From dd4dca9cd6b8da43303f381e6c1aa3db8d96dfab Mon Sep 17 00:00:00 2001 From: code-luac <96431470+code-luac@users.noreply.github.com> Date: Thu, 29 May 2025 22:21:43 +0300 Subject: [PATCH] Update rns.md --- docs/release-notes/rns.md | 94 ++++++++++++++++++++++++--------------- 1 file changed, 59 insertions(+), 35 deletions(-) diff --git a/docs/release-notes/rns.md b/docs/release-notes/rns.md index 9508e9aae..d74bcb370 100644 --- a/docs/release-notes/rns.md +++ b/docs/release-notes/rns.md @@ -1,43 +1,67 @@ -# Scribe Hub -*Last modified January 29, 2025* - -# Scribe Hub Version 1.30.3 -*January 29, 2025* - -## Improvements -### Team Homepage -- The 'Overview' dashboard, previously under 'Reports' was relocated to become the team's home page. -### Account -- The 'Settings' section was renamed to 'Account.' -- The 'User Logs' dashboard, previously under the 'Reports' section, was relocated to 'Accounts.' -### SBOMs (SBOM Inventory) -- The 'Reports' section was renamed to 'SBOMs.' -- The 'SBOM' dashboard displays a new 'Relation' column denoting whether a dependency is direct or transitive. The 'More' dialog displays the related dependencies (parent or child) in the SBOM. -- A new chart in the 'Vulnerabilities' dashboard under the SBOMs section visualizes the funnel of prioritized issues. -### Evidence dashbaord -- The Evidence dashboard previously under 'Reports' was relocated to 'Policy.' -- User can filter Evidence by 'Evidence ID.' -- 'Evidence ID' appears in the 'More' dialog in the evidence table. -- Evidence collected from the Discovery process displays the 'Signer ID' as other types of Evidence already do. +# Scribe Hub +*Last modified: May 29, 2025* + --- -## Behavior Changes -- The SLSA dashboard under the 'Reports' section was deprecated. SLSA findings are accessible from the 'Policy', Evaluation dashboard. -## Scribe Hub Version 1.23.0 -*November 4, 2024* +## Version 1.43.2 (May 29, 2025) ### Improvements -#### Discovery Asset table -- Added Parent asset as property in the Asset table. +- Under **Products ▸ `` ▸ Findings**, users can now review uploaded findings from third-party application-security scanners. +- Added simplified policies for handling scanner findings to the catalog. +- Support for ingesting CycloneDX v1.6 SBOMs. +- Vulnerability tables enhancements: + - Filter by dependency-relationship type (Direct vs. Transitive). + - Display full vulnerability description. + - Show associated CWEs. +- **Analytics (Early Access)** improvements: + - New Vulnerability Risk dashboard. + - Pull end-of-life data from endoflife.date. +- **Usability**: + - New sidebar filter on the Products page. + - Minor improvements to email alerts. + +--- -- Added 'More' link to asset line for extended info. -- Canceled the Lineage tab which became redundant due to the above change. -- Improved loading time of tables, filters, and graphs. +## Version 1.30.3 (January 29, 2025) -## Scribe Hub Version 1.21.0 ### Improvements -#### Attestation Signing -- Sign with AWS KMS keys. -#### SLSA Verification -- Compliance with SLSA levels 1 and 2 is validated by the client (valint). This replaces the previous implementation and standardizes the policy as a code model. +- **Team Homepage** + - Relocated the **Overview** dashboard (formerly under Reports) to become the team’s home page. +- **Account** + - Renamed **Settings** to **Account**. + - Moved the **User Logs** dashboard from Reports into Accounts. +- **SBOMs (SBOM Inventory)** + - Renamed the **Reports** section to **SBOMs**. + - In the SBOM dashboard: + - Added a **Relation** column showing whether a dependency is direct or transitive. + - “More” dialog now displays related dependencies (parent or child). + - Added a new funnel chart under SBOMs ▸ Vulnerabilities to visualize issue prioritization. +- **Policy** + - Moved the Evidence dashboard (formerly under Reports) into Policy. + - Added filtering by Evidence ID. + - Exposed Evidence ID in the “More” dialog. + - Discovery-collected evidence now shows **Signer ID** like other evidence types. + +### Behavior Changes +- Deprecated the SLSA dashboard under Reports; SLSA findings are now accessible via the Policy ▸ Evaluation dashboard. + +--- + +## Version 1.23.0 (November 4, 2024) +### Improvements +- **Discovery** + - In the Asset table: + - Added **Parent asset** as a column. + - Replaced the Lineage tab with a “More” link for extended info. + - Improved load times for tables, filters, and graphs. + +--- + +## Version 1.21.0 + +### Improvements +- **Attestation** + - Sign attestations with AWS KMS keys. +- **SLSA Verification** + - Client-side validation for SLSA Levels 1 & 2 standardized via a policy-as-code model, replacing the previous implementation.