Release Notes¶
These notes summarize customer-facing SecureObs updates. They focus on product behavior, scanner coverage, upgrade guidance, and visible fixes.
v1.3.0 - 2026-06-24¶
Infrastructure analysis¶
- Added credential-free Terraform source analysis. Teams can generate infrastructure topology from Terraform files without running a Terraform plan or providing cloud credentials.
- Added support for Terraform variable files during source analysis, improving graph coverage for repositories that keep environment-specific values in tfvars files.
v1.2.12 - 2026-06-19¶
Infrastructure graph¶
- Added Terraform plan-based infrastructure graph analysis. The scanner analyzes plans in the customer CI environment and uploads sanitized topology, findings, and run metadata to SecureObs.
- Added an option for teams to require infrastructure analysis in CI, so missing or failed graph uploads can block the run when that policy is desired.
v1.2.10 - 2026-06-17¶
Scanner runtime¶
- Improved scanner runtime stability by standardizing on the supported Python runtime used by the bundled security tools.
- API keys copied from CI secret stores with accidental surrounding whitespace are now handled correctly.
v1.2.7 - 2026-05-10¶
Release process¶
- Improved release automation for scanner image updates and backend deployment coordination.
v1.2.6 - 2026-05-10¶
Version tracking¶
- Projects now report their scanner image version after scans. The dashboard shows update guidance only for projects that have actually run a scanner.
v1.2.5 - 2026-05-09¶
Scan summary¶
- Scanner runs now print a clearer per-scanner summary with ingested finding counts, deduplicated counts, and skip or error reasons.
v1.2.4 - 2026-05-09¶
Scanner reliability¶
- Improved dependency and JavaScript scanner reliability, including cleaner handling of partial results and parser warnings.
- Scanner logs now make unexpected scanner failures easier to diagnose while keeping ordinary no-result skips quiet.
- Updated Azure DevOps pipeline labels so scanner steps more accurately describe the full scanner suite.
v1.2.3 - 2026-05-09¶
Scanner reliability¶
- Improved handling of partial dependency scan results so successful findings are still captured when some files cannot be analyzed.
- Rebuilt the scanner image with the intended JavaScript security scanner dependency set.
v1.2.2 - 2026-05-09¶
Dependency scanning¶
- Dependency scanner partial failures now produce a graceful skip instead of crashing the pipeline.
v1.2.1 - 2026-05-09¶
JavaScript scanning¶
- Fixed a JavaScript security scanner compatibility issue that could prevent JavaScript findings from being reported.
v1.2.0 - 2026-05-02¶
Scanner coverage¶
- Expanded the scanner image beyond Semgrep and Gitleaks to include Trivy, Bandit, Checkov, OSV-Scanner, and ESLint security checks.
- Clarified which scanners are bundled today and which integrations should be run through their native vendor workflows.
v1.1.0 - 2026-05-02¶
Scanner configuration¶
- Projects can now control enabled scanners from the SecureObs dashboard. CI configuration stays stable while scanner selection changes in the product.
- Scanner runs now use a safe default scanner set when scanner configuration cannot be fetched because of a transient service issue.
v1.0.0 - 2026-04-27¶
Initial release¶
- Released the first SecureObs scanner image with repository scanning, finding ingestion, build gate checks, and pull request summary comments for GitHub Actions and Azure DevOps.