Release Notes

Release date:

3, December 2024 

What is new?

• Component Tags in Multiple Views: Added the ability to use component tags in various views, enabling differentiation of files and folders based on their source (e.g., Airbag pla specific, 3rd party).
• Issues View – Component Tags Filtering: Introduced the ability to filter the Issues View based on component tags, allowing more precise tracking and categorization of issues.
• Code Issues View – Component Tags Filtering: Enhanced the Code Issues View to support switching and filtering based on component tags, improving issue visibility and categorization.
• Suppressions View – Component Tags Filtering: Added support for filtering and distributing warnings in the Suppressions View based on component tags, allowing for better tracking of suppression statuses.
• Groups View – Component Tags Filtering: Introduced the ability to switch and filter the Groups View based on component tags, helping to streamline the visualization of grouped data.
• API for Rule Tag Combinations: Added a new API feature to filter and combine rule tags (e.g., “MISRA” AND “Required”), providing more powerful querying capabilities for warnings.
• Tag Category Filtering in Code Issues View: Introduced tag category filters in the Code Issues View, similar to the Tags Category/Tags View in Issues View Filters, for improved filtering options.
• Unselect Specific Tags in Issue Distribution: Added the ability to unselect specific tags when viewing issue distribution, offering users more control over displayed data.
• Snapshot Commenting with Character Limit: Enabled users to add comments with the snapshot name, now with a character limit to ensure clarity and consistency.
• Pinned Snapshots in MyDashboard: Updated the trend view in MyDashboard to consider only “pinned” snapshots when generating graphs, providing a more focused and customized view based on user preferences.
• Other bug fixes and Improvements

---

Release scope:

• Available via docker only

Upgrade paths:

• All versions from 1.8.5.0 can be upgraded to 1.9.28.1

Release date:

11, October 2024 

What is new?

• Scan Pull Requests from Forked Repositories – Added support for scanning pull requests originating from forked repositories, enhancing collaboration and code review processes.
• Share Link Option on Repository Dashboard – Introduced a new share link feature on the repository dashboard, allowing users to easily share repository links.
• Pipeline Script Menu Option – Enabled the “pipeline script” menu option for repositories, for all repository except zip
• Other bug fixes and Improvements

---

Release scope:

• Available via docker only

Upgrade paths:

• All versions from 1.8.5.0 can be upgraded to 1.9.27.2

Release date:

3, October 2024 

What is new?

• Group list navigation : Navigate to issue details -> code and back, retains selected group; applies to refresh or browser back button.
• Suppressions overview – Fixed warnings in suppressions overview; introduced a “Fixed” tab to show suppressed fixed issues.
• Introduce a contributor role – Introduced a contributor role at the project level; higher than explorer, lower than analyser.
• MyDashboard | Trend View – Added an option in the dropdown to view data by tag category.
• MyDashboard | Issue Distribution – Added an option in the dropdown to view data by tag category.
• Component Clickability in Unit Tests – Redirect to file view if component ID is not present; previously navigated to component view if available.
• MyDashboard | Show snapshot label – Hover over the graph now shows the snapshot label along with the date.
• RTC Integration improvements : New Option added in rtc for multiple component (-vd)
• Bug fixes: Issues with Multiple Tags on the Same Line while suppress and wrong trend view
• Other bug fixes and Improvements
  

---

Release scope:

• Available via docker only

Upgrade paths:

• All versions from 1.8.5.0 can be upgraded to 1.9.27.0

Release date:

9, August 2024 

What is new?

• New APIs are added
• MyDashboard: suppressed warnings Widget added
• MyDashboard: Show total counts along with breakdown in widgets
• MyDashboard: Include “Embold unanalyzed” folder in MyFiles
• Issues View: Filters options for Groups & Rules with minimisation and maximisation feature
• LDAP/SSO Authentication: Allow login for users if user belongs to at least one groups
• Reports column: Rename “status” to “current status” and “snapshot label” to “introduced in snapshot”
• Re-Analyse Snapshot
• Bug fix : LDAP configuration was being overridden when changing group settings.
• Bug fix: Duplicate LOC inconsistencies between the tool and the display in Embold.
• Bug fix: Mismatch in the number of warnings shown in the code issues view and MyDashboard.
• Bug fix: Inconsistent duplicate LOC numbers between the bar view and MyDashboard.
• Bug fix: Deletion of the checkouts folder while modifying RTC version control account.
• Bug fix: Download report for specific group is not matching with ui

Release scope:

• Available via docker only

Upgrade paths:

• All versions from 1.8.5.0 can be upgraded to 1.9.26.2

Release date:

10, June 2024 

What is new?

• Team Dashboard
• Dashboard performance improvements
• RTC – Dynamic Fetching of source files – Remote scan workflow optimization
• Ability to define coverage for quality gate
• Other bug fixes and Improvements

Release scope:

• Available via docker only

Upgrade paths:

• All versions from 1.8.5.0 can be upgraded to 1.9.25.0

Release date:

18, April 2024

What is new?

• LDAP roles mapping
• Pipeline script for remote scan
• Snapshots meta
• Provision to disable widgets on repository dashboard
• Codequality trace update
• Codequality scanner improvements
• Codequality Auxilary checks
• Software Composition Analysis – Alpha release
• Bug fix : Edit option not visible for quality gate
• Bug fix : Popup does not open while using shared link
• Bug fix : Email does not send in a specific case for Forgot password
• Bug fix : Child tag filters does not work if criticality is selected
• Bug fix: Search components is not working when searched with ‘.’ at start
• Bug fix: Duplicate Tag Appears in UI
• Other bug fixes and Improvements

Release scope:

• Available via docker only

Upgrade paths:

• All versions from 1.8.5.0 can be upgraded to 1.9.24.0

Release date:

26, Dec 2023 

What is new?

