Release Notes - 09/13/2021 – BluBracket

New Features and Enhancements

New Repo Details Design. When clicking on a Repository, you will now see a new design that lists the risk rating and number of violations for each risk category. Clicking on the violations number will provide a filter view of all violations of that risk category type.
The terminology “Alerts” has been replaced with “All Violations”, which is a new tab next to Code Risks at top of screen.
New Product Tour when first on-boarding or logging in to the latest version
CSV download now available when clicking on a risk category Violation count link
Two new public API’s have been released
- /api/public/blubracket-ignore
  - blubracket-ignore is an API that can be used to globally ignore secret types or secret values. For example, you may want to ignore any passwords that have the value of “password”. Ignore means an event will be created, but not an alert for that secret.
- /api/public/repo/scan_status
  - scan_status is an API that can be used to the scan status of a specified repository

Free Trial Edition

The Enterprise Edition features and bug fixes listed in these release notes also apply to the Free Trial Edition.

Unsupported Languages
- Note that BluBracket is not currently able to identify and alert on secrets in languages that do not use traditional assignment operators (Lisp, Scheme and Clojure for example).
GitHub Payload Cap
- GitHub payloads are capped at 25 MB. If your event generates a larger payload, a webhook will not be fired which means that BluBracket will not be able to identify the event. This may happen, for example, on a create event if many branches or tags are pushed at once. We suggest monitoring your payload size to ensure delivery. Please refer to the following GitHub document: https://developer.github.com/webhooks/#payloads.