HomeGuidesAPI ReferenceChangelog
Changelog

[6.20.14.0] - 2025-06-16

Changed

  • RegML features are now grouped under a RegML Tools submenu found under the More Tools navigation menu
  • RegML Extractor has been renamed to SSP Author
  • SSP Author: Existing data can now be used in RegML to author SSP controls including the Policies Module and Questionnaires results
  • SSP Author: Additional source file types are now supported: Word, Excel, Text, and Rich Text Files
  • SSP Author: Logs are generated to show authoring process status and report processing errors
  • The AI WYSIWYG editor now contains a full screen button inside the toolbar
  • Style updates applied to control-level RegML Authoring and Explainer tools to address issues with modal appearance
  • Style updates for RegML Auditor
  • RegML Auditor performance adjustments

Fixes

  • Security updates were applied

[6.20.3.0] - 2025-06-13

Added

  • RiskIssueMapping class to RegScale Models
  • wizHardwareAssetTypes and useWizHardwareAssetTypes variables to RegScale CLI to define hardware asset types from Wiz to map to RegScale Hardware category during Wiz inventory integration

Fixed

  • Errors experienced during the Wiz vulnerabilities integration
  • Incorrect number of findings count on the progress bar during wiz vulnerabilities command
  • Errors on CIS/CRM import when extra columns are observed in CIS or CRM worksheet
  • Incorrect final log statement for the updated Tasks during the Jira tasks integration

[6.20.13.0] - 2025-06-13

Added

  • Notification generated when an export completes in the background

Changed

  • A subset of exports were migrated to run as background tasks for improved user experience
  • Frontend now defaults to API v2

Fixed

  • Improved handling of database locks to ensure timely release

[6.20.12.0] - 2025-06-12

Added

  • Affected Controls/CCIs field on the POAM tab within the Issues Module

Fixed

  • Improved Tailored SSP formatting

[6.20.11.1] - 2025-06-06

Fixed

  • Automation Manager configuration fields display correctly

[6.20.11.0] - 2025-06-05

Added

  • Default Implementation Status and Control Origin for Inheritance per Compliance Setting

Changed

  • Entire grid row is clickable for drilling into record, view and edit buttons removed from grids
  • Control Implementations with multiple Implementation Status will be counted towards the Compliance Rollup that matches multiple statuses, implementations that span multiple rollup values will still be included in the Other group
  • Link field is not required in Security Plan references
  • Small footer is the default footer style
  • Update to eMASS Compliance Setting
  • Form Builder sections alphabetically sort when section name is changed
  • Help text defined in Form Builder is displayed above the fields

Fixed

  • Assessments Status Board title renders correctly
  • Control Implementations Risk Rollup field fits screen width
  • Statusboard search bar styling adjusted
  • Statusboard styling improvements for dark mode
  • Dark mode field background is consistent
  • Compliance Settings Scanner Integration Values display correctly
  • Wayfinder deep links work as expected
  • Builder dark mode styling
  • CCI are counted towards security checks regardless of capitalization
  • Drill down dark mode styling
  • Form subheader dark mode styling
  • Component Relationship subsystem works as expected
  • Shadow styling in Workbench
  • Questionnaire import works correctly
  • SLCM export populates Risk Assessment data
  • Navigation menu is present after login
  • Audit tab present in Supply Chains module
  • Risk scorecard new mitigation section toggle styling improved
  • Delete buttons are red
  • Notification dark mode styling
  • Implementation Status and Control Origin lists render properly
  • Security Plan Statusboard Aggregate View button works
  • Typo fixed in Compliance Setting grid
  • Remove roles button returned to Control Implementation Roles tab
  • Control Implementations Parts tab maintains position after save
  • Lineage tab on Security Plans is present
  • Hardware table populates in CMMC export
  • Activity refresh button refreshes activities dropdown
  • Custom fields are saving data as expected
  • Moving sections in Form Builder works as expected
  • Add control via Security Profile to components does not create duplicate records
  • Questionnaire assignment emails are displayed on user profile email history
  • Notification email text revised
  • Details button works on Control Framework Gap Report (UCF)
  • Opening left navigation panel doesn’t refresh center content
  • eMASS HW/SW export populated column F

[6.20.2.0] - 2025-06-05

Added

  • Support to Tenable SC, Trivy, Grype, and OpenText for asset and vulnerability roll up to a component via -c or --component_id
  • Logic to enforce scan_date is a string in ScannerIntegration class
  • get_list_by_parent and get_list_by_parent_control methods to the ControlImplementation RegScale model
  • Option to sync attachments during the Jira task integration

Changed

  • Default value for due date in Flat File Importer
  • Updated Jira task integration to be a bi-directional integration

Fixed

  • Errors when reading issueDueDates value from init.yaml
  • Response data not being parsed during Burp .xml imports
  • Errors experienced during the Qualys .csv flat file import via qualys import_scans
  • Missing reference resilence in Tenable IO sync_compliance
  • Control Origination for CIS/CRM at the implementation level
  • Incorrect implementation status settings at the implementation level

Removed

  • Removed unused methods from FlatFileImporter for better code maintainability & readability

[6.20.10.1] - 2025-06-02

Added

  • Full rich text editor in Questionnaire prompts

[6.20.10.0] - 2025-06-01

Added

  • Additional Export Builder data
    • Control Implementation: Parameters, Parts, Implementing Roles
    • Component implementation statements
    • Security Controls
  • Header and footer support
  • FedRAMP Appendix A Export Builder template

[6.20.1.1] - 2025-05-29

Fixed

  • Premature initialization of the Application class causing init.yaml to be reset