Professional Edition 1.1 (March 2021)

05 Mar 2021

Professional Edition 1.1 Release Notes

Puma Scan’s 1.1 release is an update for the Puma Scan End User, Server, and Azure DevOps Editions.

End User Edition for Visual Studio Code requires Visual Studio Code for Windows, macOS, or Linux.
End User Edition for Visual Studio requires Visual Studio 2019 v16.0 or higher.
End User Edition for Visual Studio 2017 requires Visual Studio 2017 v15.9 or higher.
Server Edition requires a Windows Server with the following:
- .NET Framework v4.7.2
- The Build Tools for Visual Studio 2017 and 2019 are both supported. Ensure you have at least 1 of the following installed:
  - Build Tools 2017 version 15.8 or higher
  - Build Tools 2019 version 16.4 or higher
Azure DevOps Edition requires a hosted Azure Build Pipeline using the vs2017-win2016 or windows-2019 build agent.

New Rule: SEC0039 - Vulnerable Package Reference - Puma Scan Professional now integrates with the Sonatype OSS Index. This allows Puma Scan to display vulnerabilties when projects use open source libraries that contain known vulnerabilities. Please visit Enabling the Sonatype OSS Index Integration for more information.
Bug fix: Dataflow Analysis Engine v2.0 reporting false positives for data sourced from a const field in nested static classes. For more information about opting in to the newer dataflow analysis engine, please visit How to opt-in to the new Dataflow Analysis Engine.

Enhancement: New Static Analysis Results Interchange Format (SARIF) output option. By selecting sarif as an output format, a SARIF file will be generated. To get started using the new SARIF format in your Azure DevOps pipelines, step by step instructions can be found at the Using the SARIF Output Format blog post. To learn more about the SARIF file format please visit sarifweb.azurewebsites.net.

Bug fix: Error dialog displaying intermittently when manually initiating a scan.

Windows cannot find 'undefined'. Make sure you typed the name correctly, and then try again.