--- title: "Changelog" description: "StackHawk platform and HawkScan updates - page 3 of 8." url: https://docs.stackhawk.com/changelog/page/3/ --- # Changelog Tracking updates to the StackHawk platform and HawkScan since 2019 ## January 10, 2024 ### StackHawk Platform Added #### API Endpoint: Get Application Tech Flags Added endpoint to get application tech flags. Added #### API Endpoint: Get Application Scan Policy Added endpoint to retrieve the current scan policy configured for a specific application. Added #### API Endpoint: All StackHawk Scan Policies Added endpoint to lists all available StackHawk scan policies, providing details of each policy. Added #### API Endpoint: Get StackHawk Scan Policy Added endpoint to returns details of a specific StackHawk scan policy. Added #### API Endpoint: Assign Application Scan Policy Plugins Added endpoint to assign scan policy plugins to an application's scan policy. Added #### API Endpoint: Toggle App Scan Policy Plugin Added endpoint to enable/disable an app scan policy plugin. Added #### API Endpoint: Update Application Tech Flags Added endpoint to update technology flags for an application, affecting the behavior of plugins during HawkScan runs. ## December 7, 2023 ### StackHawk Platform Improvement #### Upgraded to React 18 The StackHawk UI now soars on React 18, bringing enhanced performance and innovation! Tonight, the engineering flock rests as their dreams of this upgrade take flight! ## November 21, 2023 ### HawkScan (3.5.0) Added #### OWASP API Top 10 Security Testing (Beta) HawkScan now has experimental support for testing for Broken Object-level Authorization and Insecure Direct Object Reference vulnerabilities. Using the `OpenAPI - Experimental` named scan policy will test for these vulnerabilities. Improvement #### Data usage improvements Improved disk usage and network throttling when running HawkScan in memory constrained environments. Improvement #### Pipeline Scanning Added a `--no-progress` CLI flag to hawk scan to disable progress bars when running HawkScan, ideal for scanning in a CI pipelines. Fixed #### Check Target Host Fixed a bug when checking a scanned host is started when configuring `app.waitForAppTarget.path`. ## November 15, 2023 ### StackHawk Platform Improvement #### Finding Details Page Enhanced vulnerability descriptions with clear remediation steps, risk details, and multi-language code examples. Improvement #### Repositories Table General improvements to the functionality of the repositories table. Fixed #### Filtering Apps, Envs, and Teams Fixes a bug in all filters when an app, env, or team is deleted. ## November 14, 2023 ### StackHawk Platform Improvement #### Security in Jira Integration Issue Linking Issues created for vulnerabilities in Jira are now automatically linked to StackHawk scan finding paths. [Linking Jira Issues from the Security Tab](https://docs.stackhawk.com/workflow-integrations/jira-security.html#linking-jira-issues-from-the-security-tab) ## October 31, 2023 ### StackHawk Platform Improvement #### Repositories Page Github Insights is officially GA. Improvement #### Repositories Page Users can filter their repositories by languages and topics. Improvement #### Repositories Page Archived and forked repositories will be hidden by default. Use the toggle to explore all hidden repositories. ## October 24, 2023 ### StackHawk Platform Improvement #### Repositories Beta Updates to improve the filtering and sorting of the Repositories table. Added #### Selected Repositories Counter Now view how many repositories you have selected next to the Create Applications button. ## October 18, 2023 ### StackHawk Platform Improvement #### Teams and Users Pages Teams and Users are now included in the left hand navigation for quicker access. Added #### Toggle Hidden Repositories Hide and show hidden repositories using our new Hidden toggle on on the Repositories page. Added #### Repositories Languages and Topics View what languages and topics a repository is using by clicking in the table and getting a run down in the right panel. Improvement #### Policy Management Docs Link Policy Management Documentation is now directly linkable from the Policy Management and Application Settings pages. Improvement #### Archived and Forked Repositories Repositories will now have an icon to indicate if they are forked or