• Delta between any two snapshots can be seen for code issues
• 2 new memory leaks code checks added to avoid memory issues for CPP language
• JS/TS remote scan support for MacOS. 
• Code issue link on UI for sharing between teams.
• HTTPS_PROXY and HTTP_PROXY support for remote scan workflow apart from inbuilt proxy.
• Export filtered issue list
• Metrics API added to get delta between any two snapshots
• Pin snapshot selection
• Bug fix : LDAP/SSO config deletion on removal of user who configured it.
• Bug fix : Timeout error while running remote scan with gamma generic for large number of  unanalysed files.
• Bug fix : Filters are getting reset after suppression of an issue.
• Bug fix : C# code issue criticality mismatch for specific rules
• Bug fix : Removed JAVA_HOME dependency from windows installer
• Other bug fixes and Improvements

Release scope:

• Available via docker and windows Installer only

Upgrade paths:

• All versions from 1.8.5.0 can be upgraded to 1.9.22.0

Release date:

05, Dec 2023 

What is new? 

• Bug fixes 

Release scope:

• Available via docker and windows Installer only

Upgrade paths:

• All versions from 1.8.4.0 can be upgraded to 1.9.21.1

Release date:

06, March 2023 

What is new? 

• Performance Improvement
• Bug fixes 

Release scope: 

• Available via docker only

Upgrade paths: 

• All versions from 1.8.4.0 can be upgraded to 1.9.14.1

Release date:

15, February 2023 

What is new? 

1. My Dashboard – shows all data specific to a developer with customizable option.
2. Performance Improvement
3. Bug fixes 

Release scope: 

• Available via docker only

Upgrade paths: 

• All versions from 1.8.4.0 can be upgraded to 1.9.14.0

Release date: 

19, January 2023 

What is new? 

1. Suppression improvements 
2. Bug fixes 

Release scope: 

• Available via docker only 

Upgrade paths: 

• All versions from 1.8.4.0 can be upgraded to 1.9.13.1 

Release date: 

14, December 2022 

What is new? 

1. Commit scan support for Bitbucket server 
2. Bug fixes 

Release scope: 

• Available via windows installer. 

Upgrade paths: 

• All versions from 1.8.4.0 can be upgraded to 1.9.8.0 

Release date: 

8, Novemeber 2022 

What is new? 

Ability to show external warnings on Embold dashboard (Memory usage, DEM, AMEOS) 

Release scope: 

• Available via docker

Upgrade paths: 

• All versions from 1.8.5.0 can be upgraded to 1.9.11.0 

Release date: 

21, September 2022 

What is new? 

1. LDAP group prefix support 
2. Bug fixes 

Release scope: 

• Available via RHEL installer. 

Upgrade paths: 

• All versions from 1.8.5.0 can be upgraded to 1.9.10.2 

Release date: 

30, September 2022 

What is new? 

1. Embold Version Control System now supports RTC 

2. Embold generic module improvements 

a. Severity can be changed for custom rules added using generic module 

b. Tags can now be added to rules in generic module/ 

3. Bug fixes 

Release scope: 

• Available via docker and RHEL installer. 

Upgrade paths: 

• All versions from 1.8.5.0 can be upgraded to 1.9.10.1 

Release date: 

8, August 2022 

What is new? 

1. Add new tiles (eg. MISRA,CWE) to Embold dashboard. 
2. Download groups and duplication reports. 
3. Cppcheck version upgraded to 2.8. 
4. Improvements and Bug fixes 

Release scope: 

• Available via docker. 

Upgrade paths: 

• All versions from 1.8.4.0 can be upgraded to 1.9.9.0 

Release date: 

25, July 2022 

What is new? 

1. Upgrade Cppcheck version to 2.8 
2. We have introduced 4 new C/C++ checks. See all checks. 
3. Clang version upgraded to 13. 
4. Your login session will remain valid for 30 days now. 
5. Bug fixes 

Release scope: 

• Available via windows installer. 

Upgrade paths: 

• All versions from 1.8.4.0 can be upgraded to 1.9.8.0 

Release date: 

12, July 2022 

What is new? 

1. With Embold’s new Groups feature, you can cluster issues under a user defined group.  Eg. You can create a group of issues based on releases you want to fix them in. 
2. Integrated MobSF tool for detecting code issues in Kotlin. 
3. Your login session will remain valid for 30 days now. 
4. We have introduced 4 new C/C++ checks. See all checks. 
5. Clang version upgraded to 13. 
6. Bug fixes 

Release scope: 

• Available via docker. 

Upgrade paths: 

• All versions from 1.8.4.0 can be upgraded to 1.9.7.0 

26, April 2022

What is new?

• Review suppressions made by your developers using the new Suppression Approval Workflow. Know more
• Find vulnerabilities in C# source code. We have integrated Security Code Scan into Embold. See all C# checks
• Added 6 new Java CWE vulnerability checks. See all Java checks
• Improvements
  • Improvement in Unit Test workflow
    • Unit Test Page will now show Unit test suite name instead of component name. 
  • C/C++ performance 
  • Added a button on scan page to go to the scanned repository
  • We now show folder structure while linking repositories
  • Pull Request: Added more information to bitbucket Comments after a PR is scanned on Embold. Info added
    • Code Issue Count
    • Number of code issues added and fixed
    • Backlink URL
• Bug fixes

Release scope:

• Available via all installers and docker.

