- OWASP ZAP integration (uploading findings)
- Fixed some visual deficits on show project page
- Fixed properly setting the status in adding Dependency-Track scanner
- Refreshed show project page with additional statistic
- Project vulnerability timeline
- Vulnerability timeline
- More other stats like average time to fix vulnerability
- Enabled hibernate envers for projectvulnerability table
- added endpoint with more detailed statistics for both project and vulnerabilities discovered within project
- Updated to angular 14 and ngx-admin 10 (Frontend)
- Fixed problem with not refreshed gauge chart with project threat rating
- Fixed bug when some vulnerabilities status was not managed properly
- Fixed bug with Checkmarx integration
- Enabled hibernate envers for projectvulnerability table
- added endpoint with more detailed statistics for both project and vulnerabilities discovered within project
- Fixed bug when some vulnerabilities status was not managed properly
- Fixed bug with Checkmarx integration
- Fixed bug with caused sometimes failure in creating synchronization with SCA
- Nexus-IQ Integration
- Adjusted docs
- Fixed release
- Fixed startup script
- Updated libraries due to security reasons
- Fixed problem with checkmarx plugin
- Fixed bug that allow to perform multiple sast scans of same project. Fixed status management, now when specific codeproject has inqueue or running state equal to true, it cannot be put on queue (Mixeway/MixewayBackend#82)
- Fixed bug related with improper view of the status in codeproject opensource scanner integration (Mixeway/MixewayFrontend#57)
- New widget on show-project page
- Removed CodeGroup concept in favor of CodeProject only
- Integration tests of MixewayBackend
- Security updates in Backend & Frontend
- Fixed problem related with errors when Vault integration is disabled
- New main dashboard
- New project dashboard
- Adjusted and fixed problems with Checkmarx scans
- Possibility to configure global git credentials (url + username:password) for SAST plugins
- Fixed window with editing of source code repository values
- Adding REST Endpoint which return result of Security Quaility Gateway for particular Code Repository
- Added Orange Poland Logo
- Knowlege base - possibility to create custom severity for vulnerabilities
- Openscap support for CIS Benchmark
- Fixing CI Script to fit newest version of MixewayBackend
- Fixing CI Script to fit newest version of MixewayBackend
- New Methods for CICD integration with Mixeway Scanner
- User Profile eidition (change password)
- Dark mode enabled (change in user profile)
- Update to Angular 10 and ngx-admin 6.0.0
- Intorduced role CICD and possibility to generate CICD Api Key for standard users
- Introduced new methods for interacting with CICD
- Fixed a bug with project name display during confirmation of deletion
- Fixed a bug with not reloading proxy and routing domain in admin zone. No refresh is now required.
- Fixed Bug related with running scan on GVM (scope single, multiple asset)
- Fixed logging during running scans on GVM
- Fixed Bug related with problems in using Vuln Auditor
- Configurable Security Quality Gateway (accessible from settings)
- AWS EC2 Integration in terms of assets information loading
- Mixeway Vuln Auditor - DeepLearning microservice which use Neural Network to classify software vulnerabilities
- Vulnerability Description is displayed in more proper manner. Modal displaying details is allowing user to confirm or deny vulnerability
- Possibility to create Application profile, on both project or asset level information gathered and put into profile helps Vuln Auditor to better understand application context and then classify vulnerability
- Tables filtering set to proper level. Whenever possible select fields are possible to show.
- Vulnerabilities are no longer deleted before loading from scanner. ID of detected vulnerability is constant, vulnerability is deleted only if it is not detected in next scan.
- Partitioning software vulnerabilities was removed, in this place single tab is displayed with colum which allows to filter
- Fixed problem with saving users with permissions of Admin and Editor #16
- Fixed problem with saving properly CodeGroup with no dependant CodeProject #15
- Possibility to set enable vuln manage option on project level. Setting this option to false will result in hiding vulnerabilities and not returning them through Global API (but getting vulnerabilities per specific project will still works) see also #12
- Fixed problem when search widget did not work as expected see also #13
- Frontend updated to Angular 9
- Frontend updated to Ngx-Admin 5
- Global statistics for OpenSource Vulnerabilities
- Possibility to create Password Authentication for Web Application scans (based on username and password passed later to scanner)
- Integration with Burp Enterprise Edition
- Routing Domain is no longer required while scanner creation
- Risk of project, codeProject, WebApp and asset is now created in offline. Fixed problem in long execution time.
- Code of integration partially refactored
- Bash script ready to integrate with CI tools (scripts/CIScript/mixeway-ci)
- New view for checking CI Job status and state
- Fixed problem with refreshing repository table after creating object
- Fixed problem with disappearing SAST and OpenSource integration fields once one of them was done
- Hashicorp Vault integration is now optional
- Tutorial translation
- Sonar bugs fixes
- REST API to get scanner types already integrated
- Checkmarx integration (scope: create project, configure scan, run sca, get vulnerabilities)
- Extended Fortify SSC integration - possibility to create and configure SSC projects via Mixeway
- Fixed bug related with deletion of scanners
- Integration with OWASP Dependency track with scope of loading vulnerabilities
- Added scope to Security Quality Gateway with WebApp Vulns, Code Vulns and OpenSource vulns
- Possibility to set scheduler settings (cron expression) from admin->settings panel. Scheduler can be configured for task related with scheduled scans.
- Fix long time of loading tables containing risk calculations
- Fixed problem with filtering and sorting of some columns in tables of Project Details
- Fixed problem with JIRA ticket creation