ROH 6.33.0.0 Release

Release Overview

Release Name: ROH Beta Minor Release

Release Type: Minor

Release Number: 6.33.0.0

Purpose

RegScale Orchestration Hub (ROH) enables organizations to automate the import and export of data between RegScale and external systems through configurable integrations and commands.

This beta release is intended for early adopters and validation of core orchestration capabilities. Functionality, supported integrations, and performance characteristics may change before General Availability (GA). This minor release delivers reliability, usability, and maintenance improvements for early adopters, summarized below.

What's Included

• ROH container images are now published to Docker Hub. The application and worker images are available publicly as regscale/orchestration-hub-app and regscale/orchestration-hub-worker.
• Updated bundled RegScale user interface. The user interface updates include multiple cosmetic enhancements and bug fixes identified below.

What's Fixed

• Microsoft Defender jobs that import nothing now report failure. A Defender synchronization that retrieved records but could not process any of them previously logged the errors, reported success, and exited normally while creating nothing in RegScale — so a scheduled job could report green every night while landing no data. Such a run now fails, making it visible for investigation. A run that processes only some of what it retrieved warns and still creates the rest, and a run that legitimately finds nothing to retrieve still succeeds.
• Credentials are now listed for Defender, Entra and Tenable jobs. When creating a job for any of 20 Microsoft Defender, Entra, Tenable.io or Tenable SC commands, the job form listed no credentials at all, so it could not prompt for the values those jobs need and gave no indication anything was missing before the job failed at authentication. Those commands now list their credentials on the job form.
• Scheduled job times displayed in the wrong timezone. Job and execution times appeared several hours in the future for users outside UTC — a job scheduled for 01:35 UTC displayed as 05:35 to a viewer at UTC-4. The jobs themselves always ran at the correct time; only the display was wrong. Times returned by ROH now carry an explicit UTC designator so they render correctly in the viewer's local timezone, across the Jobs, Executions, Analytics, Secrets and Monitoring screens.
• Screens failing to load after an upgrade. After ROH was upgraded, a browser still holding the previous version could fail to open individual screens with a module loading error until the user performed a hard refresh. The application entry point is no longer cached, so an upgraded ROH loads correctly on a normal page load.
• Job splitting removed from Entra evidence collection. The entra collect_evidence command previously offered job splitting, but the option never took effect — every run processed the evidence set as a whole regardless. The option has been removed to reflect what the command actually does. Evidence collection itself is unaffected and still produces one complete evidence package, and no action is needed for existing jobs.

Known Limitations

• Required and optional credentials are not distinguished on the job form. The Secret Requirements panel lists the credentials a command uses and shows which are present in the selected secret set, but it does not indicate which of those are mandatory and which are optional alternatives. The AWS commands, for example, accept either a named profile or an access key pair, and the panel presents both the same way. Customers configuring a job cannot yet tell from this panel alone which credentials they must supply.

Maintenance and Updates

• Routine dependency and security updates across backend components.
• Expanded automated end-to-end and regression test coverage.

Deployment Notes

The Orchestration Hub 6.33.0.0 Release requires RegScale 6.33.3.0 or newer.