Upgrade paths:

• All versions from 1.8.4.0 can be upgraded to 1.9.6.0

RELEASE DATE: 25, February 2022

What is new?

• Introducing Commit Review – As soon as a new commit is made, Embold will automatically scan the committed files and reports code issues, vulnerabilities and duplication on Embold UI. 
• Introduced Infrastructure-as-language checks. It helps identify issues in TERRAFORM, JSON and YAML code. Know more
• Bug fixes and improvements.

Release scope:

• Available via all installers, docker.

Upgrade paths:

• All versions from 1.8.4.0 can be upgraded to 1.9.5.1

In this release, we have addressed the widely discussed log4shell (CVE-2021-44228) and CVE-2021-45046, CVE-2021-44832 security vulnerability by upgrading the Apache Log4j version to 2.17.

Release date:

30, December 2021

What is new?

• New JAVA checks:
  We have added 12 new Java CWE checks. Get more insights into Embold’s rich Java checks here.
  

Sr. No	Java checks	CWE tags
1	Do Not Call System Exit	CWE-382
2	Redirect Without Exit	CWE-698
3	Missing Required Cryptographic Step	CWE-325
4	Sensitive Data In Serializable Class	CWE-499
5	Missing Break Statement In Switch	CWE-484
6	Avoid Throwing Generic Exception	CWE-397
7	Direct Object Reference	CWE-639
8	Explicit Call to Finalize	CWE-586
9	Return In Finally	CWE-584
10	Public Static Field Should Be Final	CWE-500
11	Static Final Array Should Be Private	CWE-582
12	Error Message Containing Sensitive Data	CWE-209

• New CPP checks:
  We have added 3 new C++ checks that map to CWE.

Sr. No	CPP checks	CWE tags
1	unvalidated param as index	CWE-129
2	unvalidated memory allocation	CWE- 20
3	unconditional pointer dereference	—

• Added 41 new checks for solidity by integrating new linter Sohlint. (available on docker)
• Added 38 new checks for python by integrating new linter dlint. (available on docker)
• Added support for SQL checks and custom SQL checks using PMD.
• LDAP groups/multiple users are mapped to Embold global and project level roles. Know more here.
• Bug fixes and improvements.

Release scope:

• Available via all installers, docker.

Upgrade paths:

• All versions from 1.8.4.0 can be upgraded to 1.9.4.1

Release date:

20, October 2021

What is new?

• New language support added for CSS
  • Integrated a new 3^rd party linter Stylint. Added 48 new checks.
• Improved CWE coverage for JAVA:
  We have added 11 new Java CWE checks. Get more insights into Embold’s rich Java checks here.
  • Mutable Object Should Not Reference Public
  • Unencrypted Server Socket
  • Avoid NullCipher
  • Unencrypted Socket
  • Weak SSLContext
  • Clone Without Super
  • Finalize Without Super
  • Missing Throw In Catch Block
  • Improper Validation Of ArrayIndex
  • Non Serializable In Session
  • Empty Synchronized Block
• New CPP checks:
  We have added 6 new CPP checks. Read here more.
  • CWARN.MEM.NONPOD : Checks if low-level memory manipulation routines are used for initializing objects of non-POD (plain old data) types.
  • CWARN.BITOP.SIZE : looks for code in which bitwise operations (&=, |=, and ^=) have operands with different sizes.
  • CWARN.MOVE.CONST : Checks if Const value is used as argument for std::move
  • INFINITE_LOOP.LOCAL : checks for infinite loops
  • SV.FMT_STR.PRINT_IMPROP_LENGTH : Checks for Improper use of length modifier in a print function call
  • CWARN.ALIGNMENT: Checks if Incorrect pointer scaling is used
• Bug fixes and improvements.
  • Not able to update an existing zip repository on Embold through UI.
  • New .h files could not be parsed in pull request workflow
  • Performance improvement

Release scope:

• Available via windows installers, docker, and cloud.

Upgrade paths:

• All versions from 1.8.0.0 can be upgraded to 1.9.3.0

Release date:

16, September 2021

What is new?

Hotfixes include Bug fixes. 

1. More stable Pull request feature.
2. Improvement in the code coverage workflow.
3. Bug fixes and improvements include:
   • Improved Quality Gate Flow for Jenkins plugin.
   • Improved API Pagination in Version control flow for bitbucket.
   • Improved code coverage analysis with File-wise representation.
   • Improved code coverage workflow for CPP and Java language.
   • Fixed code issues count for PL/SQL language.
   • Improvement for local changes during remote scan workflow

Release scope:

• Available via windows installers, docker, and cloud.

Upgrade paths:

• All versions from 1.8.0.0 can be upgraded to 1.9.2.3

Release date:

03, August 2021

What is new?

• New Java checks:
  We have added 3 new Java checks. Get more insights into Embold’s rich Java checks here.
  • Avoid Catching NPE
  • Avoid FilecreateTempFile
  • Avoid Non Case Labels In Switch Statement
• New Language – HTML support added. Integrated a 3rd party linter 27 HTMLHint in Embold. Read more here.
• Added 15 REACT and 47 ANGULAR framework checks for TypeScript (TS) language. Integrated a 3rd party linter codelyzer.
• New CPP checks:
  We have added 2 new CPP checks. Read here more.
  • shallow copy constructor
  • shallow copy assignment
• We have added a few more Embold CWE checks for C/CPP language. Read here more.

