🛡️ Enterprise Registries, Multi-Branch Support & Workflow Integration

This major update marks a turning point for CybeDefend’s integration capabilities. Version 0.6.0 introduces full support for private container registries, a sophisticated multi-branch management system to track security across your entire development lifecycle, and deep integration with GitHub Issues for automated remediation workflows. We have also overhauled our core AI models and agentic parsing engine for unprecedented speed and precision.

Features

I. Private Container Registry Support

CybeDefend now seamlessly integrates with the industry’s leading container registries. You can now scan private images for vulnerabilities across:

• Public Cloud: Amazon ECR, Azure Container Registry, Google Container Registry.

• Standard Platforms: Docker Hub, GitHub Container Registry, GitLab Registry.

• Enterprise Solutions: Quay, Harbor, and JFrog Artifactory.

II. Multi-Branch Security Management

You are no longer limited to scanning your main branch. CybeDefend now supports a full Branching System, allowing you to track the security posture of every feature or release branch independently.

• Auto-Sync: For GitHub and GitLab linked projects, branches are automatically detected.

• Manual Flexibility: For unlinked projects, simply specify the branch name via the CLI or CI/CD configuration.

• Native IDE Support: The CybeDefend VS Code extension now automatically detects your current local branch to run targeted scans.

III. Native GitHub Issues Integration

Streamline your remediation process by syncing CybeDefend findings directly with GitHub Issues. To fit your team's workflow, we offer three synchronization modes:

• One issue per vulnerability type: Consolidates similar findings (e.g., all SQL Injections) into a single ticket.

• One issue per vulnerability detection: Creates a unique ticket for every single occurrence.

• One issue per affected file: Organizes work by file, perfect for developers refactoring specific modules.

IV. Dedicated Security Segments

To provide better clarity and risk assessment, we have decoupled scan results. CI/CD Security & Secrets are now separated from SAST and IaC findings. This dedicated view allows security teams to prioritize hardcoded credentials and pipeline misconfigurations without them being drowned out by code-level vulnerabilities.

Improvements

I. High-Speed Agentic Parsing

The Cybe Agent's intelligent code parsing engine has received a significant performance boost. The underlying logic has been optimized to handle large codebases much faster, reducing the "time-to-insight" during the next discovery phase of a scan.

II. Enhanced AI: Cybe Analysis & Security Champion

We have upgraded the LLM architecture powering Cybe Analysis and the Cybe Security Champion.

• Higher Precision: Better context window management leads to even fewer false positives.

• Actionable Advice: The Security Champion now provides more idiomatic and secure code fix suggestions tailored to your specific framework and coding style.

Integration & Ecosystem

• CLI & GitHub Actions: Updated to support the new --branch flag.

• GitLab CI: Example templates updated to include multi-branch detection logic.

• VS Code Extension: Seamlessly switches context based on your active Git branch.