Mend SCA — The Cyber Toolchain

Mend SCA Version 26.10.1 (01-November-2026)

Sun, 01 Nov 2026 00:00:00 GMT

Mend SCA adds an AI-powered Intelligent Agent for natural-language risk exploration and executive summaries across all projects⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Mend SCA now includes the Intelligent Agent, an AI assistant embedded in the platform that accepts natural language queries to explore capabilities, navigate to relevant views, and generate executive-level risk summaries across all applications and projects — enabled by default for organizations with a signed AI consent addendum.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA Version 26.9.3 (18-October-2026)

Sun, 18 Oct 2026 00:00:00 GMT

Mend SCA 26.9.3 adds aggregated SBOM exports, GitHub repo-level advisory imports, and GA Bun package manager support.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Introduces an option to generate a single aggregated SBOM file for application and multi-project scopes, consolidating multiple project-level files into one document with deduplication and merged occurrence data; supports `CycloneDX` and `SPDX` standards.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds support for GitHub repository-level security advisories as an import source, enabling detection of vulnerabilities published by project maintainers before they appear in the global GitHub Advisory Database (covering projects such as Keycloak, Next.js, n8n, Envoy, Argo CD, Traefik, vLLM, LangChain, and Open WebUI). • Adds the 'Include Proprietary Libraries in Workflows' organizational setting to control whether proprietary (in-house) components are included in automation workflows for 'Empty License' conditions. • Promotes Bun package manager support from open beta to general availability in the Mend CLI and repository integrations, enabling automatic detection and reporting of direct and transitive dependencies in projects using `package.json` alongside `bun.lock` or `bun.lockb` files. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA changelog-20261012-e411f675

Mon, 12 Oct 2026 08:08:14 GMT

Mend SCA adds workflow email recipient control, a new 'Send Email' action for CVE alerts, and dedicated zero-day threat notifications.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a `Send Email` workflow action to notify users of new findings — such as newly published CVEs — independent of scans, with configurable delivery frequencies.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Enables workflow creators to directly select specific users or groups as recipients for scan summary emails. • Adds dedicated zero-day alerts to provide immediate notification when the organization is vulnerable to emerging threats. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA Version 26.9.2 (04-October-2026)

Sun, 04 Oct 2026 00:00:00 GMT

Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA Version 26.9.1 (27-September-2026)

Sun, 27 Sep 2026 00:00:00 GMT

Mend SCA 26.9.1 adds Bun package manager support for automatic detection of direct and transitive JavaScript dependencies.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds Bun package manager support in the Mend CLI and Mend Repository Integrations, enabling automatic detection and reporting of direct and transitive dependencies in projects using `package.json` alongside `bun.lock` or `bun.lockb` files.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA Version 26.8.2 (06-September-2026)

Sun, 06 Sep 2026 00:00:00 GMT

Mend SCA 26.8.2 adds a unified vulnerability remediation experience with a new Top Fix column and updated Remediation tab. • Adds a `Top Fix` column in the Findings table to surface the recommended remediation action per vulnerability. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA Version 26.6.1 (28-June-2026)

Sun, 28 Jun 2026 00:00:00 GMT

Mend SCA adds CVSS source transparency, organization-level reports, Unspecified Copyrights state, and a Number of Licenses column. • Adds `CVSS scores` source display (e.g. NVD, MITRE) in the UI and APIs to clarify scoring discrepancies • Adds organization-level reports for Dependencies Attribution, Dependencies Due Diligence, and Dependencies Inventory, accessible via API at the application/project level • Introduces a new `Unspecified Copyrights` state to the OS Inventory with dedicated filtering and visual indication • Adds a `Number of Licenses` column to the OS Inventory table for quick licensing complexity assessment Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA 26.5.2

Sun, 14 Jun 2026 00:00:00 GMT

Mend SCA adds organization-level Dependencies Risk report via new scalable pipeline • `Dependencies Risk` report is now available at the organization level in the Mend Platform UI Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA Version 26.4.3 (18-May-2026)

Mon, 18 May 2026 00:00:00 GMT

Mend SCA v26.4.3 adds .NET deps.json resolver to CLI for improved dependency detection • Adds an improved `.NET` resolver in the Mend CLI that relies on `.deps.json` in the build folder for increased dependency detection accuracy. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA Version 26.3.2 (12-April-2026)

