CHANGELOG.md

Changelog

2.1.0 (2023-11-21)

Features

• fcli ssc appversion create: Add options for copying existing application version (75461db)
• Add fcli ssc appversion copy-state command (75461db)
• Add fcli system-state wait-for-job command (75461db)

Bug Fixes

• rename new SSC_URL PROJECT_VERSION_ACTION-> PROJECT_VERSIONS_ACTION (55178be)

2.0.0 (2023-10-25)

⚠ BREAKING CHANGES

• Core: Most commands/options now use case-sensitive matching to avoid inconsistent behavior between server-side and client-side matching
• Core: Change fcli variable syntax & behavior for easier use
• Core: Change query expression syntax to allow for advanced queries
• Core: Restructure fcli home/data directories. Configuration & session data stored by earlier fcli versions will not be available after upgrading, and will not be automatically removed. It's recommended to manually delete the ~/.fortify/fcli folder when upgrading, and then use the new fcli version to re-apply configuration settings.
• Core: Change environment variable names for better clarity and avoiding conflicts with other Fortify command-line utilities
• Core: The .jar version of fcli now requires Java 17 or higher to run
• fcli config: Restructure command tree & options for consistency & ease of use
• fcli config: Move variable-related commands to fcli util
• fcli fod: Restructure existing commands & options for consistency & ease of use
• fcli sc-dast: Minor restructuring of command tree & options for consistency & ease of use
• fcli sc-sast: Minor restructuring of command options for consistency & ease of use
• fcli ssc: Restructure existing commands & options for consistency & ease of use
• fcli tool: Minor restructuring of command options for consistency & ease of use

Features

• fcli config: Move variable-related commands to fcli util (ae7ad75)
• fcli config: Restructure command tree & options for consistency & ease of use (ae7ad75)
• fcli fod: Fixes, usability improvements & new commands for managing applications, microservices, releases, scans & scan results (ae7ad75)
• fcli fod: Move out of preview mode, now officially supported (ae7ad75)
• fcli fod: Restructure existing commands & options for consistency & ease of use (ae7ad75)
• fcli fod: Various other fixes & usability improvements (ae7ad75)
• fcli license: New command, adding support for generating MSP & NCD license usage reports (ae7ad75)
• fcli sc-dast: Minor restructuring of command tree & options for consistency & ease of use (ae7ad75)
• fcli sc-dast: Various fixes & usability improvements (ae7ad75)
• fcli sc-sast: Minor restructuring of command options for consistency & ease of use (ae7ad75)
• fcli sc-sast: New command for listing ScanCentral SAST sensors (ae7ad75)
• fcli sc-sast: Various fixes & usability improvements (ae7ad75)
• fcli ssc: Add support for applying filters on issue counts (ae7ad75)
• fcli ssc: Add support for embedding additional data on fcli ssc appversion get/list commands (ae7ad75)
• fcli ssc: New commands for creating local users, refreshing metrics, listing rule packs & listing SSC configuration settings (ae7ad75)
• fcli ssc: New commands for managing performance indicators & variables (PREVIEW) (ae7ad75)
• fcli ssc: Restructure existing commands & options for consistency & ease of use (ae7ad75)
• fcli ssc: Various other fixes & usability improvements (ae7ad75)
• fcli tool: Add support for FortifyBugTrackerUtility (ae7ad75)
• fcli tool: Improve tool version & digest handling (ae7ad75)
• fcli tool: Minor restructuring of command options for consistency & ease of use (ae7ad75)
• fcli util: Add variable-related commands (moved from fcli config) (ae7ad75)
• fcli util: Add various other utility commands (ae7ad75)
• Core: Add support for interactive confirmation on commands that require confirmation (ae7ad75)
• Core: Change environment variable names for better clarity and avoiding conflicts with other Fortify command-line utilities (ae7ad75)
• Core: Change fcli variable syntax & behavior for easier use (ae7ad75)
• Core: Change query expression syntax to allow for advanced queries (ae7ad75)
• Core: Restructure fcli home/data directories. Configuration & session data stored by earlier fcli versions will not be available after upgrading, and will not be automatically removed. It's recommended to manually delete the ~/.fortify/fcli folder when upgrading, and then use the new fcli version to re-apply configuration settings. (ae7ad75)
• Core: The .jar version of fcli now requires Java 17 or higher to run (ae7ad75)

Bug Fixes

• Core: Most commands/options now use case-sensitive matching to avoid inconsistent behavior between server-side and client-side matching (ae7ad75)
• Core: Various bug fixes and many other improvements (ae7ad75)

1.3.2 (2023-10-12)

Bug Fixes

• fcli tool vuln-exporter install: Add support for latest (2.0.4) version (a44ddc3)

1.3.1 (2023-09-20)

Bug Fixes

• fcli tool sc-client install: Add support for latest (23.1.0) version (93af1c6)
• fcli tool vuln-exporter install: Add support for latest (2.0.3) version (c7d4af6)

1.3.0 (2023-08-18)

Features

• Configurable connect & socket timeout (3015bb5)

1.2.5 (2023-04-07)

Bug Fixes

• fcli tool vuln-exporter install: Add support for latest (2.0.2) version (e0ce21a)

