Improvements
Issue Management
- Added ability to set vulnerabilities as accepted per FedRAMP VDR/VER ruleset
- Added ability to apply excuses to multiple issues
- Added ability to score issues based on CVSS and adjust such scoring based on relevant vectors
Inventory Management
- Various improvements to Inventory Management pipeline functionality related to VDR rules
- Build inventory import rules faster with reusable rules and conditions, previews, and safeguards against losing unsaved changes.
- Row-level error reporting helps you identify records that need attention without stopping successful records from processing.
Changes
- Added ability to create proposed and committed changes for the use in CR26 deliverable generation
CR26 Deliverables
- Added ability to select which CR26 deliverables you generate in a package, including CPO, OCR, AVI, VDR, VER, and more
- Turn review discussions into clear, anonymized feedback. Generate summaries of third-party feedback and your team’s responses for OCR revisions, reducing the effort of compiling review conversations into compliance reporting. Select the discussions to include, with quick filters for unresolved threads and the reporting period.
Security
This release includes security-related dependency updates. Updating is recommended for all users.
Self Hosting
Any self-hosted deployment in AWS that is using a classic ELB will need to be updated. Please review Migrating from AWS classic ELB to ALB for information on how to migrate your ingress configuration.
Comments
0 comments
Please sign in to leave a comment.