Sun, 12 Apr 2026 00:00:00 GMT

Mend SCA v26.3.2 adds Zero-Day response workflows with dedicated catalog, configurable enforcement, and Excel Due Diligence reports. • Adds the `Zero-Day` catalog for immediate risk visibility and audit-level transparency of critical vulnerabilities • Introduces configurable zero-day response workflows in the Mend AppSec Platform to enable user-controlled enforcement and permanent violation tracking • Enables generation of the Due Diligence report in Excel format Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA Version 26.3.1 (22-March-2026)

Sun, 22 Mar 2026 00:00:00 GMT

Mend SCA 26.3.1 adds uv support, zero-day catalog, and `RESOLVEDEPENDENCIES` env var control • Adds `uv` package manager support via Mend CLI and repository integrations for Python scanning and Reachability analysis • Adds a dedicated Zero-Day Catalog page accessible from the Profile menu in the Mend AppSec Platform Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA Version 26.2.2 (08-March-2026)

Sun, 08 Mar 2026 00:00:00 GMT

Mend SCA adds EPSS Score column to UI findings table and dependencyContexts field to Get Project Security Findings API • Adds `dependencyContexts` field to the Get Project Security Findings API to show direct vs. transitive dependency roots. • Adds a new EPSS Score column to the Dependencies → Findings table for in-place risk sorting. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA Version 26.2.1 (22-February-2026)

Sun, 22 Feb 2026 00:00:00 GMT

Mend SCA v26.2.1 introduces Source File Matching with new page and column, plus auto-classification for NVIDIA proprietary license. • Adds manual grouping of source files into logical libraries via the new dedicated `Source Files` page and manual override options. • Introduces a new `Source File` column in Mend Platform tables to display file-grouping data. • Auto-detects and classifies "NVIDIA Proprietary Software License" as proprietary without manual configuration. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA 26.2.1

Sun, 22 Feb 2026 00:00:00 GMT

Mend SCA 26.2.1 adds Source File Matching with new UI columns and pages, plus proprietary license detection. • Adds a 'Source File' column in Mend Platform to group source files into logical libraries. • Adds a dedicated 'Source Files' page for manual grouping and override of library associations. • Automatically detects and classifies the 'NVIDIA Proprietary Software License' as proprietary. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA Version 26.1.1 (25-January-2026)

Sun, 25 Jan 2026 00:00:00 GMT

Mend SCA v26.1.1 adds Major/Minor upgrade recommendations to the Least Vulnerable Package strategy. • The Least Vulnerable Package (LVP) remediation strategy now recommends both major and minor version upgrade paths. Breaking changes: • The legacy Library Page in the SCA module has been removed; users must access library data via dedicated side-panels. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA (13-January-2026)

Tue, 13 Jan 2026 00:00:00 GMT

Mend SCA adds SPDX-ID field visibility and multi-license name support under single identifiers • `SPDX-ID` field visible in the license side panel for managing multiple distinct license names under a single SPDX identifier Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA Version 25.12.2 (11-January-2026)

Sun, 11 Jan 2026 00:00:00 GMT

Mend SCA adds three async account-level APIs to export Dependency reports in Excel format. • Adds asynchronous, account-level API endpoints for exporting Dependencies reports in EXCEL format with targeted filters for library name or finding ID. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA 25.12.2

Sun, 11 Jan 2026 00:00:00 GMT

Mend SCA 25.12.2 adds three account-level API endpoints for exporting Dependency reports in Excel format. • Introducing `GET /api/dependencies/report/excel/inventory` and `GET /api/dependencies/report/excel/findings` account-level API endpoints for exporting Dependencies reports in EXCEL format • Adds targeted filter support for `library_name` and `finding_id` on the new Excel export endpoints Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA Version 25.12.1 (28-December-2025)

Sun, 28 Dec 2025 00:00:00 GMT

Mend SCA v25.12.1 adds SBOM import API 3.0 endpoint for automation. • Adds support for SBOM import via a new API 3.0 endpoint under the Application scope • Retrieves detailed import logs for improved automation and observability Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA Version 25.11.2 (14-December-2025)

Sun, 14 Dec 2025 00:00:00 GMT

Mend SCA v25.11.2 adds SBOM API 3.0 import, Logs API, account-level Reports tab, and Jira integration for Legal workflows. • Added support for SBOM import through API 3.0 • Added a dedicated logs API for enhanced traceability • Added a new Reports tab in the Accounts view for Inventory and Security Alerts reports • Legal and Compliance workflows now support Jira Issue creation Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA Version 25.11.1 (30-November-2025)