CWE-590: Free of Memory not on the Heap

CWE-664: Improper Control of a Resource Through its Lifetime

CWE-788: Access of Memory Location After End of Buffer

CWE-786: Access of Memory Location Before Start of Buffer

CWE-687: Function Call With Incorrectly Specified Argument Value

CWE-688: Function Call With Incorrect Variable or Reference as Argument

CWE-686: Function Call With Incorrect Argument Type

CWE-665: Improper Initialization

CWE-391: Unchecked Error Condition

CWE-703: Improper Check or Handling of Exceptional Conditions

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-685: Function Call With Incorrect Number of Arguments

CWE-672: Operation on a Resource after Expiration or Release

CWE-771: Missing Reference to Active Allocated Resource

CWE-775: Missing Release of File Descriptor or Handle after Effective Lifetime

CWE-190: Integer Overflow or Wraparound

CWE-595: Comparison of Object References Instead of Object Contents

CWE-467: Use of sizeof() on a Pointer Type

CWE-682: Incorrect Calculation

CWE-587: Assignment of a Fixed Address to a Pointer

CWE-131: Incorrect Calculation of Buffer Size

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization (‘Race Condition’)

CWE-195: Signed to Unsigned Conversion Error

CWE-128: Wrap-around Error

CWE-597: Use of Wrong Operator in String Comparison

CWE-834: Excessive Iteration

CWE-768: Incorrect Short Circuit Evaluation

CWE-392: Missing Report of Error Condition

CWE-415: Double Free

• Introducing 2 Embold badges:
  • Overall Rating
  • Quality Gate
    Learn more here.
• Upgraded .NET support to 5.0 for Windows and Ubuntu.
• Bug Fixes

Release scope:

• Available via windows installers, docker, and cloud.

Upgrade paths:

• All versions from 1.8.0.0 can be upgraded to 1.9.2.0

Release date:

03, June 2021

What is new?

• New Java checks:
  We have added 9 new Java checks. Get more insights into Embold’s rich Java checks here.
  • Main Should Not Throw Anything
  • Maps With Enum Values Replace With EnumMap
  • Mismatch Regex Boundaries Should Not Be Used
  • Avoid Synchronized At Method Level
  • Avoid Concatenating Char As String
  • Empty String Should Not Be Used
  • Exceptions Should Not Be Thrown In Finally Block
  • Shortcircuit Logic Should Be Used In Boolean Contexts
  • Big Integer Instantiation
• We have updated GoLang security checks by adding 2 new Linters (Support for cloud users only); read here more :
  • GoSec
  • StaticCheck
• We have added a new Python language Linter integrated with Bandit. (Support for cloud users only). Check here more.
• Introducing new language support: Ruby and tool integrated is Brakeman. (Support for cloud users only). Check here more.
• New CPP checks:
  We have added 2 new CPP checks. Read here more.
  • shallow copy constructor
  • shallow copy assignment
• We have added a few more Embold CWE checks for CPP language. Read here more.
• Introducing new language support: APEX and tool integrated is PMD Apex.
• Integrated New Source control platform: IBM RTC
• Bug Fixes

Release scope:

• Available via windows installers, docker, and cloud.

Upgrade paths:

• All versions from 1.8.0.0 can be upgraded to 1.9.1.0

Release date:

26, March 2021

What is new?

• New Java checks:
  We have added 4 new Java checks. Get more insights into Embold’s rich Java checks here.
  • Exclude SpringBootApplication And ComponentScan From The Default Package
  • Externalizable Must Have No Arguments Constructor
  • RunFinalizerOnExit Should Not Be Called
  • Getters And Setters Should Access The Expected Fields
• Support to Java Spring Framework:
  • Non-ThreadSafe Field Declaration
  • Disabled Spring Securitys CSRF
  • SpringBoot Application And Component Scan Not Be Used In Default Package
    And more checks coming soon in the next releases until then get more insights here.
• New CPP checks:
  • Assignment Operator Non-Const Arg
  • Assignment Operator Returns Void
  • Assignment Operator Non-Const Return
  • Returning Local Address
    Read here more.
• Embold username and password have been deprecated from this release, instead use Embold Access Token (EAT). Read here more.
• Bug Fixes

Release scope:

• Available via installers, docker hub, and cloud.

Upgrade paths:

• All versions from 1.7.0.0 can be upgraded to 1.9.0.2

Release date:

29, January 2021

What is new?

• MISRA checks:
  Full support for MISRA C: 2012 standard (140/143 checks). Read more.
  We have added 5 new checks to our MISRA C:2012 standard
  • MISRA-c2012-5.9
  • MISRA-c2012-8.6
  • MISRA-c2012-20.11
  • MISRA-c2012-20.12
  • MISRA-c2012-20.13
• New Java checks:
  We have added 2 new Java checks. Get more insights into Embold’s rich Java checks here.
  • Variables Should Not Be Self Assigned  
  • Run Should Not Be Called Directly
• Bug Fixes

Release scope:

• Available via installers, docker hub, and cloud.

Upgrade paths:

• All versions from 1.7.0.0 can be upgraded to 1.8.9.0

Release date:

05, January 2021

What is new?

