On this page:


Summary: this page describes the new features and bugs that have been fixed in the CAST Report Generator 1.11.x.

Content matrix

VersionSummary of contentComments
1.11.0

Can be used with:

  • CAST-RESTAPI ≥ 1.11.x

Component documentation

Resolved issues

N/A.

New templates

The following templates are new in v. 1.11.x:

Note:

  • You should use the above listed templates instead of any similar named templates delivered in previous releases of Report Generator. Older similarly named templates will be removed in a future release.
  • To use these templates, you must ensure that the Quality Standards Mapping extension is downloaded installed before your generate the snapshot data.

New components for templates

REPORTGEN-596 - QUALITY_TAGS_RULES_EVOLUTION

This component is new in v. 1.11.0 and displays the evolution of CAST rules associated to a quality standard category:

Click to enlarge

Notes:

Changes to existing components for templates

REPORTGEN-541 - RULES_LIST_STATISTICS_RATIO

This component has been changed to add the EVOLUTION option:

See CAST Report Generator - Table components - 1.11.0.

REPORTGEN-566 - REMOVED_VIOLATIONS_LIST

This component has been changed to add the CRITICITY option:

Examples:

See CAST Report Generator - Table components - 1.11.0.

REPORTGEN-571 - LIST_RULES_VIOLATIONS_BOOKMARKS and QUALITY_RULE_VIOLATIONS_BOOKMARKS

These two components have been updated as follows: when there is an associated value of integer type, this value is also displayed. See CAST Report Generator - Table components - 1.11.0.

REPORTGEN-596 - QUALITY_STANDARDS_EVOLUTION

This component has been changed to add the MORE option:

This option is valuable only when STD is a category (for example category = STIG-V4R8, tag = STIG-V4R8-CAT1). For a tag, there is no more data and the display is worse (for example tag = OWASP-2017 for which category=OWASP).  See CAST Report Generator - Table components - 1.11.0For example:

Updates

REPORTGEN-565 - Ability to use Report Generator with a CAST dashboard/RestAPI deployed with SAML authentication

If you have enabled SAML authentication mode for your CAST Dashboard/RestAPI deployment, Report Generator will not be able to authenticate to access data. This is because SAML is designed as a single sign-on mode for browsers and therefore non-browser clients (like Report Generator) cannot use the protocol. In order to resolve this issue, CAST provides the ability to define an API Key in the CAST dashboards/RestAPI that can be used to bypass SAML authentication.

How does this work?

You can find out more about this in CAST Dashboard Package - RestAPI authentication using an API key.  To use the API key, you can define it in the GUI or via the command line (both the traditional Windows version and the cross-platform CAST Report Generator for Dashboards version). See the following documentation for more information:

GUI

CLI

REPORTGEN-572 - Obsolete templates removed and renamed

The following obsolete templates are no longer delivered with Report Generator:

These templates have equivalent newer versions that have been delivered with Report Generator for some time (with the word "new" in the template title). Therefore the newer templates have been renamed to match the names of the removed templates. See CAST Report Generator - Templates and output options.