Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Table of Contents

 

...

 

New version of

...

Kiuwan 

 

Info

new version of CQM (2.2.0) Kiuwan has been released.

Major changes are:

  • Support for Scala programming language
  • Support for SAML Single Sign-On (SSO)
  • Vulnerabilities and License Management in Kiuwan Insights
  • Insights support for Ruby
  • Kiuwan for Developers plugin for VisualStudio Code
  • Enhanced support for PL-SQL

 


CQM is the default Model (i.e. a concrete set of active and pre-configured rules): 

  • If you are using CQM,
    • new rules will automatically become active and will be applied to new analyses
  • If you are using your own custom model, your model remains unchaged, but you can modify it and activate the new rules (in case you want to be applied to your code).

You can find new rules by comparing this release of CQM against previous version.  A detailed description of the behavior of these new rules is available in rule’s description.

...

You can find these rules going to Models Management, select CQM and search for Rules applying to Scala language

 

...

Kiuwan has increased PL-SQL security analysis by incorporating 6 new security rules:

 OPT.PLSQL.SEC.ForbiddenCall
OPT.PLSQL.SEC.InsecureRandomness
OPT.PLSQL.SEC.SleepInjectionOPT.PLSQL.SEC.SqlInjection
OPT.PLSQL.SEC.TooBroadGrant
OPT.PLSQL.SEC.SecondOrderSqlInjection

 

Support for SAML Single Sign-On (SSO)

...

Info

Kiuwan provides support for SAML SSO, thus allowing you to integrate Kiuwan with most corporate users’ credentials repositories (Active Directory FSAzure ADCA Single Sing-On ,etc).

You can read more here (XXXXXXXX).at How to integrate Kiuwan with SAML SSO

 

Vulnerabilities and Licenses Policy Management in Kiuwan Insights

...

You can find further info at Vulnerabitities Vulnerabilities Management and Licenses Policies Management

...

Kiuwan Insights now support discovering of Ruby open-source dependencies used by your app,as well as informing of Ruby vulnerabilities reported to NVD

 

Kiuwan for Developers plugin for VisualStudio Code

Kiuwan for Developers (K4D) for Microsoft Visual Studio Code

...

has just been released.

VS Code plugin will facilitate and automate compliance with security normative, quality standards and best practices for several languages.

Image Added

You can find further info at Kiuwan for Developers for Microsoft Visual Studio Code