Xray 3.95.4

Xray Release Information

Products
JFrog Xray
Content Type
Release Notes
ft:sourceType
Paligo

Released: May 5, 2024

Feature Enhancements

Enhanced Xray Jira Integration

Xray Jira Integration now supports ticket generation for ignored violations.

JFrog Advanced Scans Enhancements

  • Added Contextual Analysis support for compiled .NET binaries in Docker containers. All critical NuGet CVEs are covered and partial support for high CVEs has been added.

  • You can now configure JFrog Advanced Scans on multiple resources in one go in the Index Resources screen.

Enhanced the Repository Configuration Window

Revamped the Repository Configuration window to be more intuitive and user-friendly.

Resolved Issues

Jira

Description

XRAY-46023

Fix an issue whereby, it was not possible to perform a DB sync v3 if the schema was modified to a non-public schema.

XRAY-25409

Improved the new Platform UI by adding more visibility to the Watches & Policies screen.

XRAY-18362

Fixed an issue whereby, in some cases, JFrog CLI Docker Scans included components that were removed from the image by another layer.

XRAY-20331

Improved the JF rog CLI jf audit command to include CWE details of vulnerabilities (requires JFrog CLI version 2.56.0 and above)

XRAY-47409

Fixed an issue whereby Watch recipients did not receive Email notifications in an edge case where a previous send had failed.

XRAY-26031

Xray email notification was using a unified URL configured in the JFrog Platform to create links to Xray sources from the notification emails. This is fixed to use the Artifactory URL configured with email server configuration in the JFrop Platform for links in emails.