• MISRA checks:
  Supporting MISRA C: 2012 standard (135/143 checks). Read more.
  We have added 2 new checks to our MISRA C:2012 standard
  • MISRA-C2012-8.7 
  • MISRA-C2012-5.6
  • MISRA-C2012-1.1 – increased the coverage by adding a few more cases 
• New checks:
  We have added 2 new C/Cpp checks to our already rich list of C/Cpp checks. Check the entire list of checks here.
  • deactivated code
  • hidden base member
• Embold now supports Security checks for Java. We have added 3 new Embold custom checks in this release.
  • Accessing Android external storage is security-sensitive
  • Using unsafe Jackson deserialization configuration is security-sensitive
  • Setting JavaBean properties is security-sensitive
    Get more insights into Embold’s rich Java checks here. 
    See our OWASP top 10 and CWE coverage here for more details.

Release scope:

• Available via installers, docker hub, and cloud.

Upgrade paths:

• All versions from 1.7.0.0 can be upgraded to 1.8.8.0

Release date:

09, November 2020

What is new?

• New C++ checks added:
  • char signedness
  • fixed size memory operation
  • hidden parameter
    Read more about C++ code issues here.
• MISRA check: We added to our MISRA C:2012 rules and added checks for rules 20.8. To learn more about MISRA checks coverage, please read this article.
• Security Vulnerability:
  • New Java security checks added:
    • Should Not Use getRequestedSessionId API
    • Web Application Contains Main Method
    • Authenticate LDAP Connection
    • Potential Command Injection
    • Potential Path Traversal
      Get more insights into Embold’s rich Java checks here. 
  • We now support OWASP top 10 and CWE issues. Refer to this article for more details.
  • Our new vulnerability workflow helps you easily identify security issues.
    Supported language: Java only
    

Release scope:

• Available via installers, docker hub, and cloud.

Upgrade paths:

• All versions from 1.6.0.0 can be upgraded to 1.8.6.0

Release date:

25, September 2020

What is new?

• Password-based authentication on GitHub, Azure, GitLab, and Bitbucket is no longer available. Read more here.
• Focus on what is most important! You can now filter security issues on the issues list page.
• 33 new code checks and 2 new security checks added for Java as we have upgraded our PMD version to 6.26.0. Read more here.
• New C++ checks added:
  • empty-catch
  • dynamic-cast
    Read more about C++ code issues here.
• Bug Fixes

Release scope:

• Available via installers, docker hub, and cloud.

Upgrade paths:

• All versions from 1.6.0.0 can be upgraded to 1.8.5.0

Release date:

21, August 2020

What is new?

• Pull Request for the cloud. For more information, check here.
• New Java Checks:
  • Access Of Non-private, Non-final Field In Synchronized block
  • Databases Should Be Password Protected
    Get more insights of Embold’s rich Java checks here. 
• MISRA check: We added to our MISRA C:2012 rules and added checks for rules 8.9 and 20.14. To learn more about MISRA checks coverage, please read this article.
• Bug Fixes

Release scope:

• Available via installers, docker hub, and cloud.

Upgrade paths:

• All versions from 1.6.0.0 can be upgraded to 1.8.4.0

Release date:

31, July 2020

What is new?

• Pull Request for the cloud (Beta version). For more information, check here.
• New C# Code Checks are:
  • Invalid Logging Class Name
  • Cross-site Request Forgery Token Validation
  • Class Implements ICloneable
  • Vulnerable Encryption Mode
  • Weak Encryption
    Get more insights of Embold’s rich C# checks here.
• New Java Checks:
  • Disabled Spring Security CSRF
  • Security Sensitive Regular Expression
  • Resource Leak
  • Compile Regular Expressions Once
  • Initialization Of Secure Random At Method Level
  • Possible Thread Leak In Executor Service
  • Complex Regex Pattern
  • Empty Catch Block
  • Weak Cipher Algorithm      
    Get more insights of Embold’s rich Java checks here. 
• API enhancements: Now you can get and update the roles of each user. Check out our rich API here for further information.
• MISRA check: We added to our MISRA C:2012 rules and added checks for rules 5.2 and 20.7. To learn more about MISRA checks coverage, please read this article.
• Bug Fixes

Release scope:

• Available via installers, docker hub, and cloud.

Upgrade paths:

• All versions from 1.6.0.0 can be upgraded to 1.8.3

Release date:

10, June 2020

What is new?

• C# Code Checks: We added Log Error In Catch and Use String Interpolation Instead Of String Format to our C# code checks. Get more insights of Embold’s rich C# checks here.
• API enhancements: Now you can get and download the scan configuration. Check out our rich API here for further information.
• MISRA check: We added to our MISRA C:2012 rules and added checks for rules 6.1, 7.2 and 10.5. To learn more about MISRA checks coverage, please read this article.

Release scope:

• Available via installers, docker hub, and cloud.

Upgrade paths:

• All versions from 1.6.0.0 can be upgraded to 1.8.2.0.

Release date:

12, May 2020

What is new?

• Coverlet coverage integration is now supported! Read more here.
• MSTest unit test integration is now added! Read more about this integration here.
• Embold API is further expanded to support code checker configuration, KPIs, and component dependencies.
• You can now configure your scan or set exclusions with a checked-in file in your repository. Read more about this here.
• Test your email server configuration as soon as you configure them, removing the guesswork.
• Embold Visual Studio plugin supports Visual Studio 2019.

