v2.4.1

🛡️ Security & Code Quality Scans

Integrated and configured new linters and security scanners to align with compliance standards:

• Trivy: Fixes for dependencies and vulnerability scanning (including Python library compliance).
• ShellCheck: Refactored bash scripts for security and compliance.
• Semgrep: Enabled and fixed OSS SAST scans.
• Bandit: Enabled and configured Python static security analysis.
• Hadolint: Linter fixes for Dockerfiles.

📦 Dependency Updates

Upgraded core libraries to secure, up-to-date versions

✨ Features & Improvements

• Metadata & UI Enhancements:
  • Added new metadata fields, implemented data capturing, display, and fixed PDF report formatting for metadata.
  • Implemented Advanced Filtering, a Global Metadata Search Bar, and search chips on the frontend.
  • Added pagination to the Reports page.
  • Updated the UI display for risk profiles, including Draft status handling and a new icon.
• Test Stability & Infrastructure:
  • Test modules are now executed in a repeatable and consistent order.
  • Improved device OS detection over SSH and fixed an OSError: [Errno 19] No such device issue that caused Testrun to hang on "Cancelling".

🐛 Bug Fixes

• TLS & Networking:
  • Fixed an issue where TLS v1.3 information was incorrectly shown for TLS 1.2 servers.
  • Updated TLS test messaging when nothing is detected or tests fail.
  • Fixed the TLS 1.0 script.
  • Resolved inconsistent DNS test results for the same device across multiple runs.
• UI/UX Fixes:
  • Fixed improper category highlighting in the advanced filter when selected.
  • Fixed OUI manufacturer name truncation at the IEEE registration authority text.
  • Resolved various UI bugs in risk profile PDF generation.
• Backend & Logic:
  • Fixed an error occurring during old risk profile updates.
  • Fixed missing runtime details for the Network Orchestrator job in error messages.
  • Fixed ws container restarts and listener OS errors.