archived. ## October 11, 2023 ### StackHawk Platform Improvement #### Hide Forked and Archived Repositories Forked and Archived repositories will be hidden by default on the Repositories page. ## October 3, 2023 ### StackHawk Platform Improvement #### Scan Details We improved the way you save your Tech Flags in the Optimization Panel. Improvement #### Repositories Page We added a hyperlink that will take you to the scan details of the last scan from the Repositories page. ## October 3, 2023 ### HawkScan (3.4.0) Added #### Support for Root CA Certificates for Transparent proxies Users can now configure the path to their Root CA Certificate in the stackhawk.yml file and HawkScan will dynamically load that certificate for communication through a transparent proxy Fixed #### JSON Schema Validation for HawkScan Config Fixed an issue where validating HawkScan config was caught in a loop and not validating Fixed #### Validate Auth Command Fixed an issue where the validate auth command was not working ## September 26th, 2023 ### StackHawk Platform Improvement #### Org Details Team Members can now see their Organization ID in the Organization Details tab of their Settings. Improvement #### Repositories Page The columns of the Repositories table are now sortable. ## September 12th, 2023 ### HawkScan (3.3.0) Added #### Hawk Create App HawkScan now has the ability to create applications from the command line. [Hawk Create App](https://docs.stackhawk.com/stackhawk-cli/#hawk-create-app) Improvement #### Hawk CLI Colors HawkScan now sports more colorful terminal output, and shows a progress bar when discovering large OpenAPI specifications. Improvement #### Include & Exclude Paths Include and Exclude Path configuration now applies to OpenAPI specifications. Paths in an OpenAPI specification will not be discovered if they are excluded, and will only be discovered if they are included. Improvement #### GraphQL Scanning Fixed a bug when scanning with large GraphQL API schemas causing HawkScan to not finish correctly. Fixed #### Include & Exclude Paths Fixed a bug where Include and Exclude Paths would not be respected on Windows, or could find no results with conflicting entries. Fixed #### Logging improvements on Windows HawkScan logs to the `.hawk/logs` directory in the user home directory on Windows. ## August 31st, 2023 ### StackHawk Platform Added #### GitHub Insights Beta GitHub Insights Beta Launch! Connect your GitHub repositories to StackHawk applications. Track StackHawk scans in context with code repositories, bulk create applications to scan from these repositories, and invite code contributors into the platform all in one place. ## July 7th, 2023 ### StackHawk Platform Fixed #### Optimization Panel There were a few types of API documentation that were not being included in scan discovery for optimization tips. Now, GraphQL, gRPC, and SOAP APIs will all count towards having scan discovery enabled. Improvement #### Applications and Scans Pages The empty states for the Applications Page and the Scans Page will now prompt you to make and configure your Applications, and invite more hawks to your nest. Improvement #### Applications and Scans Pages For organizations on the StackHawk enterprise plan, owner & admin roles can now create new teams directly from the Teams dropdown on the Applications and Scans pages. ## July 6th, 2023 ### HawkScan (3.2.0) Added #### Hawk Perch Added experimental support for running HawkScan as an ongoing daemon process for authentication validation. [Hawk Perch](https://docs.stackhawk.com/stackhawk-cli/#hawk-perch-beta) Added #### Multiple external Cookie and Token Support Added support for supplying multiple cookies and tokens. Improvement #### Custom Test Data improved custom value injection for more granularity when scanning OpenAPI, GRPC or GraphQL APIs with HawkScan. [OpenAPI Custom Values ](https://docs.stackhawk.com/hawkscan/configuration/openapi-configuration.html#using-custom-variable-injection)[GraphQL Custom Values ](https://docs.stackhawk.com/hawkscan/configuration/graphql-configuration.html#using-custom-variable-injection)[gRPC Custom Values](https://docs.stackhawk.com/hawkscan/configuration/gRPC-configuration.html#using-custom-variable-injection) Improvement #### HawkScan Configuration from Url It is now possible to run HawkScan configured with a url to a