Release scope:

• Available via installers, docker hub, and cloud.

Upgrade paths:

• All versions from 1.6.0.0 can be upgraded to 1.8.1.0.

Release date:

07, April 2020

What is new?

• PDF Repository Report Enhancement: We added an Executive Summary, the Heatmap, Trends, and Duplications. How to download this report from your repository? Click here.
• We have extended our MISRA C:2012 rules and added deeper checks for 11.5 and 21.8. To know more about MISRA checks coverage, please read this article.
• Embold API: Now you can get a list of all changed files with ratings and aggregated data. Check out our rich API here for further information.
• Get notified when a scan is completed to jump into the results directly, or when a task is assigned to you: Now you can choose which type of message you want to receive from Embold to fit your needs.
• Embold Trace tool and Corona support CentOS 6.
• Snapshot label restrictions are now expanded to 255 characters.
• Improved search results on the docs portal.

Improvements:

• Bug fixes
• Overall performance improvement

Release scope:

• Available for cloud and on-premise (installers & docker hub).

Upgrade paths:

• All versions from 1.6.0.0 can be upgraded to 1.8.0.

Release date:

17, February 2020

What is new?

• Our Jira integration got even better. When creating and assigning a task from Embold, the assignee can take up the ticket in Jira and directly jump to the issue in Embold for further information. Also, we enriched the ticket information, which is sent from Embold, so the task owner can directly pick up the issue and start fixing it. Read more about our Jira integration here.
• We have extended our MISRA C: 2012 rules and added 8.11 and 11.1. We also added a MISRA compliance PDF report and MISRA CSV report which you can download directly in Embold. To know more about MISRA checks coverage, please read this article.
• Embold API: Now you can get an aggregated ticket information per component and also the commit number and last commit date information per component. Check out our rich API here for further information.
• Now you can download all your design and code issues as a CSV report.
• Added JavaScript to our RE (beta): Our recommendation engine tries to identify the issues in the code and suggest fixes based on historical data. Now we are supporting JavaScript language. For more information, please check this article.
• PR Quality Gate: It allows users to check whether their pull request has passed or failed in quality depending on certain configurations. Hence, we are providing a facility to update the configuration file via API as per your set requirements.
• IntelliJ PlugIn (beta) – This Embold plugin helps the user to analyse the source code in IDE itself.

Upgrade paths:

• All versions from 1.6.0.0 can be upgraded to 1.7.10.0

Release date:

21, January 2020

What is new?

• Azure DevOps integration: Pull request scan for Azure DevOps is now supported! Not just that, you can create your refactoring tasks in Azure DevOps right from Embold! Read more about Azure DevOps integration here.
• We have added about 30% more complex scenarios to our MISRA C 2012 coverage within already supported checks. To know more about MISRA checks coverage, please read this article.
• Embold API: You can now integrate generic code issues through API. Pull requests scan results are also now available through API.
• We have added 108 more code issues for C and C++ repositories as we upgraded Clang to version 9.0.0!

Release scope:

• Available via docker hub and cloud.

Upgrade paths:

• All versions from 1.6.0.0 can be upgraded to 1.7.9.0

Release date:

Cloud : 06, December 2019
On-premise : 11, December 2019

What is new?

• Parallel and incremental scan for C/C++ projects. Enjoy significantly faster scans, because ‘fast’ is not just cool, its the hallmark of Embold 🙂
• With our new anti-pattern visualisation, you have the ability to better understand and address the anti-patterns in the given context.
• API improvements and added APIs. Check out the API reference for more information.
• Filtering code issues by compliance standards such as MISRA is now easy!
• Jira – OAuth integration is now supported.
• Added another new JavaScript anti-pattern Dispersed Variable Declaration.
• Recommendation engine can now learn from issues logged on GitHub! Bring the power of Embold RE to more of your projects.

Improvements:

• Bug fixes
• Overall performance improvement

Release scope:

• Available for cloud and on-premise (installers & docker hub).

Upgrade paths:

• All versions from 1.6.0.0 can be upgraded to 1.7.8.0

Release date:

04, November 2019

What is new?

• Two new JavaScript anti-patterns. Find and address anomalies in promises and dreaded mark-up (HTML) in JS!
• Project level trends now enable you to compare trends of repositories in a project.
• Pull requests now supported for GitLab cloud, GitHub on-premise and Bitbucket on-premise.
• Gated commits for SVN repositories!
• The brand new API documentation for easy onboarding and usage of Embold APIs. No better time to start building your Embold apps.
• .NET Core-based C# repositories are now supported on cloud and through docker.

Upgrade paths:

• All versions from 1.6.0.0 can be upgraded to 1.7.6.0

Release scope:

• Available via docker hub and cloud.

Release date:

01, October 2019

What is new?

• GitLab support for Embold Pull Requests.

Upgrade paths:

All versions from 1.6.0.0 can be upgraded to 1.7.5.0

Release scope:

Available via docker hub only.

Release date:

19, September 2019

What is new?

• Transactions with Embold are now PSD2 compliant.
• Architects and developers can now explore dependencies between various modules with our brand new module dependencies visualisation. This offers new and important insights to understand the overall structure of your software at a glance.
• Recently concluded scans can be now accessed from scan queue page.

Improvements:

• Stability and usability improvements.

Upgrade paths:

All versions from 1.6.0.0 can be upgraded to 1.7.4.0

Release scope:

Available for all cloud customers and via docker channel.

