Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
94 changes: 59 additions & 35 deletions docs/release-notes/rns.md
Original file line number Diff line number Diff line change
@@ -1,43 +1,67 @@
# Scribe Hub
*Last modified January 29, 2025*

# Scribe Hub Version 1.30.3
*January 29, 2025*

## Improvements
### Team Homepage
- The 'Overview' dashboard, previously under 'Reports' was relocated to become the team's home page.
### Account
- The 'Settings' section was renamed to 'Account.'
- The 'User Logs' dashboard, previously under the 'Reports' section, was relocated to 'Accounts.'
### SBOMs (SBOM Inventory)
- The 'Reports' section was renamed to 'SBOMs.'
- The 'SBOM' dashboard displays a new 'Relation' column denoting whether a dependency is direct or transitive. The 'More' dialog displays the related dependencies (parent or child) in the SBOM.
- A new chart in the 'Vulnerabilities' dashboard under the SBOMs section visualizes the funnel of prioritized issues.
### Evidence dashbaord
- The Evidence dashboard previously under 'Reports' was relocated to 'Policy.'
- User can filter Evidence by 'Evidence ID.'
- 'Evidence ID' appears in the 'More' dialog in the evidence table.
- Evidence collected from the Discovery process displays the 'Signer ID' as other types of Evidence already do.
# Scribe Hub
*Last modified: May 29, 2025*

---
## Behavior Changes
- The SLSA dashboard under the 'Reports' section was deprecated. SLSA findings are accessible from the 'Policy', Evaluation dashboard.

## Scribe Hub Version 1.23.0
*November 4, 2024*
## Version 1.43.2 (May 29, 2025)

### Improvements
#### Discovery Asset table
- Added Parent asset as property in the Asset table.
- Under **Products ▸ `<product version>` ▸ Findings**, users can now review uploaded findings from third-party application-security scanners.
- Added simplified policies for handling scanner findings to the catalog.
- Support for ingesting CycloneDX v1.6 SBOMs.
- Vulnerability tables enhancements:
- Filter by dependency-relationship type (Direct vs. Transitive).
- Display full vulnerability description.
- Show associated CWEs.
- **Analytics (Early Access)** improvements:
- New Vulnerability Risk dashboard.
- Pull end-of-life data from endoflife.date.
- **Usability**:
- New sidebar filter on the Products page.
- Minor improvements to email alerts.

---

- Added 'More' link to asset line for extended info.
- Canceled the Lineage tab which became redundant due to the above change.
- Improved loading time of tables, filters, and graphs.
## Version 1.30.3 (January 29, 2025)

## Scribe Hub Version 1.21.0
### Improvements
#### Attestation Signing
- Sign with AWS KMS keys.
#### SLSA Verification
- Compliance with SLSA levels 1 and 2 is validated by the client (valint). This replaces the previous implementation and standardizes the policy as a code model.
- **Team Homepage**
- Relocated the **Overview** dashboard (formerly under Reports) to become the team’s home page.
- **Account**
- Renamed **Settings** to **Account**.
- Moved the **User Logs** dashboard from Reports into Accounts.
- **SBOMs (SBOM Inventory)**
- Renamed the **Reports** section to **SBOMs**.
- In the SBOM dashboard:
- Added a **Relation** column showing whether a dependency is direct or transitive.
- “More” dialog now displays related dependencies (parent or child).
- Added a new funnel chart under SBOMs ▸ Vulnerabilities to visualize issue prioritization.
- **Policy**
- Moved the Evidence dashboard (formerly under Reports) into Policy.
- Added filtering by Evidence ID.
- Exposed Evidence ID in the “More” dialog.
- Discovery-collected evidence now shows **Signer ID** like other evidence types.

### Behavior Changes
- Deprecated the SLSA dashboard under Reports; SLSA findings are now accessible via the Policy ▸ Evaluation dashboard.

---

## Version 1.23.0 (November 4, 2024)

### Improvements
- **Discovery**
- In the Asset table:
- Added **Parent asset** as a column.
- Replaced the Lineage tab with a “More” link for extended info.
- Improved load times for tables, filters, and graphs.

---

## Version 1.21.0

### Improvements
- **Attestation**
- Sign attestations with AWS KMS keys.
- **SLSA Verification**
- Client-side validation for SLSA Levels 1 & 2 standardized via a policy-as-code model, replacing the previous implementation.