2023 Weeks 49-52
New
- UI: Added an email invitation system when attempting to add an unknown user to a group
- Extension: Added a Snyk import extension
2023 Weeks 43-48
New
- Notifications: Added email and webhook notification feature that triggers on continuous monitoring events
- Integration: Added an integration for Snyk
- Integration: Added an integration for Sumo Logic
- Integration: Added an integration for CircleCI
- Authentication: Added support for AzureAD authentication provider
Improved
- UI: Improved color palette
- SBOM: Added vulnerabilities to CycloneDX exports
2023 Weeks 37-42
New
- CLI/CI: Added support for manifest files by leveraging lockfile generation
- Integration: Added an integration for Netskope
- Experimental: Added GenerativeAI remediation suggestion capability
2023 Weeks 31-36
New
- API Token: Added an API token service making it much easier to interact directly with the API
- Policy: Added support for group-level package suppression
- CLI: Capture and display lockfile paths making it easier to see where a dependency comes from
- SBOM: Added CycloneDX support for both SBOM ingest and export
Improved
- UI: Improved project detail page view focusing more on package-level triage
- CLI: Added
bundle and cargo extensions for Phylum pre-check
- Search: Added support for contexualized CVE searching in the global search bar
- Dashboard: Added contexualized dashboard elements
2023 Weeks 25-30
New
- Search: Added a global search bar which can include contextualized results from your projects
- Policy: Added support for group-level policy preferences
- Integration: Added an integration for Tines
Improved
- CLI: Support for NuGet's
packages.lock.json lockfiles
- CLI: Support for
pnpm-lock.yaml lockfiles
2023 Weeks 19-24
New
- Threat Feed: Added a threat feed capability highlighting software supply chain attacks (contact sales if interested)
- Dashboard: Created Dashboard view showing software supply chain statistics
- CLI: Added support for lockfile generation from manifest files (updated list of supported filetypes here)
Improved
- CLI: Added
pip version checking to the phylum pip extension
- CLI: Removed
pip-compile requirement for lockfile generation
- SBOM: SPDX export supports PURL
- SBOM: SPDX ingest supports
tag:value format
2023 Weeks 13-18
New
- Policy: Open Policy Agent (OPA) has been implemented allowing users to create custom policies
- Event Logs: A UI view was added showing project/group event logs
- SBOM: SPDX export added for generating an SBOM from a Phylum project
- SBOM:
spdx added as a type allowing an SBOM to be analyzed with the phylum analyze -t spdx command
Improved
2023 Weeks 7-12
New
- Integrations: A Bitbucket Cloud integration was created
Improved
- CLI:
v4.7.0 was released including automatic lockfile detection
2023 Weeks 1-6
New
- Groups: The ability to delete Groups was added to the UI/CLI/API
- CLI: An extension supporting the
pip package manager for installation pre-check and sandboxing was published
Improved
- CLI:
phylum package command now automatically submits a package for analysis if results are not already available
- Analysis: Phylum project/analysis job submissions can now contain multiple lockfiles/ecosystems