Release date:

08, August 2019

What is new?

• LDAP support introduced! Embold will support Open LDAP and Microsoft Active Directory* for enterprise grade single sign-on integration.
• Code issues are now suppressible. Do you think a code issue is not important for you or is a false positive? Just suppress the occurrence. Embold will stop reporting that occurrence of the issue!
• Swift code issues support introduced through SwiftLint (0.32.0)
• Gated Commits is introduced to enforce quality for every commit!
• Brand new documentation portal is launched with improved user experience!
• Embold is now available from just €10! Embold is made extremely affordable to power more projects and developers.
• Two new proprietary code issues introduced for JavaScript.
• OWASP top 10 support for Java is introduced!

*Active Directory is a registered trade mark of Microsoft Corporation.

Improvements:

• Improved recommendation engine workflow.
• Improved TeamCity plugin.
• Stability improvements and bug fixes.

Upgrade paths:

All versions from 1.6.0.0 can be upgraded to 1.7.3.0

Release date

1, August 2019

What is new?

• New trends plot enables you to monitor changes in ratings , hotspots, issue count etc for your repositories.
• Embold APIs are extended to provide list of hotspots, components violating metrics and more. More power to you to build applications or integrations!
• Recommendation Engine (Beta) now supports Redmine and SVN.

Improvements:

• Bug fixes.
• Overall performance improvement.
• Gamma trace improvements.

Release date:

18, July 2019

What is new?

• Gamma rebranding to Embold. As part of our rebranding process, we will be calling our product ‘Embold’ from now. Everything you love about the product remains the same!
• Embold APIs (formerly Gamma APIs) are now available to cloud customers with commercial licenses as well.

Release date:

14, June 2019

What is new?

• JavaScript native support. Yes, anti-patterns for JavaScript is now available!
• Added support for four new MISRA rules (2.7, 5.7, 11.1, 21.1 ).
• Merged pull-requests are now available in pull request workflow along with the ability to filter or search pull requests.
• Default exclusions are now available for all languages that give more precise and less cluttered initial scan result.
• Improved Gamma Trace.
• Snapshot label can now be set via the Jenkins plugin or scan configuration.

Improvements:

• Usability improvements.
• Performance improvement.
• Bug fixes.

What is new?

• Embold Recommendation Engine (Beta, available for select on-premise customers): How about finding issues that can cause a problem in the future. Embold learns from the development history and identifies issues as every commit happens.
• Pull Request Workflow (Beta, on-premise): Your code review process just got better and easier! Automated pull request scan is now available on your GitHub and Bitbucket repository. Don’t let that bug slip your eyes anymore.
  Note: To know about Pull Request and Recommendation Engine read this article.
• Embold Trace for Linux: Enables better analytics quality for C/C++ repositories for a wider spectrum of projects.
• New MISRA checks: Support for MISRA-C2012-8.4, MISRA-C2012-8.8, MISRA-C2012-11.2 are added.

Note: Available for On-premise customers only.

What is new?

• Embold APIs with Embold Access Token (GAT): More power to you! Build your apps and integrations using Embold APIs. Embold APIs are released only for on-premise customers now.
• TFS repository support: Team Foundation Server (TFS) repositories are now supported on Embold.
• Dockerised Embold: Embold is now also available through docker hub privately. One more way to get your Embold!
• New MISRA checks: Support for MISRA-C2012-8.5, MISRA-C2012-8.10, MISRA-C2012-9.4, MISRA-C2012-17.2, MISRA-C2012-17.3, MISRA-C2012-17.4, MISRA-C2012-17.7, MISRA-C2012-18.4, MISRA-C2012-18.7 are added.

Improvements:

• Bug fixes
• Overall performance improvement.

Available upgrade paths:

• 1.5.1.0 or later versions of Embold can be upgraded to 1.6.0.0.

What is new?

• New license workflow for on-premise Embold: Managing an on-premise license is now a breeze! Easy workflows for all license related actions such as activation, upgrade, etc.
• New MISRA checks: Support for MISRA C 2012 Rule 8.1, MISRA C 2012 Rule 8.2, MISRA C 2012 Rule 4.2 and MISRA C 2012 Rule 22.5.
• Know your Metrics: Now you need not wonder ‘what each metric means?’ and ‘what their thresholds are?’ Whenever a metric name is seen on Embold UI, just click it to directly access associated documentation. Metrics documentation is also updated for clarity and improved user experience.

Improvements:

• Updated APIs for CI/CD (Jenkins and TeamCity)
• Design improvements in Jenkins and TeamCity plugins
• Improved windows installer with complete offline installation support
• Performance improvement in the repository dashboard
• Bug fixes.

What is new?

• Download / Upload Code checkers configuration: You can now download the code checkers configuration as a JSON file for customization or reuse. When you are adding a new repository to Embold, you can simply upload the configuration (JSON) to apply all configurations at one go!

• New MISRA checks: Support for MISRA checks misra-c2012-21.6, misra-c2012-21.10 and misra-c2012-21.12 are added.

Improvements:

• Embold now supports fast scan for TypeScript as well.
• Minor design improvements.
• Bug fixes.

What is new?

