Current Multi-Tenant Version | 3.68

AST-181578

The /api/scan-summary endpoint returned a 500 error.

AST-181426

Scans list endpoints ran a tenant-wide count on every request, driving database CPU spikes.

AST-180540

The “API Discovered” date filter in Global API Inventory showed “Invalid Date” after a date was selected.

AST-178289

Policy evaluation returned a false negative when queried before the async evaluation write completed, due to a race condition in policy-manager.

AST-177470

Scan Tag filtering in Analytics was not working correctly.

AST-177067

Scans ran for a long time following a “Too Many Requests” failure on SAST-RM.

AST-171915

Secret Detection’s Results view sent a noEngine sentinel (“-”) as the engine path segment, causing intermittent 500 errors when fetching groups.

AST-170544

IaC scans ran for a long time due to .cache files.

AST-169654

Query Editor showed an incorrect query recommendation.

AST-169203

The ‘Copy With More Than Two Arguments Not Ending With Slash’ KICS query did not account for Windows Dockerfiles using a custom escape directive.

AST-165021

Dockerfile scans had a false negative for “Last User is root” due to incomplete coverage.

AST-163901

The Preset Manager REST API returned the id field as a string, while the OpenAPI spec defined it as an integer.

AST-160444

IaC had a false negative for “Trusted Microsoft Services Not Enabled.”

AST-158080

Opening the Application Overview returned 404 API responses for Compliance Analytics and Results State Summary.

AST-156360

Secret Detection results incorrectly reported a revoked GitHub PAT as “Valid.”

SCA-28010

SCA Auto-PR failed for delta scans when dependency resolution was skipped.

SCA-27892

In Resolver 2.15.5 (pnpm), transitive dependencies of dev dependencies did not inherit Dev scope and were instead reported as Runtime.

AST-177020

IDP configuration accepted “Max inactivity days” values greater than 365, contradicting the documented valid range of 1–365.

Issues resolved in 3.68.1

AST-181580

The description for the “Unchecked Array Index” (CPP) query was missing.

AST-181447

The Scan Configuration panel showed the project’s default branch instead of the actual branch scanned for ZIP/TAR uploads.

SCA-28239

The SCA Global Inventory API returned fewer package records than the UI.

AST-180242

Incremental scan duration was affected by a full-table pagination retry in the APISEC SAST results fetch (GetSastResults).

AST-185431

The AI Assist tab in Global Settings showed a “No Data” error.

AST-182227

The /api/repos-manager/project-conversion endpoint failed to run the first scan when autoScanCxProjectAfterConversion was set to true for Azure repos.

AST-181817

The Container Security “Exclude Non-Final Stages” filter excluded the actual shipped image in multi-stage Dockerfiles built with --target.

AST-180619

Base-image remediation suggestions were incorrect or outdated.

AST-178802

Deleting a tenant-level override removed the query from custom presets.

AST-175803

Legacy PUT query override failed with a “presets not found” error when overriding a Cx-level query included in a tenant-level preset.

AST-171837

Container Security scans did not report CVE-2024-47554 for commons-io:commons-io 2.8.0, despite the package being in the affected range.

AST-165916

Rescanning a project did not trigger SCS scans.

AST-165206

SAST results from override queries showed “Failed to Retrieve Query Description.”

AST-164604

A scans-flow service error caused 2ms scans to become stuck.

AST-159624

Tenant-level imports reported critical severity even when CVSS was disabled.

AST-158838

SAST findings got stuck in PNE due to out-of-order predicate event processing.

AST-154957

Loading a ZIP file larger than 2GB returned 499 errors.

AST-120561

Scans failed due to “Remote backend is unreachable.”

AST-94959

SAST-RM failed to provision a worker.

AST-87114

SAST scans failed, with the canceling action originating from sast-rm.

AST-181085

GET sast-results recomputed per-scan query hashes on every result row, causing massive log and database volume.

AST-177020

IDP configuration accepted “Max inactivity days” values greater than 365, contradicting the documented valid range of 1–365.

AST-164726

The SAST scan summary’s stateCounters were not updated when reverting a finding to “To Verify” with no prior predicate record.

SCA-28332

The SCA Results Packages viewer behaved incorrectly.

AST-180217

GET /api/sast-results-predicates/{similarityId}/latest returned a 504 Gateway Timeout after approximately 3 minutes.

AST-178787

Containers Policy silently returned SUCCEEDED (0 violations) instead of failing when the image-risks data fetch failed.