v1.10.0

What's Changed

Exciting New Features 🎉

• Secret Token Validation feature by @barv-jfrog in #144

Improvements 🌱

• Missing context new status for CA by @barv-jfrog in #153
• Update dependencies by @attiasas in #183

Bug Fixes 🛠

• Fixed wrong root identification in module detection by @eranturgeman in #179

Full Changelog: v1.9.0...v1.10.0

v1.9.0

What's Changed

Exciting New Features 🎉

• Dumping scan results to local dir by @eranturgeman in #168

Improvements 🌱

• Undetermined reason for undetermined contextual analysis status by @barv-jfrog in #155
• Improved tech detection when tech is provided by user by @eranturgeman in #175

Bug Fixes 🛠

• Fix build scan command output in table format by @dortam888 in #172

Full Changelog: v1.8.1...v1.9.0

v1.8.1

What's Changed

Improvements 🌱

• Add support for NuGet Curation Audit by @igorz-jf in #159
• Disable generating SARIF for GitHub advance security tab if not entitled for JAS by @attiasas in #166
• Add fingerprint field to simple json format by @orz25 in #169
• Update Dependencies by @attiasas in #174

Full Changelog: v1.8.0...v1.8.1

v1.8.0

What's Changed

Exciting New Features 🎉

• Record SARIF results after security commands to upload for GitHub by @attiasas in #138

Bug Fixes 🛠

• Print both vulnerabilities and violations tables if needed by @attiasas in #163
• Fix sorting table results when no JAS scan by @attiasas in #164

Full Changelog: v1.7.2...v1.8.0

v1.7.2

What's Changed

Improvements 🌱

• Improve Job Summary by @attiasas in #137

Full Changelog: v1.7.1...v1.7.2

v1.7.1

What's Changed

Improvements 🌱

• Upgrading AnalyzerManager version to 1.8.14 by @eranturgeman in #156

Full Changelog: v1.7.0...v1.7.1

v1.7.0

What's Changed

Exciting New Features 🎉

• Support Curation to run after package manager installation failure by @asafambar in #135

Improvements 🌱

• add xsc analytics to docker-scan command by @orz25 in #145

Bug Fixes 🛠

• Use project env val in commands by @attiasas in #148

Full Changelog: v1.6.5...v1.7.0

v1.6.5

What's Changed

Improvements 🌱

• Add option to include vulnerabilities if violation context exists by @attiasas in #133
• Update Analyzer Manager to v1.8.13 by @attiasas in #142

Bug Fixes 🛠

• Issue in build scan result_url when JFrog URL is not configured by @dortam888 in #127
• add missing fields for operational risk in simpliftViolations functio… by @dortam888 in #126

New Contributors

• @igorz-jf made their first contribution in #136

Full Changelog: v1.6.4...v1.6.5

v1.6.4

What's Changed

Improvements 🌱

• Update AnalyzerManager to v1.8.10 by @attiasas in #131
• Update dependencies by @attiasas in #134

Bug Fixes 🛠

• Scan - Wait for AnalyzerManager to finish download before scan by @attiasas in #123
• fix SARIF format security-severity attribute by @attiasas in #129
• JFrog CLI encodes the ignore url in on-demand scan result by @dortam888 in #84

Full Changelog: v1.6.3...v1.6.4

v1.6.3

What's Changed

Improvements 🌱

• Curation support for GitHub summary by @asafambar in #111
• Update Jfrog dependencies by @attiasas in #121

Bug Fixes 🛠

• Curation pip fix - Upgrade pip within the virtual env by @asafambar in #112

New Contributors

• @RobiNino made their first contribution in #110

Full Changelog: v1.6.2...v1.6.3