1.2.4 (2023-04-07)

Bug Fixes

• fcli tool vuln-exporter install: Add support for latest (2.0.1) version (9c34f73)

1.2.3 (2023-03-09)

Bug Fixes

• fcli ssc appversion-artifact download: Include externalmetadata.xml in current state FPR download by passing arbitrary clientVersion parameter to SSC (fixes #257) (2694ffe)

1.2.2 (2023-03-05)

Bug Fixes

• fcli tool sc-client install: Add support for latest (22.2.1) version (38e93eb)

1.2.1 (2023-03-05)

Bug Fixes

• Custom trust store ignored by native binaries (fixes #253) (a0af875)

1.2.0 (2023-02-09)

Features

• FoD: Add fod sast-scan setup (implements #225) (e556f1e)
• FoD: Added functionality for user CRUD (implements #245) (818622a)
• FoD: Added functionality for user group CRUD (implements #246) (818622a)

Bug Fixes

• fcli tool vuln-exporter install: Add support for latest (2.0.0) version (d7ccaea)

1.1.0 (2023-01-19)

Features

• Add support for configuring custom SSL trust store (fixes #221) (2732e37)
• SSC: Add support for importing Debricked results (e2a6f1e)

Bug Fixes

• fcli * session login: Improve error output on previous session logout failure (fixes #219) (86b0868)
• fcli sc-dast session login: Require SSC credentials to be specified (fixes #223) (ea049ec)
• fcli sc-sast scan start: NullPointerException instead of proper error message if no options provided (fixes #232) (1efa62b)
• fcli sc-sast session login: Improve usage help for --client-auth-token and explicitly check token validity (fixes #230) (ce6324b)
• fcli sc-sast session login: Require SSC credentials to be specified (fixes #222) (b252069)
• Fix NoSuchFileExceptions if FCLI_HOME or FORTIFY_HOME set to relative directory (fixes #227) (2ef6b21)
• Fix NullPointerException if no module(s) configured for proxy (fixes #228) (11ec6e1)
• Improve help output for -h option (fixes #217) (f2e47b0)
• Improve output of session commands to provide better consistency with other CRUD commands (fixes #220) (153f96e)
• SSL verification was incorrectly disabled by default and enabled by -k option (fixes #231) (7fa56c3)

1.0.5 (2023-01-11)

Bug Fixes

• FoD: Fix some commands not working in native binaries (#216) (02baa48)

1.0.4 (2023-01-03)

Bug Fixes

• fcli sc-sast scan start: Accept both encoded or decoded token for --ssc-ci-token option (fixes #215) (1c0ba17)
• Improve interactive prompts (fixes #213) (ad15067)

1.0.3 (2022-12-22)

Bug Fixes

• fcli config var def list: Show created date as last accessed date if variable contents haven't been read yet (fixes #207) (302c9ca)
• fcli sc-dast sensor enable/disable: Fix HostNotFoundException due to hidden non-ASCII characters in endpoint URI (fixes #212) (ca65080)
• fcli ssc appversion-vuln count: Add missing -q option (fixes #209) (cdb2849)
• Better description of default behavior for boolean options (fixes #206) (903c1c4)
• Fix ANSI (color) codes on Windows (05e159e)

1.0.2 (2022-12-16)

Bug Fixes

• Fix fcli --version not displaying version number in native binaries (fixes #112) (b3b48e6)

1.0.1 (2022-12-15)

Bug Fixes

• fcli ssc app update: Fix 'application not found' error when updating app name (fixes #166) (f8ebad6)
• fcli ssc appversion update: Fix application name not shown in output (fixes #183) (32f130b)
• fcli ssc appversion update: Fix exception if no --userdel option is specified (fixes #175) (c7ebb98)
• fcli ssc appversion-artifact download: --no-include-sources now available for both application file and individual FPR download (fixes #173) (216ac2a)
• fcli ssc appversion-artifact download: HTTP 500 error when downloading application file (216ac2a)
• fcli ssc appversion-artifact upload: Improve usage message for --engine-type option (fixes #176) (6cc775e)
• fcli ssc attribute-definition get: Allow category prefix when specifying guid (fixes #186) (7b02f61)
• fcli ssc issue-template create: Display 'Default template=true' if --set-as-default specified (fixes #180) (6f2101e)
• fcli ssc issue-template delete: Fix issue templates not being deleted (fixes #182) (0b55974)
• fcli ssc issue-template update: Fix 'issue template not found' error when updating issue template name (fixes #181) (a6002b1)
• fcli ssc plugin: Fix "No serializer" errors (fixes #187, fixes #188) (88d8886)
• fcli ssc role create: Allow comma-separated list of permission id's (fixes #190) (1426116)
• fcli ssc role delete: Fix role not being deleted (fixes #191) (e329c89)
• fcli ssc token update: Improve usage message (fixes #177) (8e8b924)
• fcli ssc token: Make output more consistent with SSC UI (fixes #194) (35523cc)
• fcli tool sc-client install: Add support for latest (22.2.0) version (fixes #179) (dac4b37)

1.0.0 (2022-11-29)

Miscellaneous Chores

• release 1.0.0 (d983f62)