Skip to main content

Spectra Assure Docs Changelog

Subscribe to the changelog feed: RSS | Atom | JSON

Show all updatesShow archive

2025-03-13 Documentation updates

ReversingLabs
ReversingLabs
Spectra Assure Docs team

Documentation release for the Spectra Assure CLI 2.6.0 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2025.3.1 Portal version.

CLI​

  • Added new --[show-]models, --[show-]sbom, --[with-]license, and --no-dep[endencie]s options to the inspect command. Their usage has been illustrated by accompanying examples

  • Added the --no-tracking option to the report command

  • Marked the --no-vex option as deprecated in the report command

  • Expanded the admonition about --keep-reference on the rl-secure scan command page to include the Windows issue

  • Added the Windows issue regarding symbolic links to the CLI Troubleshooting page

SAFE​

  • Updated the SAFE Viewer version, release date, links, and hashes to v1.1.0

Other​

  • Created a new How Spectra Assure analyzes software page under Concepts & Reference that explains the different stages in the analysis process. A diagram was used to visualize the entire process and make the order of analysis steps easier to understand

  • Created a new Services category under Concepts & Reference, containing all supported SaaSBOM services sorted by type

  • Reorganized the tables on the Community and language coverage page to improve search, navigation, and content maintenance

  • Added the following new policies to the documentation:

    • New policies in the Malware detection category focus on adware, PUAs and low-quality content in software components and their dependencies: SQ30121, SQ30205, SQ30122, SQ30204, SQ30201, SQ30206, SQ30203, SQ30202

    • New policies in the Digital signatures category focus on issues with countersigning and integrity validation of signatures: SQ20133, SQ20136, SQ20135, SQ20134, SQ20132

    • New policies in the Threat hunting category focus on developer reputation, detecting additional known software supply chain compromises, and identifying behaviors typical for infostealer, keylogger, and rootkit malware: TH15110, TH15403, TH20108, TH20113, TH15402, TH15401, TH20114, TH20112, TH18201, TH15405, TH15108, TH18202, TH15109, TH20110, TH15404, TH20109, TH20111

  • Updated the verified glossary entry with new verification types

  • Added new glossary entries for SaaSBOM, CBOM, ML-BOM, BOV, and VEX

  • Updated the Spectra Assure analysis reports page with new information on new Bill of Materials formats

  • Updated the product release notes

  • Added BTRFS filesystem support on Community and language coverage and File format coverage pages

  • Updated the CycloneDX and SPDX versions in the docs. We're now using CycloneDX 1.6 and SPDX 3.0.1