/attest-build-provenance from 2.4.0 to 4.2.2 (#3320)
- 3ff3505 ci: bump actions/create-github-app-token from 1.12.0 to 3.2.0 (#3322)
- 5625548 ci: bump actions/setup-go from 5.6.0 to 7.0.0 (#3157)
- 10d99fb ci: bump actions/setup-python from 5.6.0 to 7.0.0 (#3688)
- 451cbec ci: bump actions/upload-artifact from 4.6.2 to 7.0.1 (#3159)
- 1a89093 ci: bump anchore/sbom-action/download-syft from 0.24.0 to 0.24.2 (#3689)
- bf6040d ci: bump docker/login-action from 3.7.0 to 4.6.0 (#3156)
- 79a9558 ci: bump docker/setup-buildx-action from 3.12.0 to 4.2.0 (#3321)
- 7bc9ea2 ci: bump docker/setup-buildx-action from 4.2.0 to 4.3.0 (#3534)
- dba15b2 ci: bump docker/setup-qemu-action from 3.7.0 to 4.2.0 (#3160)
- 65b05f1 ci: bump github.com/armosec/armoapi-go in /httphandler (#3318)
- 1aa7865 ci: bump github.com/go-openapi/runtime in /httphandler (#3315)
- 9ffcbdf ci: bump github.com/kubescape/go-logger in /httphandler (#3317)
- 09b04d4 ci: bump github.com/stretchr/testify in /httphandler (#3525)
- 4ad86b2 ci: bump github/codeql-action/upload-sarif from 4.37.6 to 4.37.7 (#3323)
- a016093 ci: bump github/codeql-action/upload-sarif from 4.37.7 to 4.37.9 (#3691)
- 1f143f9 ci: bump golangci/golangci-lint-action from 9.2.0 to 9.3.0 (#3693)
- 29c3ac0 ci: bump goreleaser/goreleaser-action from 6.4.0 to 7.2.3 (#3158)
- c923193 ci: bump helm/kind-action from 1.10.0 to 1.14.0 (#3532)
- e8d34ea ci: bump mikepenz/action-junit-report from 5.6.2 to 6.4.2 (#3533)
- 8df7c61 ci: bump mikepenz/action-junit-report from 6.4.2 to 6.5.0 (#3708)
- 2c90b14 ci: bump ossf/scorecard-action from 2.4.3 to 2.4.4 (#3319)
- bbb0c92 ci: bump rajatjindal/krew-release-bot from 0.0.47 to 0.0.51 (#3536)
- 79734b8 ci: bump sigstore/cosign-installer from 3.5.0 to 3.10.1
- 16693e7 ci: pin golangci-lint to v2.12.2 to avoid v2.13.0 staticcheck timeout (#3429)
- 71caf02 core: add ScanContext, an explicit-context scan entry point (#3237) (#3432)
- 858f1d5 core: add ScanImageContext, closing the last explicit-context gap from #3237 (#3442) (#3443)
- 1455906 docs(cel): correct the authorizer skip scope and make the verification recipe reproducible (#3496)
- 08f449c docs(opaprocessor): add process flow documentation and package comment (#3290)
- a9728de docs(workflows): correct default branch and stale CI process in workflows README (#3118)
- 61ca76c feat(anonymizer): detect pseudo-ID collisions in Mapping.GetOrCreate (#3417)
- 1c54706 feat(cel): evaluate VAP matchConditions offline instead of refusing the control (#3222)
- 5aff86e feat(cel): honor VAP spec.failurePolicy for validation expression errors (#3583)
- 6bd8684 feat(config): add cached config validation (#3663)
- 3496ee1 feat(config): add config view output formats (#3055)
- c109477 feat(config): support --format / -f flag in config view (#3641) (#3642)
- bd7ffe4 feat(containerscan): validate layers, layer hashes, and vulnerability names in ScanResultReport.Validate() (#3591)
- 3286d8c feat(coverage): flag frameworks scored 100% purely from irrelevant controls (#3421)
- a819b8e feat(coverage): report resource kinds no control examined (#3588)
- 352a396 feat(diff): add aggregate summary outputs (#3626)
- 2fe500c feat(exposure): model external exposure via Ingress, Gateway API, and Service type (#3648)
- a87aed8 feat(exposure): model spec.externalIPs, flag unconfirmed cross-namespace backendRef as unclear (#3679)
- 75e692e feat(fix): select which controls to remediate with --include-controls and --skip-controls (#3714)
- f0914ba feat(fix): support cluster scan reports by printing patched manifests (#3705)
- 9919324 feat(fixhandler): apply fixes to JSON manifests (#3608)
- 76cf9a5 feat(getter): load custom rules from the standard rule directory layout (#3553)
- 146d46b feat(getter): support --custom-rules for user-authored Rego rules (#3419)
- fcc1fd8 feat(gitlab-sast): populate Solution field with fix paths and current values (#3182)
- e06a1c5 feat(image): surface VEX status in reports (#3594)
- ca4253c feat(imagescan): add --skip-db-update flag for offline image scanning (#3387)
- 78f1485 feat(imagescan): add native GitLab vulnerability adaptor (#3210)
- ad7b416 feat(imagescan): add native Harbor vulnerability adaptor (#3209)
- e340344 feat(imagescan): scan the correct platform for multi-arch images (#3345)
- 00b709c feat(list): filter controls by framework and search (#3624)
- 1a73d26 feat(list): show the control configuration a scan evaluates against (#3586)
- dcc5a0b feat(mapreconcile): add MutatingAdmissionPolicy discovery and impact matching (#3606)
- 23ac4a5 feat(markdown): support image scan reports (#3573)
- 35ff0da feat(mcp): add scan_controls, scan_local_iac_controls, list_frameworks, and list_controls tools (#3252)
- 1ee4b9d feat(mcpserver): add SSE transport and advanced MCP tools for LLMs (#3375)
- 3ba8218 feat(mcpserver): add apply_remediation tool for deterministic AI auto-patching (#3568)
- 7ac644a feat(mcpserver): add scan_workload tool for single-resource scanning (#3669)
- aa3fb76 feat(networkpolicy): add real NetworkPolicy reachability engine (#3601)
- d41b6fe feat(networkpolicy,vulnexposure): correlate vulnerabilities with NetworkPolicy exposure (#3632)
- 4d20539 feat(opaprocessor): add inline exception suppression via resource annotations (#3392)
- e86026f feat(operator): add findings-driven targeting to the remediate CLI (#3474)
- 2f23ee5 feat(policy): add kubescape policy test to run rule fixtures against the real evaluator (#3477)
- e02e225 feat(policy): scaffold custom Rego rules and refresh test fixtures from rule output (#3635)
- 0cf33c4 feat(printer): add github-actions output format for inline PR annotations (#3637)
- 42ced6e feat(printer): generate a posture exceptions baseline from scan results (#3560)
- b08c555 feat(printer): include evidence paths in GitHub Actions annotation messages (#3677)
- 60f5017 feat(printer): render map/slice values in AssistedRemediation evidence (#3254)
- 4ea7d4a feat(printer): support initContainers and ephemeralContainers in assisted remediation paths (#3578)
- f6ec4e9 feat(printer): surface failed-path evidence values in JSON/YAML output (#3256)