v3.5.0

3.5.0 (2023-11-07)

Features

• add WAF (a98947d)

v3.4.0

3.4.0 (2023-11-07)

Features

• Activity Contexualized Encoding (f81d3cf)

Team-based assessment

Team-based assessments are available!

Thank you to the Google Summer of Code and @ptechofficial

GSoC and UUID

Adding of UUID to activities and to the scheme (#243).

The following changes that were made as part of Google Summer of Code 2023:

Activity Tag Filter:

• In the Task Description page, a new expansion panel has been added that shows the tags that are linked with this task.
• Added a toggle like switches and removed auto-complete functionality since it is not required now.
• Activity Tag filter added and now task can be filtered based on the tags that have been added in the generated.yaml file.
• Integrated the tag list under the task, so that the user can see tags which are associated.
• Added a reset button under the filters to reset filter selection.
  

Heatmap overlay:

• Implemented a new overlay that displays the task description using expansion panels.
  

Rebalncing for five levels

DSOMM moves from 4 to 5 levels and balances the activities inside the model.

Recreate UI

New Angular Client Side UI

Migration from 2.X
For custom data generation, please check https://github.com/wurstbrot/DevSecOps-MaturityModel-custom
The following subdimension has been renamed:

• Implementation: "Development & Source Control" -> "Development and Source Control"

The container port moved from 80 to 8080

Open Security Summit presentation that explains the work done over the duration of GSOC 22 in detail.

Better SAMM Mapping

Better SAMM Mapping
More Source Control Activities

Enhancement of Education and Guidances, Typos and Minior Application Updates

Enhancement of Education and Guidances, fix of typos and minior application updates

Typo corrections

Thanks to
@ioggstream
@JackColeman

Add AppSec

Add AppSec Dimension
Add USAGE