Revenera

No entries match these filters. Clear filters

1. Code Insight electronic update 2026-08-31 Aug 31, 2026 · release notes

   New OSVOSVOpen Source Vulnerabilities, a vulnerability database and schema maintained by Google that gives cyber tools a machine-readable, cross-ecosystem format for querying and sharing CVE-style advisories. integration and GHSA version handling logic in Code Insight Maven detection

   • Adds OSV (Open Source Vulnerabilities) as a new vulnerability data source for the Maven ecosystem.

   1 detail in Everything

2. Code Insight 2026 R3 Release Notes Aug 2026 · release notes

   Code Insight 2026 R3 adds remote storage for dynamic scanners, SCASCASoftware composition analysis, identifying third-party dependencies and checking them for known vulnerabilities and license issues. It covers software a team uses rather than writes itself. Upload microservice, SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave./Azure provisioning, project archiving, CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. v4, and bulk policy CSV import.

   • Adds SMBSMBA network file-sharing protocol developed by Microsoft that lets systems share files, printers, and named pipes over a network; cyber tools target or speak it because it is ubiquitous in Windows environments. server connection configuration for dynamic scanner remote file storage via Configuring Dynamic Scanner.
   • Adds new REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. endpoints and deployment instructions for the lightweight SCA Upload Service Spring Boot microservice.
   • Enables SCIM-based user provisioning from Microsoft Entra ID (Azure) via Configuring Code Insight for SCIM.
   • Adds project archive workflow to retire projects while preserving analysis data, visible in Archiving a Project.
   • Allows administrators to select CVSS v4.0 as the vulnerability scoring version via Setting the CVSS Version.

   +3 more show less

   • Permits users to manage vulnerability alert subscriptions directly from the Project Summary page or secure email links.
   • Enhances Analysis Workbench Evidence Details tab to display license evidence uncovered by remote scan-agent plugins.
   • Adds bulk creation and update of license policy criteria via CSV import in Task Management for users with Manage Policy privileges.

   8 details in Everything

3. SBOM Insights November 2023 Features and Resolved Issues Nov 2023 · release notes

   SBOMSBOMA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue. Insights adds Technopedia Software Release ID field and SPDX 2.3SPDX 2.3An open standard from the Linux Foundation for describing software bills of materials, letting cyber tools exchange dependency, license, and vulnerability data in a common machine-readable format. import support.

   • Adds Software Release ID field to bucket definitions for Technopedia association
   • Adds import support for SPDXSPDXAn open standard for describing software components, licenses and their relationships. Its documents let different tools exchange a software bill of materials without inventing a new format. 2.3 data files

   2 details in Everything

4. SBOM Insights August 2023 Features and Resolved Issues Aug 2023 · release notes

   SBOMSBOMA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue. Insights adds subscription-based email notifications for new vulnerability alerts and a vulnerability bar graph in the slideout.

   • Adds subscription service for daily email notifications of new security vulnerabilities associated with SBOM parts in an organization
   • Adds Vulnerabilities bar graph to the top of the <SBOM part> contains the following security vulnerabilities slideout to show breakdown by severity

   2 details in Everything

5. SBOM Insights April 2023 Features and Resolved Issues Apr 2023 · release notes

   SBOMSBOMA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue. Insights 2023.04.1 adds saved advanced searches, Cyclone VDRVDRA Virtual Data Room is a secure, hosted document repository used for controlled sharing of sensitive files during due diligence, audits, or investigations, giving cyber tools a governed environment to exchange evidence or reports./VEXVEXA machine-readable statement from a vendor saying whether a CVE in a component actually affects their product. It is how a scanner is told to stop flagging a vulnerability that is not reachable. reports, SPDXSPDXAn open standard for describing software components, licenses and their relationships. Its documents let different tools exchange a software bill of materials without inventing a new format. relationships, and auto-archived report downloads

   • Users can now save and share advanced SBOM part searches via the Save & Search button in the Advanced SBOM Parts Search UI
   • Generates Cyclone VDR (Vulnerability Disclosure Report) alongside CycloneDXCycloneDXAn open standard for describing software components and their dependencies, vulnerabilities and other supply-chain information. Tools use it to exchange bills of materials and related evidence. to map vulnerabilities to impacted parts
   • Generates Cyclone VEX (Vulnerability Exploitability eXchangeVulnerability Exploitability eXchangeA machine-readable statement from a vendor saying whether a CVE in a component actually affects their product. It is how a scanner is told to stop flagging a vulnerability that is not reachable.) report to document known vulnerabilities excluded from impact based on application context
   • SPDX reports now include relationship and dependency descriptions between SBOM parts
   • Generated reports are automatically archived in a zip file for single-file download

   5 details in Everything

6. SBOM Insights December 2022 Features and Resolved Issues Dec 2022 · release notes

   SBOMSBOMA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue. Insights adds UI filtering by part name and a new REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. endpoint to search SBOM parts by bucket ID and name.

   • Manage SBOM page now supports filtering the grid view by SBOM part name in addition to existing bucket filters.
   • New REST API endpoint Search SBOM Parts allows searching for SBOM parts by one or more buckets, a specific part name, or both, using JSON query bodies with AND/OR logic and sorting options.

   2 details in Everything

7. SBOM Insights November 2022 Features and Resolved Issues Nov 2022 · release notes

   SBOMSBOMA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue. Insights adds UI vulnerability grid for parts, part editing, and provenanceprovenanceEvidence recording where a software artifact came from and how it was built, including its source and build process. It helps a consumer check that the artifact matches a trusted build. fields to Jobs API

   • Adds a Vulnerabilities bar graph in the UI that opens a grid showing CVE details (source, ID, CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. score, severity) for each SBOM part
   • Enables users to edit all fields of existing SBOM parts directly in the tool
   • Adds SBOM_Format, SBOM_Created_On, SBOM_Created_By, and SBOM_Component provenance fields to the Jobs API response

   3 details in Everything

8. SBOM Insights September 2022 Features and Resolved Issues Sep 2022 · release notes

   SBOMSBOMA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue. Insights September 2022 adds bucket hierarchy management, manual SBOM part creation, REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services., and report generation.

   • Adds Buckets for product hierarchy management to store and nest SBOM parts by business unit or application
   • Adds REST API for managing buckets, SBOM parts, associated files, jobs, and custom types
   • Enables manual creation of SBOM parts via Component Lookup or freeform input
   • Supports import of SPDXSPDXAn open standard for describing software components, licenses and their relationships. Its documents let different tools exchange a software bill of materials without inventing a new format. v2.2 (.spdx) and CycloneDXCycloneDXAn open standard for describing software components and their dependencies, vulnerabilities and other supply-chain information. Tools use it to exchange bills of materials and related evidence. v1.4 (.json/.xml) SBOM formats

   4 details in Everything