This repository has been archived by the owner on Feb 26, 2021. It is now read-only.
v1.0.0 First Stable Release
secureCodeBox 🔒 v1.0.0 🎉
This is our first non beta release!
This release added a bunch of stuff and we have done a lot to improve the general stability.
Mayor Changes
- DefectDojo persistence provider allowing you to import your findings into DefectDojo. See the persistence provider docs for setup instructions.
- Updated Camunda from 7.8 to 7.10
- Note this requires database upgrades. SQL migration files are provided directly by camunda see:
- Updated the API
- Introduced new securityTest Concept abstracting from the camunda processes, with all related information attached to it.
- Removed the "start process" endpoint and replaced it with the securityTest endpoint enabling you to start securityTest and retrieve their status and results without worrying about the concrete camunda processes.
- Introduced a concept for adding some additional meta-data informations to securityTest
- helpful if you automate the securityTest execution with your buildserver (e.g. Jenkins) and add the build-reference as meta data to your securityTest
- Added BasicAuth for engine to scanner communication
- Added engine health endpoint
- Direct HTTPS support without a separate proxy server
- Introduced Docker Healthchecks for engine and scanner container