Tags

v4.1.5

v4.1.4

v4.1.3

v4.1.2

v4.1.1

v4.1.0

v4.0.0

Default to Security Report Schema version `15-0-4` when generating reports (!61)

v3.22.2

Fix panic when the CWE-XXX tag does not contain title text and is missing the shortDescription metadata field (!64)

v3.22.1

v3.22.0

Change `CWE` Identifier parsing to not require `: ` separator (!62)

v3.20.0

Prefer `shortDescription` text for semgrep `Name` field instead of parsed `CWE` tag field (!60)

v3.19.0

Update `FilterDisabledRules` to filter both `Vulnerabilities` and `Scan.PrimaryIdentifiers` (!58)

v3.18.0

Add `OWASPTop10Identifier` struct, update SARIF OWASP Identifier generation to handle year-scoped categories (!53)

v3.17.0

Update `Report.Sort()` to sort `Vulnerabilities` by `Severity`, `CompareKey`, and `Location.Dependency.Version` (if available) (!51)

v3.16.0

Map `none` level SARIF findings to `info` (!50)

v3.15.5

Update `testify` to v1.8.0 (!46)

v3.15.4

Fix schema validation error when report `dependency_files` is empty (!49)

v3.15.3

Downgrade default Security Report Schema version from `15-0-0` to `14-0-4`, Do not omit cve field when empty (!48)

v3.15.2

Update `common` to v3.2.1 to fix failing `gotestsum` command (!44)

v3.15.1

Ensure `scan.primary_identifiers` has consistent sort (!40)