2.0.6 🌈

Disclaimer: This is an automatically generated changelog draft for ArcherySec releases.

• Update requirements.txt (#653)

🚀 New scanners

• added checkov json report parser (#658)
• Added SAST Scanner Bearer html parser (#651)

🚀 Features and enhancements

• Moved package manager to Poetry (#657)
• Moving to poetry package manager (#656)
• Docked version of urllib3 to 1.26 to maintain compatibility with requests lib (#604)

🐛 Bug Fixes

• Fix #611 Error when upload report through archerysec cli (#630)
• fix-api-upload-scan-error (#627)
• #596 Organization permission issue fixed (#609)
• fixed dropdown issue (#608)

🚩 Security

• #596 Organization permission issue fixed (#609)

All contributors: @Ahmed-Nasr-hassan, @anandtiwarics and @visallard-scw

2.0.5 🌈

Disclaimer: This is an automatically generated changelog draft for ArcherySec releases.

🚀 New scanners

• Vuls & Nmap Vulners parsers, few fixes (#600)
• Gitleak json report parsing (#599)

🚀 Features and enhancements

• Adding Search builder to all DataTables (#603)
• Enhanced Jira integration (#601)
• Vuls & Nmap Vulners parsers, few fixes (#600)
• Enhanced & modular parsers (#595)

🐛 Bug Fixes

• #591 fixed arachni scan error (#592)
• Fixed #325 burp scan not getting launched through UI (#587)

All contributors: @anandtiwarics, @rbogaert-scw and @visallard-scw

2.0.4 🌈

Disclaimer: This is an automatically generated changelog draft for ArcherySec releases.

• Comment data updated data on dashboard (#562)

🚀 New scanners

• grype json report parser (#566)
• ScoutSuite report JSON parser (#565)
• Wiz Security csv report parsing support (#564)
• Cloud Scanner Module with report parsing (#563)

🚀 Features and enhancements

• Cloud Scanner Module with report parsing (#563)
• Add comment as Notes while marking Close/FP (#561)
• Critical severity added on dashboard (#560)
• Fix Issue #534 with New API v1 (#550)

🐛 Bug Fixes

• Upgrading to Django 3.2 and fixing DEFAULT_AUTO_FIELD warnings (#559)
• Fix Issue #534 with New API v1 (#550)

🧰 Maintenance

• Bump django from 3.2.14 to 3.2.15 (#558)
• Bump lxml from 4.6.5 to 4.9.1 (#554)
• Bump django from 3.2.13 to 3.2.14 (#552)

All contributors: @anandtiwarics, @dependabot and @dependabot[bot]

2.0.3 🌈

Disclaimer: This is an automatically generated changelog draft for ArcherySec releases.

🚀 Features and enhancements

• fixed issue #542 Trivy v0.29.2+ version support (#547)
• [Snyk] Security upgrade django from 3.1.14 to 3.2.12 (#533)
• sec code enhancement (#532)

🐛 Bug Fixes

• Fix #543 Pentest Vulnerability list is empty after adding target (#549)
• fixed issue #542 Trivy v0.29.2+ version support (#547)

🧰 Maintenance

• Removed djangorestframework-jwt (#548)
• Bump pyjwt from 1.7.1 to 2.4.0 (#546)
• Bump pypdf2 from 1.26.0 to 1.27.5 (#540)
• Bump django from 3.2.12 to 3.2.13 (#541)
• Bump waitress from 2.0.0 to 2.1.1 (#536)

🚩 Security

• Bump django from 3.2.12 to 3.2.13 (#541)
• [Snyk] Security upgrade django from 3.1.14 to 3.2.12 (#533)
• sec code enhancement (#532)

All contributors: @anandtiwarics, @dependabot, @dependabot[bot] and @snyk-bot

2.0.2 🌈

Disclaimer: This is an automatically generated changelog draft for ArcherySec releases.

🚀 Features and enhancements

• Multi-user role-based account Admin, Analyst and Viewer
• Remove Settings from non admin user (#508)
• Shift Left CICD Module (#507)
• Remove duplicate issue from SAST vuln list (#503)
• Updated findsecbugs parser (#501)
• New Functionality and Enhancement (#492)
• Added Connector Module for Scanners and Scanners Icon (#485)

🐛 Bug Fixes

• Fixed ZAP v2.11.1 xml report upload (#531)
• Issue #522 Login use variables in docker-compose.yml (#525)
• Removed safe filters From auto escape html due to security concern (#519)
• #509 fixed trivy 0.19.2 JSON output report parsing is not working (#510)
• #486 Fixed 🥇 ZAP Launch Scan : NameError: name 'notify' is not defined (#487)
• Null on Trivy reports (#473)
• updated setup.sh file that fix macOS installation issue (#469)