Sun, 30 Nov 2025 00:00:00 GMT

Mend SCA v25.11.1 adds SBOM import UX improvements, dependency path visibility, SPDX ID display, CSV export for logs, and log download limits. • SBOM import experience now features a step-by-step process with status indicators and actionable guidance for validation or structure issues • Added a new field to the license side panel displaying the SPDX identifier for each license • Enhanced project view displays each direct library occurrence with its specific dependency path • Users receive clear notifications when actions affect all occurrences in the project view • Added export to CSV option to SBOM import logs • Added refresh options to SBOM import logs • Added 5 MB log view limit with download options for larger logs Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA 25.11.1

Sun, 30 Nov 2025 00:00:00 GMT

Mend SCA 25.11.1 adds SBOM import log viewing limits with download, SPDX ID display in license side panel, and direct dependency path visualization. • Adds a 5 MB log view limit for SBOM imports with download options for larger logs • Displays the SPDX identifier for each license in the license side panel • Enhances project view to display specific dependency paths for each direct library occurrence • Adds export to CSV and refresh options to SBOM import logs Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA (25-November-2025)

Tue, 25 Nov 2025 00:00:00 GMT

Mend SCA adds Shai-Hulud zero-day detection via dedicated workflow event condition. • Adds a dedicated workflow event condition for the Shai-Hulud zero-day vulnerability Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA Version 25.10.3 (16-November-2025)

Sun, 16 Nov 2025 00:00:00 GMT

Automation workflows now apply in every CLI dependencies scan; enhanced Project view shows specific dependency paths. • `mend dependencies` scans now universally apply Automation Workflows, removing the previous requirement for the `--update` parameter • Project view now displays each direct library occurrence with its specific dependency path to distinguish multiple instances Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA Version 25.10.2 (02-November-2025)

Sun, 02 Nov 2025 00:00:00 GMT

This release enables immediate analysis of C++ Conan dependencies in Mend CLI without config changes. • Mend CLI now scans `Conan` package manager dependencies with reachability analysis out-of-the-box Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA Version 25.10.1 (19-October-2025)

Sun, 19 Oct 2025 00:00:00 GMT

Mend SCA 25.10.1 adds Security Assistant MCP integration for real-time vulnerable library replacement in IDEs. • `Mend Security Assistant MCP` integration is now available for SCA, enabling detection and replacement of vulnerable libraries within AI-native IDE workflows Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA Version 25.9.1 (28-September-2025)

Sun, 28 Sep 2025 00:00:00 GMT

Mend SCA v25.9.1 adds import/export support for CycloneDX 1.6 and new SBOM sources (Syft, Dependency-Track). • Adds support for importing Syft-generated SBOMs • Adds support for importing Dependency-Track-generated SBOMs • Adds support for importing self-generated SBOMs • Enables CycloneDX 1.6 format for both import and export Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA Version 25.8.2 (07-September-2025)

Sun, 07 Sep 2025 00:00:00 GMT

New SCA conditions for direct dependencies, multiple licenses, and exploit-linked vulnerabilities; grouped findings in Direct Library side-panel. • Introduces new SCA conditions for direct dependencies, multiple licenses, and publicly available exploits to enhance workflows • Adds grouping of findings in the Findings tab within the Direct Library side-panel via collapsible/expandable Library Rows • Enables aggregated information and individual CVE details display in the new grouped view Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA 25.8.2

Sun, 07 Sep 2025 00:00:00 GMT

Mend SCA 25.8.2 adds new workflow conditions for direct dependencies, multi-license detection, and exploit prioritization plus grouped findings UI. • Adds three new SCA conditions to enhance workflows: trigger actions for direct dependencies, detect components with multiple licenses, and prioritize vulnerabilities with publicly available exploits. • Enables grouping of findings in the Findings tab within the Direct Library side-panel via collapsible/expandable Library Rows. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA Version 25.7.2 (10-August-2025)

Sun, 10 Aug 2025 00:00:00 GMT

Mend SCA v25.7.2 enables organization-level Dependencies SBOM reports and SPDX license alignment updates • Dependencies SBOM report is now generatable at the organization level, in addition to the existing application/project level support. • Improved license alignment with the SPDX format by replacing legacy license identifiers: 'Eclipse 1.0' → 'BSD 3', 'Jaxen Werken' → 'BSD 3', 'Cryptix General License' → 'BSD 2', and 'Cup Parser Generator License' → 'Standard ML of New Jersey'. • The Dependencies SBOM report can now be generated at the organization level, expanding access beyond the previous application/project scope. • Updated internal license mapping: Eclipse 1.0 replaced by BSD 3, Jaxen Werken replaced by BSD 3, Cryptix General License replaced by BSD 2, and Cup Parser Generator License replaced by Standard ML of New Jersey for SPDX compliance. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA 25.7.2

