2025 Notable Integrations Bug Fixes

INT-9760

IQ CLI version 2.8.1

The scanner now supports bearer token authentication for container registries.

INT-9759

Bamboo version 3.3.3

The Bamboo plugin now uses setter-based dependency injection for ClmScanTask.

INT-9671

IQ CLI version 2.7.0

Optimized fingerprinting logic to improve the speed at which the IQ CLI processes pnpm-lock.yaml files.

INT-9666

IQ CLI version 2.6.0

The IQ CLI now supports Docker image tar files created with Docker version 28.

INT-9660

VSCode version 1.8.1

The VS Code extension now uses an integrations-specific API endpoint to fetch application data, allowing users with the Component Evaluator role to successfully run component analysis without requiring additional permissions.

INT-9596

Jenkins version 3.28.0

Added a validation step to safely handle invalid or unsupported method descriptors during reachability analysis.

INT-9572

Bamboo version 3.3.2

The Bamboo plugin now explicitly injects required dependencies.

INT-9505

IQ CLI version 2.6.0

The IQ CLI now properly resolves proxy hostnames.

INT-9591

Container scanning-capable integrations and IQ version 195

IQ Server now gracefully handles CVEs with malformed or missing URLs during container scans.

INT-9571

Bamboo version 4.1.1

The Bamboo plugin now uses proper dependency injection to ensure required components are correctly initialized.

INT-9522

IDEA version 4.16.0

The IntelliJ Nexus IQ plugin now properly handles licenses that aren't assigned to a threat group.

INT-9481

Bamboo version 3.3.1

The Bamboo plugin now works correctly with Bamboo 10.2.x.

INT-9465

GitLab version 2.6.0

The GitLab Nexus Platform Plugin now generates vulnerability records for policy violations involving unknown components.

INT-9434

Jenkins version 3.26.0

The Jenkins plugin now correctly includes the necessary files for container scanning.

INT-9386

IQ CLI version 2.4.4 and Jenkins version 3.26.0

The Jenkins plugin now includes a concrete implementation of the Reachability Entrypoint Strategy and properly handles unsupported packageUrl values.

INT-9298

Jenkins version 3.25.0

The Jenkins plugin now properly filters out excluded files and directories during scans.

INT-9219

GitLab version 2.4.2

The create-vulnerability-report tool now correctly handles timestamps that include timezone offsets.

INT-9102

Azure DevOps version 2.5.0

The Azure DevOps extension now allows configuration of SSL certificate validation.

INT-8764

IQ CLI version 2.4.3

The IQ CLI now uses an updated version of the TrueZIP library, resolving issues where call graph analysis failed during Docker image scans.

INT-9119

Jenkins version 3.24.0

The Jenkins plugin now logs the exact file path when a scan error occurs.

INT-9114

Azure DevOps version 2.4.0

The Azure DevOps extension now correctly passes the ignoreScanningError and ignoreSystemError flags to the IQ CLI.

INT-9082

Jira Cloud version 2.14.0

The Jira Cloud integration has been updated to use React and UI Kit 2, replacing deprecated dependencies and restoring full plugin configurability.

INT-9104

Azure DevOps version 2.3.1

The Azure DevOps extension now respects the ignoreScanningError setting by skipping missing or invalid files during scanning.

INT-9086

Azure DevOps version 2.3.1

Corrected a URL formatting issue in the Azure DevOps integration where an extra slash in the IQ Server URL was preventing features from being fetched properly.

INT-9081

Azure DevOps version 2.3.1

The Azure DevOps extension now explicitly specifies Node.js 20 in its configuration.

INT-8870

GitLab version 2.2.0

The GitLab Nexus Platform Plugin now supports schema versions 15.0.7, 15.1.4, and 15.2.1 for dependency scanning reports.

INT-8891

Bamboo version 3.1.3

The Bamboo plugin now includes the GSON library with the correct dependency scope, resolving NoClassDefFoundError issues during scans and ensuring required classes are available at runtime.

INT-8882

GitLab version 2.0.1

The GitLab Nexus Platform Plugin now uses a parameter file to pass credentials to the IQ CLI, ensuring authentication works correctly even when passwords contain special characters.

INT-8848

Azure DevOps version 2.0.6

The Azure DevOps extension now supports Node.js 20.

INT-8723

Jenkins version 3.20.10

The Jenkins plugin now uses the workspace-specific temporary directory for storing scan files instead of the system temp directory.