stackhawk.yml file. Fixed #### gRPC Scanning Fixed a bug that prevented scanning gRPC applications over tls. Fixed #### Rogue Zap Process Fixed a bug where HawkScan could fail to start if a Zap process was not previously stopped or running as a daemon with `hawk perch`. Fixed #### Configurable Redaction List Fixed a few bugs where error or debug logging of messages from Zap would not have headers fully redacted when configured. Fixed #### Outbound Proxy Support A variety of bugfixes supporting outbound proxy behavior, particularly when running HawkScan with proxy support on Windows. ## June 28th, 2023 ### StackHawk Platform Added #### Optimization Tips The scan details page now displays our new Optimization Tips panel which houses key feature configuration advice to improve your scan speed and accuracy. We've also added the optimization icon to the application environment cards so you can quickly identify which configurations need your attention. This is available only for Pro and Enterprise plan. Added #### Getting Started We would love to know a little more about you, so we've added a role collection to the signup page. This will help us continue to improve our experience. Improvement #### Create New App Because we know that sometimes getting the details of a new application requires the help of your developers, we've added quick access to the user invite flow directly to the create an app wizard. ## May 26th, 2023 ### HawkScan (3.1.0) Added #### Configurable Redaction List Added support for defining values in the stackhawk.yml to be redacted from HawkScan logs. Added #### Outbound Proxy Support Added support for HawkScan to be used with an outbound proxy. [Outbound Proxy Configuration](https://docs.stackhawk.com/hawkscan/configuration/#hawk) Improvement #### Improved Networking Updated and optimized networking libraries. Improvement #### Fixed HawkScan Logs on Windows Fixed a bug with the location of HawkScan logs on Windows. ## May 26th, 2023 ### StackHawk Platform Added #### Security in Jira Integration StackHawk now supports Atlassian Security in Jira functionality with the existing jira cloud addon. Removed #### Jira Data Center Integration StackHawk has deprecated support for the Jira Data Center Integration. ## April 13th, 2023 ### StackHawk Platform Improvement #### Billing Cleaned up some rough edges around the self-service experience. Improvement #### Slack and Microsoft Teams Integration Updated the Slack and Microsoft Teams integration management pages to be consistent with other integrations. ## April 4th, 2023 ### HawkScan (3.0.0) Added #### gRPC Scanning (Beta) Added support for scanning grpc applications. [gRPC Configuration](https://docs.stackhawk.com/hawkscan/configuration/gRPC-configuration.html) Added #### NTLM support (Beta) Users can now add NTLM authentication to their scans. ## March 28th, 2023 ### StackHawk Platform Improvement #### Bug Fixes Fixed minor bugs throughout the app. ## March 23th, 2023 ### StackHawk Platform Improvement #### Application Environment Cards Environment cards will now display our new API type icons with your next scan! Improvement #### Bug Fixes and Performance Improvements Cleaning up some sneaky bugs and improving the all-round performance of our app. ## March 20th, 2023 ### StackHawk Platform Added #### (Enterprise) Microsoft Azure DevOps Boards Integrate StackHawk with Microsoft Azure DevOps Boards to track findings as work items. [Azure DevOps Boards Integration](https://docs.stackhawk.com/workflow-integrations/merge-azure-devops-boards.html) Improvement #### GitHub CodeQL Code Snippets The relevant code snippets for a GitHub CodeQL SAST finding will now be displayed in StackHawk. Improvement #### Webhook Integration Added the ability to specify which scan event(s) a webhook receives. ## March 9th, 2023 ### HawkScan (2.12.0) Improvement #### Gitlab Dast Report Fixed formatting of markdown links in the Gitlab DAST report. Fixed #### Java Runtime Inference Fixed a bug where HawkScan could select a different version of Java to start Zap on systems with multiple versions of Java installed. Fixed #### waitForAppTarget Fixed a bug where `app.waitForAppTarget` could fail when running in Docker. Fixed #### OpenApi Spec Parsing Fixed a null-pointer issue when parsing incomplete OpenAPI specifications with empty POST request bodies. On this page