🧰 Maintenance

• Bump pillow from 8.3.2 to 9.0.0 (#530)
• Bump django from 3.1.13 to 3.1.14 (#524)
• Bump lxml from 4.6.3 to 4.6.5 (#521)
• Bump django from 3.1.12 to 3.1.13 (#505)
• Bump sqlparse from 0.4.1 to 0.4.2 (#500)
• Bump pillow from 8.2.0 to 8.3.2 (#496)
• #475 Restructured models and scanner pages (#484)
• Bump django from 3.1.8 to 3.1.12 (#481)
• [Snyk] Security upgrade django from 1.11.29 to 2.2.21 (#472)
• [Snyk] Security upgrade pillow from 6.2.2 to 8.2.0 (#476)
• [Snyk] Security upgrade django from 1.11.29 to 2.2.24 (#480)
• Bump urllib3 from 1.26.4 to 1.26.5 (#479)

🚩 Security

• Removed safe filters From auto escape html due to security concern (#519)
• [Snyk] Fix for 28 vulnerabilities (#515)
• [Snyk] Fix for 27 vulnerabilities (#495)
• Bump django from 3.1.8 to 3.1.12 (#481)

All contributors: @anandtiwarics, @dependabot, @dependabot[bot], @neilmusgrove, @snyk-bot and neil.musgrove

2.0.1 🌈

Disclaimer: This is an automatically generated changelog draft for ArcherySec releases.

🚀 Features and enhancements

• Arachni Plugin Fix and Requirements Fix (#466)

🚀 New scanners

• brakeman json report parser added (#443)
• twistlock json report parser added (#442)

🐛 Bug Fixes

• Fix issue of djangorestframework-jwt deprecated (#465)
• #461 Fix openvas findings are not reflecting after scan completion (#463)

🧰 Maintenance

• fix CVE-2021-30459 and CVE-2020-28463 (#468)
• [Snyk] Security upgrade python from 3.7.6-alpine3.11 to 3.8.7-alpine3.11 (#462)
• Bump lxml from 4.6.2 to 4.6.3 (#460)
• Bump pyyaml from 5.1 to 5.4 (#459)
• Bump rsa from 3.4.2 to 4.2 (#458)
• Bump jinja2 from 2.10.1 to 2.11.3 (#457)

All contributors: @anandtiwarics, @dependabot, @gabrieloandco, @snyk-bot and Gabriel.O

2.0.0 🌈

Disclaimer: This is an automatically generated changelog draft for ArcherySec releases.

🚀 New scanners

• Semgrep Report Added (#389)

🚀 Features and enhancements

• The duplicate issue can be listed and tagged as duplicate (#430)
• #404 updated Django old version routes for all urls.py (#416)
• #406 Enabled API call for all Project Information (#415)
• #63 Added success/failure indication for file uploads (#414)
• #40 Connection Indicator for scanners plugin (#412)
• Empty Dashboard if data type None (#411)
• Updated brand new dashboard (#394)
• #319 Mark Closed for Pentest findings (#393)
• Nessus scan report parser enhancement (#391)

🐛 Bug Fixes

• Fix #428 Inspec version 4.18.x json report wrong parsing (#429)
• Fix: #423 Not supported proxy scheme None (#424)
• Remove all call to deprecated Element.getchildren (#422)
• Fix #378 nikto html parser issue (#410)
• Fix #399 ZAP scan report converts all into one url (#407)
• #382 Fixed download multiple scans report (#392)

🧰 Maintenance

• Removed extra codes (#395)

All contributors: @anandtiwarics and @nssanand

archerysec-v1.9.1

#383 initial fix for few scanners

archerysec-v1.9

• #16 checkmarx xml report parser added
• Fixed: zap pdf report generate issue
• Updated manual scan template
• Manual scans POC field added
• Updated pentest module
• #16 whitesource updated
• #16 API updated for whitesource report upload
• fixed confirm before delete
• #16 whitesource integration update
• Fixed xml report parser issue
• Login and logout page fixed minior issue
• #16 whitesource json report parser …
• fixed setup issue
• #375 added support windows installation
• fixed #370 #368 #366 #367 #374
• #363 fixed nmap vulners setting issue
• added dockle scan on projects views
• updated dockle scan on the dashboard
• #16 added dockle scan json parser
• #302 fixed arachni scan URL not reflecting

archerysec-v1.8

• Fixed mail notification issue