Secure Controls Framework (SCF) Extra without frameworks

[brunonaibert]

When activating the Secure Controls Framework (SCF) Extra, no list of frameworks is displayed for selection.

There is only one line with a blank "Framework" column and a "Region" column with the information "Deleted".

When consulting the file /var/log/simplerisk/simplerisk.log we have the following entries:

[2026-05-18 11:45:01] NOTICE (cli): AI API Key not set.
[2026-05-18 11:46:01] NOTICE (cli): AI API Key not set.
[2026-05-18 11:47:01] NOTICE (cli): AI API Key not set.
[2026-05-18 11:48:01] NOTICE (cli): AI API Key not set.
[2026-05-18 11:49:02] NOTICE (cli): AI API Key not set.
[2026-05-18 11:49:46] WARNING (cli): Job type 'scf_install_and_upgrade' missing, reloading job definitions (attempt 1)...
[2026-05-18 11:50:01] NOTICE (cli): AI API Key not set.
[2026-05-18 11:51:02] NOTICE (cli): AI API Key not set.
[2026-05-18 11:51:11] WARNING (cli): SCF Install and Upgrade: Found risk data without a group at row 8, skipping
[2026-05-18 11:51:11] WARNING (cli): SCF Install and Upgrade: Found risk data without a group at row 9, skipping
[2026-05-18 11:51:11] WARNING (cli): SCF Install and Upgrade: Found risk data without a group at row 10, skipping
[2026-05-18 11:52:01] NOTICE (cli): AI API Key not set.
[2026-05-18 11:52:39] WARNING (cli): [handle_legacy_frameworks] Authoritative sources empty after filtering; skipping.
[2026-05-18 11:53:01] NOTICE (cli): AI API Key not set.
[2026-05-18 11:54:02] NOTICE (cli): AI API Key not set.

[jsokol]

Hey Bruno. Thanks for the report. We are aware of the issue with the SCF integration and already have a fix for it in development. We are working on a new release that should be live this week. Sorry about that.