Release Notes

This release adds cryptography analysis with quantum-safety verdicts, event-based scans for Harbor and Nexus, and copy remediation for Harbor and GitHub. It also improves cross-domain transfers and security, and includes reliability and usability fixes.

Highlights

Cryptographic Bill of Materials (CBOM) and Quantum Safety

MDSSC now finds the cryptographic assets in scanned content, such as algorithms and certificates. Each job, file and repository shows a quantum-safety verdict. A new Cryptography dashboard summarizes the assets across all jobs.

Event-Based Scans for Harbor and Nexus Binaries

Harbor and Nexus Binary connections can now send webhook events to MDSSC. A pushed Harbor image, or a new or updated Nexus component, starts a scan automatically.

Copy Remediation for Harbor and GitHub

Copy remediation is now available for Harbor and GitHub connections.

Cross-Domain Transfer Improvements

Each high-side connection mapping now selects its own import scan workflow. When the workflow has Hash Scanning on, the high side skips files it already scanned, so repeated imports are faster. Infected files, and files that fail to scan or are canceled, always block a transfer.

Improvements

• Security Hardening: The server validates every request field. Login errors do not reveal whether a username exists.

• CWE Information: The CVE table and the CVE details show CWE IDs.

• GitHub Enterprise: Webhook events now start scans.

• API Keys: Each user now has one API key. Saving a new key replaces the old one.

Bug fixes

• Saving the Edit User dialog keeps the user's SSO or tenant role. It no longer promotes the user to Administrator.

• A custom role can no longer use the "Administrator" name, so the role a user sees matches their access.

• After you activate a license during onboarding, the "No active license" banner no longer appears.

• MDSSC now scans the container image configuration for images without an OS.

• The Upcoming Jobs table now shows scheduled jobs.