CLI 6.33.0
March 24th, 2026
[6.33.0] - 2026-03-24
Changed
- Upgraded CrowdStrike FalconPy SDK from 1.4.5 to 1.6.0 for improved API error handling and bug fixes
- Updated CSAM integration to use new control implementation endpoint for faster loads
Added
- flag on command to select Azure cloud environment (commercial, government, china) at invocation time, enabling a single CLI install to collect Entra evidence from both GovCloud and commercial tenants
- Azure Container Registry (ACR) integration for Microsoft Defender: new CLI command pulls container images from ACR and creates RegScale software assets (REG-11608)
- Supports to target a single registry or to iterate every ACR in the subscription
- ACR API methods added to DefenderApi: registry listing, OAuth2 token exchange, repository and tag enumeration
- New (ScannerIntegration) with full asset parsing, error handling, and pagination support
- BigQuery sync_assets_bq subcommand now available in the ROH CLI under both and groups
- Generic SBOM file import command supporting SPDX and CycloneDX JSON files
Fixed
- Axonius V2 : Asset Category and Asset Owner fields are now populated correctly on ingested assets. Changed from non-standard "IT Asset" to "Hardware" (matching the enum) and explicitly set in the mapper (REG-21081)
- configuration value is no longer silently dropped from init.yaml when the CLI saves config
- Deleted Airflow DAGs (e.g., ) now get deactivated promptly; reduced from 1 year to 60 seconds so the scheduler detects removed DAG files within a minute
- SARIF compliance integration now correctly extracts CWE IDs from rule.properties.tags strings, resolving false-PASS compliance status for Semgrep and other SAST tools that embed CWEs as tag annotations