Professional Edition 0.9.7 Release Notes

Puma Scan’s 0.9.7 release is an update for the Puma Scan End User, Server, and Azure DevOps Editions.

System Requirements

• End User Edition requires Visual Studio v15.9 or higher.

• Server Edition requires a Windows Server with the following:

  • .NET Framework v4.7.2

  • The Build Tools for Visual Studio 2017 and 2019 are both supported. Ensure you have at least 1 of the following installed:

    • Build Tools 2017 version 15.8 or higher

    • Build Tools 2019 version 16.4 or higher

• Azure DevOps Edition requires a hosted Azure Build Pipeline using the vs2017-win2016 or windows-2019 build agent.

Framework Enhancements

• Rule Enhancement: All Puma Scan rules are now mapped to their associated Common Weakness Enumeration (CWE) ID. Details can be found in the Rules Documentation.

• Report Enhancement: The JSON report schema was upgraded from v1.0 to v1.1. The v1.1 schema contains additional fields in each rule for the CWE, code remediation, code examples, and references.

  Puma Scan Report v1.1 Schema.

• Report Enhancement: HTML reports now contain a CWE Summary page displaying the number of failing CWE and associated instances. Each rule now displays the code remediation, code examples, and references.

  
  
  

• Report Enhancement: Support for exporting Puma Scan instances to a Comma Separated Values (CSV) formatted file.

End User Edition

• Bug fix: Corrected an incorrect manifest version causing Puma Scan to intermittently fail and not display results.

• Bug fix: Corrected a report export issue intermittently causing issues to be left out of the report details.

• Enhancement: JSON report schema upgraded to v1.1.

• Enhancement: HTML report upgraded to display CWE code remediation, code examples, and references.

• Enhancement: New CSV results format.

Server Edition

This is a breaking update for the Server Edition if you are currently parsing the v1.0 JSON schema with custom scripts. You will need to adjust your scripts to parse the new v1.1 schema.

• Enhancement: JSON report schema upgraded to v1.1.

• Enhancement: HTML report upgraded to display CWE, code remediation, code examples, and references.

• Enhancement: New CSV results format.

Azure DevOps Edition

This is a breaking update for the Azure DevOps Edition if you are currently parsing the v1.0 JSON schema with custom scripts. You will need to adjust your scripts to parse the new v1.1 schema.

• Enhancement: JSON report schema upgraded to v1.1.

• Enhancement: HTML report upgraded to display CWE code remediation, code examples, and references.

• Enhancement: New CSV results format.