Sun, 10 Aug 2025 00:00:00 GMT

Dependencies SBOM report can now be generated at the organization level in Mend SCA. • Adds Dependencies SBOM report generation at the organization level • Improves license alignment with SPDX format (e.g., Eclipse 1.0 → BSD 3) Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA Version 25.7.1 (27-July-2025)

Sun, 27 Jul 2025 00:00:00 GMT

Mend SCA v25.7.1 adds library violation count columns, 'In Review'/'Issue Created statuses, and org-level Dependencies Findings reports. • Adds new sortable/filterable security violation count columns in the main table and side panels for direct libraries • Adds "In Review" and "Issue Created" statuses for direct libraries in the Mend AppSec Platform • Enables generation of Dependencies Findings reports at the organization level Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA Version 25.4.3 (18-May-2025)

Sun, 18 May 2025 00:00:00 GMT

Mend SCA adds Remediation section to findings UI and MEND_SCA_EXCLUDE_DEP_CLASS env var for Gradle scan filtering • `Unreviewed` items in Direct Libraries, Libraries, and Findings tables now show a blue dot indicator and hover tooltip; suppressed item backgrounds change to light gray. • Introduces the `MEND_SCA_EXCLUDE_DEP_CLASS` environment variable for Gradle scans via the Mend CLI to exclude specific configurations from scan results. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA Version 25.4.2 (04-May-2025)

Sun, 04 May 2025 00:00:00 GMT

Mend SCA 25.4.2 introduces Legal compliance UI and fixes API field naming • Adds a new Legal section in the left navigation menu to manage licensing risks for open-source, proprietary, and commercial libraries. • Adds a dedicated side panel for license-related details within the Legal workflow. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA Version 25.4.1 (20-April-2025)

Sun, 20 Apr 2025 00:00:00 GMT

Mend SCA v25.4.1 adds HeroDevs commercial mitigation paths, C# transitive fix recommendations, and a Top 10 libraries widget. • Adds identification and display of HeroDevs libraries in the Commercial section of the SBOM page (requires a HeroDevs license) • Adds alternative mitigation solution for vulnerabilities in deprecated open-source libraries by suggesting an upgrade path to an available commercial version by HeroDevs • Introduces a widget showcasing the Top 10 High-Risk Direct Libraries by criticality on the Mend AppSec Platform Application and Project Summary pages • Implements a hierarchical panel user experience with breadcrumb navigation combining three side panels Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA Version 25.2.2 (09-March-2025)

Sun, 09 Mar 2025 00:00:00 GMT

Mend SCA v25.2.2 adds Bower, Poetry, Packrat, SBT, Cocoapods to CLI; extends Reachability to Lerna, pnpm, Conda, NuGet. • Adds `Bower` (JavaScript) package manager support in the Mend CLI • Adds `Poetry` (Python) and `Conda` (Python) package manager support in the Mend CLI • Adds `Cocoapods` (Swift & Objective C) package manager support in the Mend CLI • Extends Reachability Analysis to `Lerna` and `pnpm` for JavaScript • Extends Reachability Analysis to `Conda` and `Poetry` for Python • Extends Reachability Analysis to `NuGet` (C#) package manager Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA 25.2.1

Mon, 24 Feb 2025 00:00:00 GMT

Mend SCA 25.2.1 adds 'isProprietary' field to API 3.0 and updates Dependencies Risk Report with metadata. • Adds `isProprietary` boolean field to the Mend AppSec Platform API 3.0 to indicate whether a library is proprietary • Enhances the Dependencies Risk Report with organization, application, and project names on the first page Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA Version 25.2.1 (24-February-2025)

Mon, 24 Feb 2025 00:00:00 GMT

Mend SCA v25.2.1 adds 'isProprietary' field to SBOM via API 3.0 and updates risk report metadata/columns. • Introduces the `isProprietary` boolean field in SBOM reporting (hidden for non-proprietary libraries) via the Mend AppSec Platform and API 3.0 • Enhances the Dependencies Risk Report with organization, application, and project names metadata on the first page based on scope • Adds a "Last Scan" column to application and project-level risk reports displaying recent scan dates Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA Version 25.1.1 (26-January-2025)

Sun, 26 Jan 2025 00:00:00 GMT

Mend SCA adds indicators, filters and reports for malicious packages in the main dashboard. • Main dashboard now shows a special indicator for malicious packages present in the organization • New indicators, filters and reports added to streamline detecting and removing malicious packages Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA 24.12.2