• Embold Task insights (GTI): As the user types in a task with a title and description, GTI reads through it and identifies different sections of code that could contribute to the problem. It then suggests which developers could be the best at addressing the task.
• TypeScript native support: With TypeScript native support, now typescript reporting is richer with anti-patterns and larger list of metrics.
• Fast Scan(Beta): Fast scan enables you to perform a scan only on the changed files. Result as the name suggests, is a significantly fast scanning experience.
• Rich Embold report on Jenkins: Now a visually rich Embold report is available on Jenkins plugin.
• MISRA checks support: Support for MISRA checks misra-c2012-6.2, misra-c2012-7.4, misra-c2012-9.3 are added.
• Scan by Commit Id: Running a scan by commit id is now supported. There is no longer a limitation to scan only the latest version.
• TeamCity plugin: Embold TeamCity plugin allows to run a scan after a successful build on JetBrains TeamCity. Plugin also reports Embold scan results right inside TeamCity via the plugin.

Improvements:

• Issues information is now tagged with KPI information. So developers can understand implications of a code issue.
• Performance improvement in Component list view
• C/C++ performance improvement for fuzzy analysis
• Better code checker defaults for Javascript
• Ubuntu and Centos installer UI improvements
• Bug fixes

Limitations:

• While adding repositories to Embold from version control account only first 30 repositories will be available.
• Task insights is only available for on-premise Embold installations. (Coming soon to cloud)

Embold Website

• Email notifications regarding onboarding and webinars.

What is new?

• Embold Task Insights (GTI): As the user types in a task with a title and description, GTI reads through it and identifies different sections of code that could contribute to the problem. It then suggests which developers could be the best at addressing the task.
• Fast Scan(Beta): Fast scan enables you to perform a scan only on the changed files. Result as the name suggests, is a significantly fast scanning experience.
• Rich Embold report on Jenkins: Now a visually rich Embold report is available on Jenkins plugin.
• Scan by Commit Id: Running a scan by commit id is now supported. There is no longer a limitation to scan only the latest version.

Improvements:

• Issues information is now tagged with KPI information. So developers can understand implications of a code issue.
• Bug fixes
• Improved email notifications.

What is new?

• Embold will now use token based authentication instead of sessions for integration such as Jenkins plugin.
• Embold Quality Gates are now available in Jenkins plugin. Now you can monitor quality from within Jenkins.
• Code issues support for SQL through ‘SQLCheck’. Enables detection of performance issues in queries.
• Solidity code issues support via Solium.
• Kotlin code issues support via Detekt.
• Duplication is now reported for Typescript and Kotlin
• Downloadable repository configuration for CI integration and remote scanning

New Package:

• By popular demand, monthly pricing option is now available!

Improvements:

• Improved duplication reporting accuracy for PHP and Go.
• Improvements in email notifications.

Limitations:

• Solium support for Windows (on premise) is not available.
• Microsoft Visual Studio Embold plugin support for Visual Studio 2013 and Visual Studio 2017 is not available.

Product Improvements

• License consumption information — New view shows available scan credit and LOC on explorer side for users.
• Performance improvements
• Bug fixes

New Languages

• PHP — Embold now supports PHP through two static code analyzers, PHPMD and PHPCS. PHPMD (PHP Mess Detector) is a code checker tool for the PHP programming language. It takes a given PHP source code and looks for several potential problems within that source including Possible bugs, Suboptimal code, Overcomplicated expressions, Unused parameters, methods, properties, etc. PHPCS is a code checker tool for the PHP programming language. It is an essential development tool that ensures your code remains clean and consistent. Embold offers support for MySource, PEAR, PSR1, PSR2, Zend, and Squiz coding standards.
• Go —  Embold now supports Go through the Go Meta Linter static code analyzer. Gometalinter is a code checker tool for the Go programming language. It executes many linters in parallel while normalizing the results and rearranging them for ease of use. Embold offers support for errcheck, gocyclo, golint, gotype, ineffassign, structcheck, and vet.

New Anti-Patterns

• Support has been added for 8 new anti-patterns for the C/C++ language.

New Code Checkers

• MISRA code checker — MISRA C is a set of software development guidelines for the C programming language developed by MISRA (Motor Industry Software Reliability Association). Its aims are to facilitate code safety, security, portability and reliability. Embold supports MISRA C:2012 and is integrated with CPPCheck.

New Views & Feature improvements:

• File explorer — It’s now easier to track down  and view code issues, design issues, and metrics on the file level.
• Remote Scans — Simplified workflow for remote scans.
• Chat support — Live chat has been integrated with the Embold application! Get answers to all your questions quickly.
• New distribution method — Windows and Linux Docker

Product Improvements

• Performance optimizations on issues and repository list views
• Minor design updates and usability improvements
• Bug fixes

New Features

• Improved user experience in snapshot selection and user configurable snapshot labels
• Source code support for remote scan for C++
• New antipatterns added
• New code issue detectors for C#
• ESLint code checkers for JavaScript

Improvements

• Performance optimizations on issues and KPI dashboard pages
• Bug fixes
• Minor design updates and usability improvements

New Features

• Downloadable repository report.
• New Language Support: Objective-C

Feature Improvements

• Improved issues navigation and filtering
• Minor design updates
• Performance optimisations
• Global issues and tasks pages are deprecated.

Bugs & Issues

• General bugs and issues fixed

New Features

• Email configuration
• Metrics JSON export (in component list view)

Feature Improvements

• Filters for JIRA issues
• New loader
• New Tooltips

HTML Markup Optimisations

• Component list/change list optimisations
• Action item changed to ‘button’ or ‘a’ tag (50% done)

Bugs & Issues

• General bugs and issues fixed