v0.0.25-alpha

What's Changed

New features

• Add support for GCVE
• Enable import from Archives

Other changes

• Update docker images
• Update JS dependencies
• Improve vulnerability finder to produce less false positives
• Improve vulnerability finder to analyze multiple languages at once
• Improve UX on result pages
• Update CI/CD in all repositories to protect the main branch and generate releases automatically
• Improve analysis speed by optimizing AMQP messages and DB queries

v0.0.21-alpha

API:

Exciting New Features 🎉

• Improve sbom result page by @CedricHerzog in CodeClarityCE/api#39
• Database improvements by @CedricHerzog in CodeClarityCE/api#40
• Add conflict information to vuln results by @CedricHerzog in CodeClarityCE/api#41
• Add vuln filters by @CedricHerzog in CodeClarityCE/api#42

Other Changes

• Fix vulnerabilities count on results page by @CedricHerzog in CodeClarityCE/api#43
• Use a unique endpoint to delete all integrations by @CedricHerzog in CodeClarityCE/api#44

Frontend

Exciting New Features 🎉

• Update SBOM result page by @CedricHerzog in CodeClarityCE/frontend#42
• Improve vulnerability result page by @CedricHerzog in CodeClarityCE/frontend#43
• Improve vuln list page by @CedricHerzog in CodeClarityCE/frontend#44
• Add filter for on the vulnerabilities page by @CedricHerzog in CodeClarityCE/frontend#45
• Refactor charts for improved modularity and functionality by @Aspoorine in CodeClarityCE/frontend#46

Other Changes

• Fix link to create integration by @CedricHerzog in CodeClarityCE/frontend#47
• Add buttons to delete integrations by @CedricHerzog in CodeClarityCE/frontend#48

SBOM Plugin

• Fix dev tag in results by @CedricHerzog in CodeClarityCE/plugin-sbom-javascript#13
• Change the way of tagging direct and transitive by @CedricHerzog in CodeClarityCE/plugin-sbom-javascript#14
• Update semver by @CedricHerzog in CodeClarityCE/plugin-sbom-javascript#16

Vulnerability Plugin

• Implement conflict resolver by @CedricHerzog in CodeClarityCE/plugin-sca-vuln-finder#11
• Fix affected version when only OSV results are available by @CedricHerzog in CodeClarityCE/plugin-sca-vuln-finder#12

v0.0.20-alpha

What's Changed

Exciting New Features 🎉

• Add a new sighting to vulnerability lookup if an API key is set and if the project is public by @CedricHerzog in CodeClarityCE/plugin-sca-vuln-finder#6
• Add support for pnpm by @CedricHerzog in CodeClarityCE/plugin-sbom-javascript#10
• Add support for yarn workspaces by @CedricHerzog in CodeClarityCE/plugin-sbom-javascript#11
• Add Gitlab integration by @CedricHerzog in CodeClarityCE/frontend#19
• Optimize database queries when fetching vulnerabilities by @CedricHerzog in CodeClarityCE/plugin-sca-vuln-finder#8
• UI improvements on vulnerabilities graphs @Aspoorine in CodeClarityCE/frontend#20, CodeClarityCE/frontend#30
• Import repo by link by @CedricHerzog in CodeClarityCE/frontend#37
• Improve setup script by @CedricHerzog in CodeClarityCE/deployment#4

New Plugins 🔌

• CodeQL plugin to analyze JS, GO and Python

Bug Fixing 🐛

• Fix npmv3 analysis by @CedricHerzog in CodeClarityCE/plugin-sbom-javascript#6
• Fix error during project import by @CedricHerzog in CodeClarityCE/api#34
• Fix dashboard graphs by @CedricHerzog in CodeClarityCE/api#36
• Fix getMailByType to return null if no mail is found by @CedricHerzog in CodeClarityCE/api#30
• Fix Jenkins build by @CedricHerzog in CodeClarityCE/api#29

Other Changes

Full Changelog: v0.0.0-alpha...v0.0.20-alpha

v0.0.0-alpha

Initial release