v2.1.0

Features

• New severities_and_threats Rule for Vulnerability Policies: You can now create more granular and powerful vulnerability policies by defining rules based on a wide range of threat intelligence and risk factors. This new rule type allows you to use conditions such as CVSS score, vulnerability disclosure date, package type, fix availability, public exploits, CISA KEV (Known Exploited Vulnerabilities) status, and EPSS (Exploit Prediction Scoring System) scores. (#666)

Bug Fixes

• Improved Reliability for Secure Policy Creation: We've added automatic retry logic with exponential backoff to handle 409 Conflict errors that can occur when creating security policies. (#668)

Changelog

• 82d7a90 feat: implement severities_and_threats rule bundle (#666)
• a93231a fix(secure-policies): Add retry logic for 409 error (#668)