Xray 3.96.1

Xray Release Information

Products
JFrog Xray
ft:sourceType
Paligo

Released: May 27, 2024

Deprecation Notice

Xray no longer supports "npm audit" for new instances. As of version Xray 3.102.x Xray will no longer support "npm audit" for existing instances as well. To check Xray vulnerabilities from the command line please use "jf audit" instead.

Xray no longer supports custom vulnerability feed integration for new instances. As of version Xray 3.102.x Xray will no longer support custom vulnerability feed integration for existing instances as well. Custom vulnerabilities can still be added via API.

Resolved Issues

Jira

Description

XRAY-73176

Xray failed to scan a Hugging Face model when it contained multiple licenses (cardData.license as an array).

XRAY-44130

Added support for Custom Base URL for Jira Integration.

XRAY-71772

Xray export failed when using POST /xray/api/v1/component/exportDetails if it contained multiple artifacts (with different names) with an identical sha_256.

XRAY-73224

Xray SCA scan failed in cases where the artifact included a component with a custom license.

XRAY-71394

Ignore Rules URLs in the CLI output caused an HTTP 403 error message.

XRAY-37056

Selecting View All in the Xray dashboard under Artifactory fails to redirect to the corresponding Scan List screen correctly. Issue occurs only when searching the artifact via the search bar navigating to the artifact and then selecting the View All option.

XRAY-71392

Cannot export SBOM SPDX and CycloneDX docs of OCI images from the artifact tree view (resulted in an error "Component is not found for given sha")