Current Multi-Tenant Version | 3.36

AST-86751

GitLab OnPrem Integrated project scan had errors when the base URL contained multiple path segments separated by slashes.

AST-86802

Pull request decoration for BitBucket failed due to a key duplication exception in the method addScaResultsExploitablePath.

AST-87976

The View findings button failed to refresh the request data, displaying outdated information.

AST-90805

Secret detection experienced a Context Deadline Exceeded error while inserting results, causing incomplete or failed analysis.

AST-91291

Resolved a bug where the project rules API stopped functioning.

AST-91398

Fixed issue where WebAudit failed to scan a project.

AST-65357

False positive due to an undefined pattern when handling the enum and date format.

AST-65360

False positive for undefined maximum length in fields using an enum format.

AST-65365

False positive triggered by invalid media type value, suggesting misconfiguration or insufficient validation.

AST-70809

Description and expected value were swapped, causing confusion or test failures.

AST-73206

False positives were identified for generic passwords and secrets, indicating that sensitivity detection needed refinement.

AST-75459

Fixed a bug where error messages showed technical details.

AST-77315

The /api/scan-summary endpoint did not account for muted packages, leading to misleading results.

AST-81789

The UI displayed zero lines of code for partial scans, though code was present.

AST-83168

SAST results were missing changelogs and notes, making it difficult to track scan history.

AST-83171

Projects could not be assigned to applications when using custom queries.

AST-83672

Project or branch overview page loaded extremely slowly, affecting usability.

AST-84120

The scan type shown in the project scan history was incorrect, leading to inconsistencies with the scans list.

AST-84692

Project overview failed to load due to a scan summary timeout.

AST-86484

GET projects-overview API response was missing repoId for projects whose latest scans were older than 21 days.

AST-88911

An unrelated checkbox that appeared in the global SCA settings was removed.

AST-93140

Scans took an additional 30+ minutes during the fetch-sources stage, impacting performance.

SCA-20810

The publish date was modified unexpectedly, possibly affecting audit trails or versioning.

SCA-21398

Conflicts between the container configurations of the system and the client project led to scan issues.

SCA-21718

A development-only parent package caused errors when transitive packages were treated as production.

SCA-21986

Pod stopped responding, which in turn caused the source resolver to timeout.

SCA-22049

Transaction commit failed in the scaPackagesProcessor, resulting in incomplete processing.

SCA-22051

Fixed error where io.netty:netty-handler 4.1.115.Final was considered missing when scanning the ZIP package.

SCA-22129

License information appeared unspecified in the CXSCA report.

SCA-22296

Searching by package name on the risk list page did not work, hindering usability.

SCA-22336

Scans failed when using SBOM format SPDX-2.2.

SCA-22364

Fixed a problem with SBOM export.

SCA-22406

Fixed a problem with SBOM SPDX scan where it had incorrect or missing package relationships, such as direct or transitive links.

SCA-22458

ContainerResultsProcessor was causing scans to fail.

SCA-22709

Automated test Topaz_ScanNugetProjectGetReport_HappyFlowTest failed due to hash matching logic introduced in the new flow.

AST-88083

When a group had more than 100 members, it was not possible to search for a newly added account in the member list.

AST-88315

In SAML group mappings, when sync mode = force, the "override user groups" toggle was disabled in the UI by default, but it acted as enabled.

AST-89122

Users with the Manage-Clients role only were able to delete clients from other users.

AST-89420

An internal server error occurred while accessing "Lost Authenticator device".

AST-90807

New IAM UI: First SAML login with user creation, was generating application user email.

AST-70809

Descriptions of value and expected value were swapped.