Sun, 12 Jan 2025 00:00:00 GMT

Mend SCA adds .NET reachability analysis (Open Beta) and Python direct/transitive fix recommendations. • Adds `Reachability for .NET` support in the Mend CLI and GitHub integration for C# projects using NuGet • Adds fix recommendations for both direct and transitive dependencies in Python projects across the Mend AppSec Platform, Developer Platform, and repo integrations (excluding self-hosted) Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA Version 24.11.2 (15-December-2024)

Sun, 15 Dec 2024 00:00:00 GMT

Mend SCA 24.11.2 introduces `remediation-strategy` configuration for choosing between Least Vulnerable Package or First Fix. • Introduces a new configuration option for remediation strategies, allowing users to choose between Least Vulnerable Package (LVP) or First Fix. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA 24.11.2

Sun, 15 Dec 2024 00:00:00 GMT

Mend SCA adds remediation strategy configuration to Platform, Jira integration and API • Introduces a new `remediation_strategy` configuration option allowing selection of 'Least Vulnerable Package' (LVP) or 'First Fix' • Propagates the selected remediation strategy consistently across the Mend Platform UI, Jira integration sync, and Platform API 3.0 Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA Version 24.11.1 (01-December-2024)

Sun, 01 Dec 2024 00:00:00 GMT

Mend SCA adds the --dev parameter to scan development dependencies for npm, Maven, Gradle, Go, Ruby and SBT. • Adds `--dev` parameter to enable scanning of development tools and dependencies • Supports `npm`, `Maven`, `Gradle`, `Go`, `Ruby` and `SBT` package managers for development dependency scans Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA 24.10.3

Mon, 18 Nov 2024 00:00:00 GMT

Open Beta: Risk Factors column grouping Reachability, Exploitability and Maliciousness statuses with filterable icons. • Adds the `Risk Factors` column in Mend SCA UI to group `Reachability`, `Exploitability` and `Maliciousness` statuses with icon representations for filtering. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA Version 24.10.3 (18-November-2024)

Mon, 18 Nov 2024 00:00:00 GMT

Mend SCA introduces Risk Factors (Reachability, Exploitability, Maliciousness) and Python Poetry support • Adds a filterable "Risk Factors" column that groups Reachability, Exploitability, and Maliciousness statuses into icon-based representations for prioritizing findings. • Extends Reachability analysis to the Poetry package manager within supported repository integrations. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA 24.10.2

Mon, 04 Nov 2024 00:00:00 GMT

Mend SCA 24.10.2 adds Open Beta reachability analysis for Python (pip/Pipenv) to CLI and GitHub integrations • Adds `reachability` analysis for Python projects using pip or Pipenv in the Mend CLI, now available in Open Beta. • Adds `reachability` analysis for Python projects using pip or Pipenv in the GitHub repo integration, now available in Open Beta. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA 24.10.1

Sun, 20 Oct 2024 00:00:00 GMT

Mend SCA 24.10.1: SBOM Import GA lets users upload files to create or update projects. • SBOM Import feature is now generally available for uploading SBOM files to create new projects in the Mend AppSec Platform or updating existing ones Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA Version 24.10.1 (20-October-2024)

Sun, 20 Oct 2024 00:00:00 GMT

SBOM Import reaches GA, enabling project creation and updates via upload. • `SBOM Import` feature is generally available to upload SBOM files for creating new projects or updating existing ones in the Mend AppSec Platform. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA Version 24.9.2 (13-October-2024)

Sun, 13 Oct 2024 00:00:00 GMT

Mend CLI wraps Unified Agent; Dependency table adds Direct/Transitive column • Adds a "Direct/Transitive" parameter to the Dependency column in Security -> Dependencies -> Libraries, Security -> Dependencies -> Findings, and Compliance -> SBOM -> OOS List tables Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca

Mend SCA Version 24.8.2 (08-September-2024)

Sun, 08 Sep 2024 00:00:00 GMT

Mend SCA 24.8.2 adds package health insights, npm maintenance status, and optional vulnerability data in SPDX SBOM reports • Adds Package Health information on the Recommended Fix tab to guide optimal upgrade paths for vulnerable packages • Adds maintenance status (Deprecated or Maintained) to npm package versions in the UI to help assess upgrade safety • Adds toggle in the 'Create Report' wizard to exclude vulnerability data from Dependencies SBOM reports in SPDX format Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-sca