Changelog
Back to All

CLI 6.37.45

July 22nd, 2026

[6.37.45] - 2026-07-22

Added

  • eMASS sync_system command to synchronize all structural records (assets, controls, POAMs, milestones, artifacts) between a RegScale SSP and its linked eMASS system in a single dependency-ordered invocation
  • AWS Inspector sync --exclude_tags option to skip resources carrying the given tags, with --exclude_tags_match any|all
  • CSAM organization-defined parameter (ODP) import into RegScale's OSCAL parameter model, with an Excel mapping workbook for reviewing unmatched values

Changed

  • FIPS container image now built on a Python 3.12 base to align with the Airflow FIPS image and clear security policy scanning
  • AWS Inspector V2 sync keeps only the most recently pushed image per ECR repository and names assets by repository and digest instead of image tag, and can be turned off with --no_dedupe_ecr_images or the inspectorDedupeEcrImages init.yaml setting to sync every image digest
  • AWS Inspector V2 sync scopes compliance coverage and statistics to the selected resource types
  • AWS Inspector V2 sync now applies the --tags filter server-side when pulling findings and coverage, so only tagged resources are retrieved instead of being downloaded and then filtered
  • Minimum supported Python version raised to 3.11 (Python 3.10 is no longer supported)
  • Jira Data Center tickets pushed from RegScale now include the issue's recommended actions and remediation description along with a direct link back to the source RegScale issue

Fixed

  • Qualys sync now applies the configured Total Cloud include and exclude tag filters when the command-line tag options are not supplied, instead of silently ingesting all Total Cloud data
  • FIPS container image now built on a Python 3.12 base to align with the Airflow FIPS image and clear security policy scanning
  • Wiz container images pinned by digest now import with a version derived from the image digest instead of a blank value, so downstream eMASS hardware/software exports no longer fail validation on the required Version field
  • Wiz secret findings that share a detection rule now consolidate into a single issue listing all affected resources instead of creating a near-identical issue for each resource
  • Scanner imports no longer intermittently drop vulnerability-to-asset links under heavy multi-threaded processing