Professional Edition 1.0.3 Release Notes

Puma Scan’s 1.0.3 release is an update for the Puma Scan End User, Server, and Azure DevOps Editions.

System Requirements

• End User Edition for Visual Studio Code requires Visual Studio Code for Windows, macOS, or Linux.

• End User Edition for Visual Studio requires Visual Studio 2019 v16.0 or higher.

• End User Edition for Visual Studio 2017 requires Visual Studio 2017 v15.9 or higher.

• Server Edition requires a Windows Server with the following:

  • .NET Framework v4.7.2

  • The Build Tools for Visual Studio 2017 and 2019 are both supported. Ensure you have at least 1 of the following installed:

    • Build Tools 2017 version 15.8 or higher

    • Build Tools 2019 version 16.4 or higher

• Azure DevOps Edition requires a hosted Azure Build Pipeline using the vs2017-win2016 or windows-2019 build agent.

Framework Enhancements

• Enhancement: The Puma Scan Engine has been upgraded to version 3.0 of the .NET Compiler API to enable scanning of C# 8.0 projects.

Azure DevOps Edition and Server Edition

• Bug fix: The MSBuildWorkspace class in the Compiler API (Roslyn) v2.9 throws the following exception message to occur when calling the GetCompilationAsync method in some cases.

ArgumentException: Reference of type 'Microsoft.CodeAnalysis.UnresolvedMetadataReference' is not valid for this compilation.
Parameter name: references[1]

Server Edition

• Enhancement: A new command named add-exception has been created. The add-exception command allows for the automated creation of Exceptions in a project’s .pumafile in order to suppress any false positives or issues that have been deemed to be an acceptable risk. Details on using the add-exception command can be found in the User Guide.

End User Edition for Visual Studio

• Enhancement: The Add Puma Scan Exception context menu command in Visual Studio’s Error List has been renamed and moved. The context menu command for suppressing a vulnerability found by Puma Scan now resides in the Error List’s Suppress context menu. The command is now named In .pumafile.

End User Edition for Visual Studio 2017

• A new End User Edition for Visual Studio 2017 has been created yet remains on .NET Compiler API v2.9 for legacy support. Puma Scan Professional users that require the use of Visual Studio 2017 will need to install Puma Scan Professional 2017 from the Visual Studio Marketplace in order to continue receiving critical product updates.

End User Edition for Visual Studio Code

• Puma Scan Professional End User Edition now integrates with Visual Studio Code, a cross platform – Windows, Mac or Linux code editor from Microsoft.