V3.2.0
Feature UpdateContainer image scanning, SARIF export for CI pipelines, and an incremental scan mode that keeps large repositories fast. Plus quieter reports and a couple of engine fixes.
Added
3 changes
Container image scanning (beta)
Analyze Docker and OCI images for vulnerable OS packages, leaked secrets, and risky layer configuration, accessible from the Supply Chain section.
supply-chaincontainers
SARIF 2.1.0 export
Export findings as SARIF for ingestion into CI dashboards and GitHub code scanning, with CWE classification and severity preserved per result.
exportci
Incremental scan mode
Re-analyze only the files changed since the last scan, cutting pipeline times on large repositories without losing prior results.
engineci
Changed
1 change
Findings deduplication
Identical findings across scan passes now collapse into a single entry with an occurrence count, reducing report noise on repeat scans.
uiengine
Fixed
2 fixes
Memory spike on large .NET assemblies
Resolved excessive allocation when analyzing assemblies over 200 MB; peak memory now scales with module count rather than file size.
engine
CLI exit codes for --fail-on
The --fail-on threshold now returns the documented non-zero exit codes per severity, fixing silent passes in CI gates.
cli