v2.19.1

Improvements 🌱

• Add .git to audit default exclusions by @yahavi in jfrog/jfrog-cli-core#1022

Bug Fixes 🛠

• Xray SCA scan - always show results with location on Sarif output by @attiasas in jfrog/jfrog-cli-core#1021
• Audit - ignore config file when needed + add releaserepo for maven by @omerzi in jfrog/jfrog-cli-core#1024

Full Changelog: v2...v2.19.1

v2.19.0

What's Changed

Exciting New Features 🎉

• Audit SCA recursive scan by @attiasas in #555

Improvements 🌱

• Blocking NPM auto-install in frogbot + Passing forward install command args by @eranturgeman in #561
• Improve banner and content options by @attiasas in #560

Bug Fixes 🛠

• NPM scan repository pushes node_modules into PR fix by @eranturgeman in #551
• Avoid broken linked images at scan result by @attiasas in #567

New Contributors

• @Parsifal-M made their first contribution in #566

Full Changelog: v2...v2.19.0

v2.18.0

What's Changed

Exciting New Features 🎉

• New variable for adding pull request comment title by @omerzi in #556.
• New variable for skipping extra messages by @omerzi in #549

Bug Fixes 🛠

• Nuget multi-project support added + fixing assets files push bug by @eranturgeman in #525
• PR Scanning - Prevent Frogbot from failing when comment removal fails by @omerzi in #547

Full Changelog: v2...v2.18.0

v2.17.1

What's Changed

Bug Fixes 🛠

• Add licenses to aggregateScanResults by @omerzi in #543
• Yarn V1 - consider filtering yarn list via environment variable by @omerzi in jfrog/build-info-go#205

Full Changelog: v2...v2.17.1

v2.17.0

What's Changed

Exciting New Features 🎉

• Avoid the deletion of existing PR comments by @attiasas in #537

Bug Fixes 🛠

• Bug fix in Gradle dependency regexp creation by @eranturgeman in #532

Full Changelog: v2...v2.17.0

v2.16.0

What's Changed

Exciting New Features 🎉

• Gradle support for scan repository by @eranturgeman in #478

Improvements 🌱

• Trim Git API endpoint slash suffix if exists by @sverdlov93 in #521
• Aggregate Fixes per branch by @EyalDelarea in #522

Bug Fixes 🛠

• Add error on usage when no repositories provided by @attiasas in #512
• Remove research details section if empty by @attiasas in #518
• Fix custom templates misplacement by @EyalDelarea in #526
• Fix advance scans markdown description by @attiasas in #528

Other Changes 📚

• Fix maven gav reader output issue by @sverdlov93 in #517

Full Changelog: v2...v2.16.0

v2.15.1

What's Changed

Bug Fixes 🛠

• Fix Multi Repository Scanning by @EyalDelarea in #510

Full Changelog: v2...v2.15.1

v2.15.0

What's Changed

Exciting New Features 🎉

• Pull request scanning - add license report by @omerzi in #498

Bug Fixes 🛠

• Fix GitLab Update Merge Request by @EyalDelarea in #497
• Download maven-install-plugin with JF_DEPS_REPO by @omerzi in #502
• Fix Custom PR Title in Aggregated Mode by @EyalDelarea in #496
• Enforce mandatory JF_GIT_REPO param by @EyalDelarea in #507

Full Changelog: v2...v2.15.0

v2.14.1

What's Changed

Improvements 🌱

• Show Xray ID instead of CVEs if empty in vulnerabilities description by @omerzi in #495

Bug Fixes 🛠

• Fix GitHub delete review comments by @omerzi in #494

Full Changelog: v2...v2.14.1

v2.14.0

What's Changed

Exciting New Features 🎉

• Introduce pull request SAST vulnerability scan by @omerzi in #492

Improvements 🌱

• Add CVE info to contextual Analysis comment by @attiasas in #491
• Pull Request - add cves to table by @omerzi in #490

Bug Fixes 🛠

• Mark Applicability review comment by @attiasas in #489

Full Changelog: v2...v2.14.0